Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4A5B491A90EA11EDA93AADF1F1222468.roa
File: 4A5B491A90EA11EDA93AADF1F1222468.roa (raw, json)
Hash identifier: lzaXbUzNJ9EQ/eyLtWlwNpc0xBAmxGY+2kIZDB5Z5Dk=
Subject key identifier: C3:83:D6:1E:81:2B:F8:1C:82:3A:5E:EE:45:00:9D:9B:1B:2D:B2:9B
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0B5E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4A5B491A90EA11EDA93AADF1F1222468.roa
Signing time: Tue 10 Jan 2023 13:25:46 +0000
ROA not before: Tue 10 Jan 2023 13:25:42 +0000
ROA not after: Wed 10 Jan 2024 13:25:42 +0000
asID: 35913
IP address blocks: 154.16.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2910 (0xb5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 10 13:25:42 2023 GMT
Not After : Jan 10 13:25:42 2024 GMT
Subject: CN=63bd675a-c4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3d:0b:85:20:39:40:f4:67:d2:29:0a:09:41:
f5:3c:f1:47:1d:f8:06:b2:52:19:b4:c1:d3:3a:cf:
45:22:ae:15:6d:e3:02:52:24:c9:65:87:5e:8a:f6:
fa:01:cc:89:20:02:3c:4d:96:89:16:68:41:ed:5d:
5a:87:ed:01:c6:ad:fd:19:9f:4f:44:bb:3f:9c:61:
04:84:73:08:60:be:83:5a:5b:11:74:48:20:2b:0e:
1d:0e:fa:22:df:de:9d:dd:77:e1:17:2b:ff:e8:a1:
48:3e:f0:92:cc:ae:e2:b9:75:f6:22:8f:dc:6e:ad:
42:f3:54:61:af:76:b2:46:c0:9c:34:ee:09:20:c4:
a4:2d:2b:f2:16:27:68:6d:9b:d7:60:b0:7b:78:48:
cb:d1:96:65:d1:ec:18:e9:05:2d:59:91:5f:a1:d1:
ba:2b:79:0d:f5:1c:63:53:e8:82:5e:20:62:36:6c:
56:37:87:f5:54:c7:0b:a7:87:18:a7:19:7c:19:89:
18:d2:d9:48:0a:bf:79:56:8f:41:28:8a:34:31:19:
3a:36:b2:8c:89:36:93:2b:94:a1:5a:b4:20:24:59:
db:44:a9:fd:b9:93:8d:5a:a2:31:f9:28:32:1b:47:
6a:dc:a6:70:74:88:96:34:a3:50:04:c3:f3:18:7e:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:83:D6:1E:81:2B:F8:1C:82:3A:5E:EE:45:00:9D:9B:1B:2D:B2:9B
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4A5B491A90EA11EDA93AADF1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.21.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:b1:eb:2d:ae:aa:05:26:cb:6d:f3:a4:74:80:e7:fb:6a:e4:
fa:f5:39:d7:9b:4c:03:be:74:01:ba:51:aa:11:a2:d1:fa:68:
e4:89:e2:f5:b5:ed:9b:02:7c:e5:ca:30:b1:89:e5:86:1f:1c:
8f:d9:0f:2c:89:5d:a3:60:8b:98:b7:6b:27:e8:8a:03:6f:e7:
95:cc:60:71:90:7a:d9:37:09:52:86:bb:9a:d4:63:b1:3d:34:
be:2b:37:2f:8f:71:56:d6:de:3f:62:22:40:ba:53:8a:66:bb:
c6:43:3e:c5:0e:4f:76:91:82:05:29:42:f7:34:d6:9e:a4:c0:
70:5a:0d:40:f3:a8:ac:fd:f6:2f:91:d1:32:45:5a:46:05:ce:
cf:f9:ab:c9:92:90:c4:4c:f6:d9:de:21:ef:6c:00:21:c9:10:
a4:c2:9f:7d:04:83:58:4a:a0:0d:bc:08:ff:b2:b9:88:c3:e3:
3b:de:09:cc:db:7f:46:fc:e7:f2:13:37:b8:df:3e:6e:63:02:
ac:92:b1:c8:11:66:fa:90:85:85:f3:95:05:01:66:97:93:41:
4c:85:cd:d2:94:53:df:3f:e0:f0:a9:04:94:76:ea:10:a6:e8:
5a:1f:81:c8:8e:e1:ed:8e:fe:8f:22:e6:b9:01:4d:6a:16:13:
8c:64:7c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 2 07:43:59 2023 by rpki-client on console-ams.rpki-client.org