Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/47A954D2D45B11EDA1C1218CF1222468.roa
File: 47A954D2D45B11EDA1C1218CF1222468.roa (raw, json)
Hash identifier: zMP6pov1xI8JOGzuZC68++PdqQFLQuZ+y1q64pkt7QI=
Subject key identifier: B5:54:4D:67:5A:16:CC:96:B5:6F:7A:72:99:45:89:43:40:B0:F0:67
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D30
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/47A954D2D45B11EDA1C1218CF1222468.roa
Signing time: Thu 06 Apr 2023 09:13:23 +0000
ROA not before: Thu 06 Apr 2023 09:13:19 +0000
ROA not after: Sat 05 Apr 2025 09:13:19 +0000
asID: 328608
IP address blocks: 154.16.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3376 (0xd30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 6 09:13:19 2023 GMT
Not After : Apr 5 09:13:19 2025 GMT
Subject: CN=642e8d33-735f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:83:4c:38:bb:42:be:94:9a:27:1b:cb:10:
a8:a5:1e:5c:e6:65:44:b5:c8:85:77:b8:ec:8c:40:
e1:4c:4e:4a:7c:6f:bd:39:96:03:f0:2e:e6:fe:78:
6b:aa:03:83:45:d4:59:ae:fc:2b:4b:7f:32:36:87:
0c:73:f7:c8:b5:2c:14:4c:6d:5d:df:03:0d:4c:71:
94:b5:99:09:ae:c8:93:e6:35:86:ea:5a:c6:2f:0a:
82:e6:a3:17:bd:c9:a3:7d:17:d8:30:c8:93:52:f9:
62:64:f4:34:45:fb:2c:c3:33:c3:93:bc:e1:78:b5:
d1:f2:6b:a6:58:f9:4e:f3:3a:49:b8:ee:c0:cf:7c:
14:3f:21:66:09:8d:8c:10:90:27:6f:90:49:1a:c1:
79:cc:ce:fc:39:0d:64:5d:a6:35:39:23:11:d9:d6:
c2:ea:a4:10:69:ab:ac:58:b4:25:d7:68:fd:a0:8d:
87:82:da:79:d9:92:95:4e:87:54:c4:2e:78:e9:45:
24:fd:42:14:64:7b:28:8b:8c:4e:54:4e:73:74:85:
4d:7d:c5:0f:ca:94:91:d7:9d:d2:77:16:36:ac:0e:
95:dd:e3:12:bf:4a:74:fa:ee:58:9e:c2:1e:70:ec:
97:ca:9a:b4:61:d7:c5:a0:9e:75:57:d3:4f:77:df:
fa:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:54:4D:67:5A:16:CC:96:B5:6F:7A:72:99:45:89:43:40:B0:F0:67
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/47A954D2D45B11EDA1C1218CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.23.0/24
Signature Algorithm: sha256WithRSAEncryption
38:eb:4e:bd:3a:4f:6d:30:fa:72:ec:06:eb:36:5a:08:b1:19:
26:02:dd:e3:51:d5:89:84:f0:06:bd:2b:e7:01:43:27:77:89:
1e:c0:1f:e1:c4:20:44:d8:e5:6b:41:bb:29:df:ed:0e:9a:7e:
92:d9:95:89:96:87:47:cd:f8:5b:15:f0:15:76:47:5a:8a:f5:
01:c0:ce:33:fa:77:31:42:29:be:b2:5d:76:fd:8b:8e:fe:af:
f6:10:e3:ba:ac:d7:cf:f2:4c:88:81:95:10:bf:f5:21:36:e8:
58:da:29:2a:b3:5e:4f:01:be:ab:ce:f0:8f:88:d7:cd:99:0e:
fa:ab:67:02:b4:27:91:42:f6:8b:3a:b8:eb:d5:df:49:a1:48:
55:d5:37:05:18:9f:2c:0f:36:6c:90:c0:41:7b:90:b9:bf:6c:
a1:04:4f:ec:b4:e5:02:fc:a1:b1:42:16:2c:dd:68:ee:a2:99:
97:40:4a:fc:0e:c0:e2:a5:03:d7:d3:33:63:f2:73:89:08:11:
25:48:1d:61:cd:58:84:29:1f:0d:57:76:c4:9c:3d:8e:93:69:
6c:2a:68:96:56:83:9f:47:65:55:ab:df:59:db:c7:c9:db:97:
c5:b0:31:c6:fc:6c:17:75:b4:9c:fc:05:92:d2:5b:d6:c1:cb:
63:62:39:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org