Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/51E8DBB80BA911EE9418EB594AD9E6FC.roa
File: 51E8DBB80BA911EE9418EB594AD9E6FC.roa (raw, json)
Hash identifier: enKeaCRPZvebRgcLnr8RJVt/cGOGejrDs0djP5ic/C0=
Subject key identifier: C2:DF:6E:98:1D:CE:2A:75:E2:2E:E5:8C:8A:BE:07:6D:A0:64:F3:0C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F84
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/51E8DBB80BA911EE9418EB594AD9E6FC.roa
Signing time: Thu 15 Jun 2023 18:20:35 +0000
ROA not before: Thu 15 Jun 2023 18:20:31 +0000
ROA not after: Mon 16 Jun 2025 18:20:31 +0000
asID: 48678
IP address blocks: 154.16.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3972 (0xf84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 15 18:20:31 2023 GMT
Not After : Jun 16 18:20:31 2025 GMT
Subject: CN=648b5673-4b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:f0:e0:49:2b:71:fc:27:01:8d:a5:47:7e:
7f:95:d7:c4:c1:bf:73:9b:98:40:61:92:08:2a:d2:
3c:cd:f9:8c:12:9b:35:e8:a2:4a:3d:38:59:85:04:
a1:0d:38:93:e5:ce:e3:d1:d0:00:3a:20:57:b7:40:
97:21:bd:00:c6:a4:ca:10:da:83:f8:61:58:35:00:
7b:3c:a3:76:39:aa:6a:5f:16:12:1d:1d:9c:46:f0:
90:de:49:7d:36:1b:ac:f7:d8:4a:d4:f2:5c:9c:b4:
5c:4a:1c:5e:4d:6f:d3:6a:60:5c:f1:af:6a:c2:bc:
e9:23:47:c9:94:4c:33:cc:46:6c:94:11:52:bb:b8:
a2:16:c1:14:6e:9c:a5:63:57:b4:57:d5:49:f8:48:
23:3b:2f:01:03:03:b6:02:ee:c6:1f:4c:19:6b:f6:
42:aa:70:06:49:ab:16:a2:de:b5:79:a2:7e:2a:c1:
b5:a2:68:bc:7f:f5:52:2d:b1:1e:24:f3:eb:f1:a5:
0a:78:65:52:38:d4:88:58:8d:b1:1d:e1:77:06:f3:
cc:13:a1:1a:06:5b:42:7d:22:c9:e3:e2:6a:34:06:
a8:a3:2b:dc:a6:e4:ed:e8:31:2d:17:12:fc:ee:6c:
44:d3:50:64:e1:22:1f:ac:61:c6:16:7d:82:6a:88:
8f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DF:6E:98:1D:CE:2A:75:E2:2E:E5:8C:8A:BE:07:6D:A0:64:F3:0C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/51E8DBB80BA911EE9418EB594AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:69:5f:34:59:af:f7:46:bb:5f:d2:ad:35:eb:41:31:83:80:
14:5d:89:07:35:57:a7:67:6f:26:58:dc:7c:49:53:d3:44:03:
a6:ee:93:67:70:6e:00:d2:7f:93:33:7f:c9:93:e9:d6:42:bb:
be:50:d5:fd:08:1b:eb:2c:3b:1a:d8:9c:a9:f0:5a:73:2c:8d:
64:61:a2:8b:77:af:2a:70:61:c0:c7:6a:6d:32:ae:a1:b6:e5:
71:57:81:75:0e:4e:88:ee:a5:cf:90:98:60:04:44:8e:67:67:
6e:b2:c6:08:f2:8f:fb:c3:09:91:94:70:10:32:b6:21:1e:2c:
d9:c3:d5:6a:21:14:dc:38:0a:b9:11:8f:9e:65:db:e0:39:8f:
c1:7b:d4:e0:24:c5:3c:7a:5d:32:e2:4b:71:60:f5:5c:19:09:
56:de:0e:21:b0:f1:1b:9e:22:03:7c:be:a9:22:52:f6:41:84:
3b:77:97:a1:a4:37:52:e3:15:ed:0e:cf:e4:e0:84:21:0d:15:
a2:6e:31:a8:ea:ad:0b:b4:bf:e6:2d:87:47:3d:dd:0e:7d:8d:
91:42:9f:7d:f2:8b:f0:41:85:2f:a2:27:d7:fa:c0:34:22:07:
b5:1a:1a:6f:28:f6:64:2b:04:d3:35:29:b2:aa:c0:23:ad:22:
8d:f7:53:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org