Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/481C200C674A11EEBD8883874AD9E6FC.roa
File: 481C200C674A11EEBD8883874AD9E6FC.roa (raw, json)
Hash identifier: lLIjqDsFginnAqpP2FIFsPX3Y1GUmaKmiI/rlHcQtus=
Subject key identifier: 7E:6B:AE:AD:B3:63:92:5F:00:3E:1C:05:A3:8A:08:9B:8C:C1:95:6E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 12BD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/481C200C674A11EEBD8883874AD9E6FC.roa
Signing time: Tue 10 Oct 2023 08:52:03 +0000
ROA not before: Tue 10 Oct 2023 08:52:00 +0000
ROA not after: Wed 23 Oct 2024 08:52:00 +0000
asID: 834
IP address blocks: 154.16.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4797 (0x12bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 10 08:52:00 2023 GMT
Not After : Oct 23 08:52:00 2024 GMT
Subject: CN=652510b3-1957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:10:66:ad:6a:e2:07:aa:44:55:85:00:3c:5f:
39:f6:cf:69:c8:78:35:49:1e:c4:79:59:8f:fe:61:
d9:f1:b8:ce:ad:bb:3d:d8:47:58:12:cf:08:95:d4:
5a:ae:1a:79:eb:b5:54:6b:a8:94:81:1f:cc:83:35:
be:a4:0d:5c:33:d3:4c:9e:5e:d1:2e:94:8a:b6:8b:
b1:2b:4d:bc:af:97:84:4f:fb:dd:27:eb:c2:59:21:
da:19:d8:ec:b1:ae:a6:b6:9f:ef:5f:c0:f4:c6:2a:
35:9e:56:85:d1:a4:f4:89:c7:1f:81:1b:23:86:6b:
80:4e:ca:ee:56:94:41:1c:f2:86:93:21:34:3d:e5:
1d:df:02:f4:5c:37:d2:1b:9c:b0:02:97:e5:a6:52:
8f:a1:60:1a:2b:d0:ec:81:d0:98:7d:25:da:21:62:
d6:45:f2:51:ca:0f:d6:e9:70:16:d7:ee:bd:b9:96:
10:21:e0:45:26:1a:bf:3a:c1:8d:ce:80:1b:3c:88:
90:19:db:c0:a1:73:6a:a5:63:a3:ba:65:5c:12:45:
91:12:98:79:10:7b:c7:78:b5:ac:45:35:4c:8a:9e:
6f:3a:4f:9d:56:6b:be:39:61:d6:72:ee:b6:b9:4a:
30:b3:a9:ec:bb:c8:c5:88:28:dc:9d:1a:0c:84:e6:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6B:AE:AD:B3:63:92:5F:00:3E:1C:05:A3:8A:08:9B:8C:C1:95:6E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/481C200C674A11EEBD8883874AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.51.0/24
Signature Algorithm: sha256WithRSAEncryption
58:2a:c2:59:4c:f8:40:47:6f:f0:ef:02:3a:03:56:e5:06:73:
4e:08:ab:e9:fb:be:40:55:67:dc:de:f5:3d:f1:52:e5:4f:68:
a1:be:0f:ff:06:a8:fd:ea:ea:80:f8:3e:c3:14:4d:95:29:5c:
62:a8:ed:f9:bb:83:57:06:90:38:67:d8:bf:c7:03:78:af:6b:
b8:e4:34:e8:4e:01:37:31:24:49:0d:09:b6:15:34:78:02:86:
7e:85:f5:06:00:bc:76:37:1d:a0:1f:a7:68:33:5d:a6:6c:d2:
a0:aa:e3:d1:87:72:20:49:21:c7:89:e2:85:52:00:03:7b:7d:
0a:96:7a:b3:d1:42:fc:77:2e:cf:f0:f7:22:90:81:00:a1:f8:
db:05:00:d0:13:bb:c7:4d:7b:7c:86:3d:36:c0:1b:ea:7a:09:
db:e5:d7:f9:c7:68:79:62:5e:fc:e2:29:f6:80:44:de:f1:8b:
98:40:7f:2b:50:86:47:0a:d1:4a:af:35:b3:24:27:63:30:e0:
00:34:9b:e4:f7:d2:5f:02:65:59:ba:3b:54:47:3c:fb:e9:6b:
9c:c8:e2:94:dd:d2:66:57:cf:d5:1e:9a:fc:d0:c7:3c:18:32:
86:4e:48:75:46:2a:4e:7e:c2:97:13:d1:70:8b:7f:03:e1:e5:
19:cf:aa:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 14:33:13 2023 by rpki-client on console-fra.rpki-client.org