Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/532A36B805EE11EE93FF8A204AD9E6FC.roa
File: 532A36B805EE11EE93FF8A204AD9E6FC.roa (raw, json)
Hash identifier: HieN/NwqpObFFWR9rDzoy9LmPSDxAzdt9e3HyZ0ySXQ=
Subject key identifier: E2:68:7E:A5:3A:89:F9:E3:B0:0C:C7:9B:C5:DB:CB:A9:B3:22:E0:57
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F02
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/532A36B805EE11EE93FF8A204AD9E6FC.roa
Signing time: Thu 08 Jun 2023 11:19:25 +0000
ROA not before: Thu 08 Jun 2023 11:19:21 +0000
ROA not after: Sat 07 Jun 2025 11:19:21 +0000
asID: 61138
IP address blocks: 154.16.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3842 (0xf02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 8 11:19:21 2023 GMT
Not After : Jun 7 11:19:21 2025 GMT
Subject: CN=6481b93d-2818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:24:05:c2:b8:42:0d:bb:65:4e:56:eb:4b:
eb:d3:29:42:c4:89:80:44:ef:b4:f3:88:02:61:be:
bb:d3:45:8c:ef:8a:78:4d:9c:bd:c6:53:62:12:39:
03:a3:aa:c9:65:c6:94:df:13:59:28:8d:ad:22:d1:
ce:ae:33:9e:dd:62:27:e5:d9:5a:2f:ee:12:07:2e:
7b:13:53:d2:ac:fc:78:0b:1e:f9:00:60:f3:6b:fe:
fc:99:2e:69:21:a0:37:97:84:f6:6b:6b:05:52:eb:
2d:04:80:9c:1b:e4:30:0b:6c:d8:1c:b3:20:2f:c8:
18:02:fa:51:29:55:fb:72:31:5a:fb:f6:e0:03:e4:
7b:28:69:7c:c4:a0:ea:ef:5a:74:63:5c:42:7f:4e:
80:43:d3:ec:9e:3a:57:6b:57:93:80:b7:70:66:e6:
7e:34:60:8f:34:18:a9:1d:74:32:c5:48:df:8e:6a:
ce:d0:98:01:41:68:fc:36:23:20:aa:5f:a2:88:fd:
62:53:a9:62:00:08:e1:0c:74:91:76:01:33:a6:c4:
21:82:13:87:ee:a1:5b:17:af:dd:50:f5:12:b9:a1:
44:e2:d3:ef:75:10:fe:a7:e9:ab:d0:9f:59:d9:19:
e6:85:3a:6f:b5:55:95:e2:d2:3a:9b:ed:ac:2f:84:
9b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:68:7E:A5:3A:89:F9:E3:B0:0C:C7:9B:C5:DB:CB:A9:B3:22:E0:57
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/532A36B805EE11EE93FF8A204AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.61.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:da:3a:70:a4:06:09:b7:af:66:9e:29:d6:f0:08:81:f5:9d:
0a:d2:8d:d7:10:b0:ca:61:f4:6f:27:82:35:a3:ba:6a:dd:18:
17:f0:58:28:89:73:11:3b:d9:b2:d8:68:6b:07:d0:b5:8d:f7:
aa:55:bf:3e:52:15:0a:2f:da:b4:bd:d2:17:bd:e5:29:a6:86:
3d:c4:d0:18:50:4f:37:d2:e5:07:e5:79:df:44:ce:99:2e:38:
a9:3d:9d:79:41:20:dc:ae:a5:87:f7:6f:f6:b0:3b:fc:09:9b:
7c:61:79:bf:20:05:7c:64:8b:06:b1:d4:61:7b:20:30:27:8e:
5d:9c:d5:2e:5f:3c:77:2e:7a:c3:25:8c:7b:84:63:ce:97:46:
d3:3f:ec:f3:70:92:0f:23:64:8a:18:33:35:f0:51:e7:bc:a9:
93:b6:2c:f2:c5:fe:d7:04:a3:08:da:d4:c2:16:79:54:22:c8:
9c:28:4a:04:f0:5e:e6:4b:bb:32:a8:0c:27:05:6c:ea:9c:98:
09:40:c8:8e:38:31:69:bf:5b:00:71:57:0c:a9:31:81:81:97:
2e:16:ac:d6:81:65:ba:b5:7a:a2:66:45:32:59:77:df:3a:9b:
d7:61:21:b1:70:2e:a5:74:01:92:c0:40:42:e1:84:8c:0a:90:
ac:bf:29:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org