Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4AC86562FFE011EDB3D9AF294AD9E6FC.roa
File: 4AC86562FFE011EDB3D9AF294AD9E6FC.roa (raw, json)
Hash identifier: eTr/LXRnmV/7ZhUHQXew4LrbQGx23/buV5WbI+xAkAc=
Subject key identifier: 81:9E:DD:42:D0:C8:44:1E:87:8D:BF:AC:61:FE:CB:06:76:97:13:24
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E46
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4AC86562FFE011EDB3D9AF294AD9E6FC.roa
Signing time: Wed 31 May 2023 18:23:51 +0000
ROA not before: Wed 31 May 2023 18:23:45 +0000
ROA not after: Sat 31 May 2025 18:23:45 +0000
asID: 834
IP address blocks: 154.16.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3654 (0xe46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 31 18:23:45 2023 GMT
Not After : May 31 18:23:45 2025 GMT
Subject: CN=647790b7-b4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:ea:b1:c6:e4:a7:b4:49:6f:fc:48:50:88:
ad:67:45:d5:bf:a4:65:23:4c:92:61:51:9b:bd:73:
78:fa:e8:65:03:e9:15:ea:91:05:ac:37:1f:50:92:
9b:e2:e1:48:86:06:53:21:5b:c3:eb:44:2b:76:61:
09:f0:86:cc:33:a0:8f:13:6c:88:97:69:c6:9a:91:
2d:01:ab:59:16:d4:b9:54:bb:ce:20:71:37:ee:77:
e5:69:56:37:0d:6d:48:f2:10:67:fc:ca:5a:d1:8b:
15:2f:e8:2c:42:45:fb:8c:bd:fb:b1:16:cc:78:44:
61:0a:a4:06:4f:6b:54:4c:8e:42:f5:87:42:6b:c9:
88:10:71:3c:bf:78:a7:c1:c0:a8:a0:3b:ee:ad:83:
3d:4e:33:10:56:4d:ee:62:5f:ce:86:4d:4a:77:6c:
d3:1a:91:2b:e4:e5:4c:84:2c:35:77:be:68:93:31:
2a:07:6f:71:92:d7:4b:0d:f9:2c:2f:2f:7a:58:09:
57:5b:92:9c:62:f5:2b:1b:bb:46:5c:1e:29:23:89:
0a:9b:10:b4:3c:94:13:37:94:04:b4:67:51:26:b0:
af:5c:cb:7e:db:20:ad:65:9c:43:a7:4e:e8:ac:25:
a2:88:f1:41:5c:5b:e5:e5:fa:02:70:4b:ef:a8:38:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9E:DD:42:D0:C8:44:1E:87:8D:BF:AC:61:FE:CB:06:76:97:13:24
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4AC86562FFE011EDB3D9AF294AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.42.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:d6:25:4f:97:77:fc:42:52:d4:fd:01:2b:88:0c:d8:1b:e9:
00:c5:d9:c5:d6:68:99:fd:99:f3:0f:ae:9c:15:b6:06:a0:44:
74:1f:df:27:77:e6:aa:79:98:d3:1e:e3:d9:04:e0:f8:65:73:
59:d6:ac:2e:11:d3:20:6d:9e:58:62:07:f0:9e:79:99:ea:cc:
c9:8c:ed:30:b9:43:a3:aa:05:26:a3:70:73:a4:a7:ab:a5:03:
8e:12:e8:b9:3d:07:ef:d1:65:07:71:58:57:2f:2a:be:c2:c2:
e3:5d:db:9d:22:d5:ec:dc:b5:af:30:57:9a:e1:e3:88:e4:73:
4a:5f:23:70:f9:71:1f:21:5e:bb:d9:97:c5:c8:e5:92:15:42:
c3:5e:61:60:3f:02:28:a7:5e:28:81:ca:17:ef:c6:73:fd:b8:
2b:8f:c1:22:56:27:16:dd:6f:33:61:35:d4:29:b2:1f:0c:96:
42:97:64:1a:af:1d:4d:d6:a7:a0:89:1a:02:14:47:0d:9e:15:
5f:7b:3f:eb:6e:de:cb:2e:4b:86:85:a3:3b:e0:62:6e:09:ed:
5c:0b:c1:69:a2:e0:a4:ef:95:2e:4c:24:f9:16:65:a8:dc:e2:
75:95:b5:63:cb:66:e8:98:9d:f1:57:8d:6a:c4:e2:44:fc:c2:
df:00:bf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org