Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/58026874265311EEB208AC254AD9E6FC.roa
File: 58026874265311EEB208AC254AD9E6FC.roa (raw, json)
Hash identifier: 31Yg5e19m+U5Ufqcm8r9bTE82bEbK+gYhCAn4FV7aeQ=
Subject key identifier: 1D:63:29:59:4B:BF:0F:9E:0E:B5:43:1E:9A:AD:6B:EF:12:B7:00:7D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 10B0
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/58026874265311EEB208AC254AD9E6FC.roa
Signing time: Wed 19 Jul 2023 16:43:10 +0000
ROA not before: Wed 19 Jul 2023 16:43:04 +0000
ROA not after: Sat 19 Jul 2025 16:43:04 +0000
asID: 174
IP address blocks: 154.70.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4272 (0x10b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 19 16:43:04 2023 GMT
Not After : Jul 19 16:43:04 2025 GMT
Subject: CN=64b8129d-e0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:f4:59:74:d1:53:56:d0:02:63:55:1f:0e:
50:17:6f:9c:2c:65:cc:23:f8:2e:5c:4b:01:db:b7:
ed:41:dc:92:bc:b9:05:6e:54:d5:92:95:af:ae:b3:
5f:28:84:e9:39:41:c4:64:4d:10:da:56:77:1a:ee:
33:c8:35:23:4b:e3:eb:42:d4:e7:71:c8:ad:31:f6:
3a:7c:b1:50:3e:3e:41:e8:ca:e5:2e:ef:b1:52:cb:
e5:a6:f7:0e:e1:f1:28:a8:07:2f:6e:05:f2:00:16:
34:83:4d:1e:af:f7:da:3e:7b:ba:e3:a2:b4:6d:cc:
6b:e8:1b:04:9f:f5:e1:a7:5c:c2:93:77:3d:e6:08:
82:71:50:5b:a2:7c:55:f7:90:02:3d:2d:95:b9:b3:
34:af:26:e7:d8:64:1a:79:a1:9a:56:7c:dd:9e:b4:
b3:a3:68:a4:d9:ec:7b:40:09:a4:51:8b:1a:7a:c4:
6d:3e:3a:fa:75:19:00:98:0a:09:df:b7:f2:5d:56:
1d:49:96:6d:33:73:76:98:93:6a:a0:64:94:b5:76:
7d:ee:59:95:02:f1:e5:fc:d5:34:01:0e:9f:5a:d4:
fe:6b:73:37:e6:71:c1:25:1e:1e:5a:bd:be:28:fa:
b4:07:a2:67:6c:6f:7f:3d:34:78:77:71:0b:53:9e:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:63:29:59:4B:BF:0F:9E:0E:B5:43:1E:9A:AD:6B:EF:12:B7:00:7D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/58026874265311EEB208AC254AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.70.152.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:dc:32:50:e1:2f:de:01:42:25:35:3d:c5:9a:2d:39:4c:f8:
2e:f0:28:dc:b3:30:39:fc:14:a4:54:8d:b0:4e:55:3b:e5:7b:
c0:94:16:11:98:f2:a7:ef:3e:e2:e6:a9:2e:f6:41:9f:af:28:
30:f5:86:f0:3a:ed:81:f1:20:c6:68:23:79:7c:bd:70:26:6f:
6f:3c:68:f0:7e:2d:7c:e0:cd:de:88:a4:07:13:1d:5b:37:3c:
70:11:83:75:c6:85:b3:b7:71:a8:f4:e0:d9:0b:23:f6:6f:db:
8e:71:08:33:b9:57:19:1c:b5:0b:e8:e5:31:7a:1c:3c:84:38:
e5:4f:5d:21:f2:9b:56:ac:1f:72:0f:11:89:6d:33:0a:f1:43:
91:c5:8c:c5:c6:fa:3c:13:4d:9e:c2:e4:3f:55:a7:e7:36:03:
67:35:0c:a2:ab:e4:1e:5d:96:05:3d:2f:46:11:54:29:37:e1:
48:1e:9d:cd:0a:4c:5b:d4:2d:62:c6:49:23:a9:58:2d:c9:29:
46:1f:ec:55:6c:db:b1:4a:fb:81:ce:d3:0b:53:02:94:df:03:
cc:be:69:b8:61:c7:ca:2b:79:f4:aa:a7:6b:31:c5:5b:f8:b6:
bd:57:6e:a2:eb:e5:2d:8f:e9:01:6d:b8:a2:90:7a:e6:f2:59:
20:49:db:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 25 15:29:38 2023 by rpki-client on console-ams.rpki-client.org