Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/59645AC6FFB911ED85C7BF354AD9E6FC.roa
File: 59645AC6FFB911ED85C7BF354AD9E6FC.roa (raw, json)
Hash identifier: WZcGo2EOjUpvIQ1VdMOM0m5C9G+/We6urSOPWM9dNMw=
Subject key identifier: B5:CF:67:D1:F8:50:95:85:C0:3A:59:74:CC:3D:7C:19:4B:D8:30:3F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E08
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/59645AC6FFB911ED85C7BF354AD9E6FC.roa
Signing time: Wed 31 May 2023 13:45:05 +0000
ROA not before: Wed 31 May 2023 13:45:01 +0000
ROA not after: Fri 30 May 2025 13:45:01 +0000
asID: 834
IP address blocks: 154.16.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3592 (0xe08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 31 13:45:01 2023 GMT
Not After : May 30 13:45:01 2025 GMT
Subject: CN=64774f61-1f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:08:d8:f2:bd:79:95:f5:d8:ec:72:fa:d4:
38:04:7f:c7:06:e0:98:8f:86:8c:81:4d:80:ab:1f:
05:7c:4a:3d:04:69:f1:b0:eb:f4:d1:c7:fa:4b:e7:
6a:3d:cb:2d:f9:3d:b2:74:c9:1a:37:90:9b:c2:10:
83:c9:1e:f8:c5:95:25:f0:99:43:71:14:44:27:e3:
da:37:d7:2d:b3:35:09:bb:2e:4a:00:b4:1a:6b:99:
b1:3e:42:31:55:30:b1:e4:58:5d:2b:65:fe:e8:c7:
cf:fa:9d:18:3b:e2:49:d9:cc:28:a1:13:f2:b3:9e:
e8:84:f3:a5:f3:8f:61:24:09:32:9d:47:59:4d:94:
28:fe:dc:57:00:78:59:90:98:b8:55:ff:62:b5:07:
d1:c4:3f:4b:06:c9:f9:a5:cf:1f:13:14:1e:9d:82:
84:e0:33:91:93:df:6f:e2:82:a0:a3:56:2f:27:95:
dc:11:04:ea:c0:5a:0b:cc:53:0e:dd:07:a0:64:94:
16:9b:6e:c0:07:e4:e1:aa:bc:0f:2b:e6:f2:35:e0:
61:45:40:8e:81:d3:62:9e:17:62:be:4c:04:d8:eb:
22:90:88:86:17:12:79:9e:5a:3f:21:1c:27:6f:0a:
72:11:69:59:d8:67:90:e6:90:5d:5e:65:db:ab:4e:
da:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CF:67:D1:F8:50:95:85:C0:3A:59:74:CC:3D:7C:19:4B:D8:30:3F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/59645AC6FFB911ED85C7BF354AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.16.0/24
Signature Algorithm: sha256WithRSAEncryption
66:51:40:29:3e:62:44:f2:ad:1e:0b:7d:34:2f:c5:b8:be:a9:
da:65:10:2f:59:3b:ab:12:0a:a9:c8:06:66:2d:02:e0:96:c2:
15:02:3a:4e:ab:31:41:c1:3c:dd:d7:ad:5b:3a:57:5a:ac:09:
61:c3:0f:f0:d4:f5:f1:ef:62:b3:d4:ef:36:19:6b:25:32:98:
63:59:63:ad:cf:c5:a1:a0:56:76:19:90:be:a3:37:bf:33:d3:
4f:7d:86:7d:ba:2d:04:c3:8a:55:9e:d4:29:0a:2b:10:4f:56:
3c:be:59:e7:0a:d9:dc:ec:9d:d5:4f:e9:03:29:da:6f:65:05:
a1:ca:76:ca:0e:5a:80:de:49:ca:f4:a9:3e:5b:71:d9:d4:bf:
71:ee:9c:98:f5:71:ca:41:dd:d2:0a:7a:f6:8a:3a:7c:9f:dd:
df:13:0b:fc:0e:2d:b7:98:ec:51:1b:eb:24:66:fe:14:a3:ba:
67:2c:cd:99:d3:2c:cf:60:96:ea:d0:83:52:6a:8b:90:bc:c6:
6c:71:4c:bc:cd:fd:a1:da:ab:e8:63:11:8d:92:f7:a2:c0:43:
da:cb:09:5d:0c:d6:77:39:70:e6:98:01:8c:f6:93:90:75:4e:
ad:20:fa:e2:20:6d:49:64:2e:d8:d8:3a:ea:34:f4:c0:d0:f7:
03:9a:82:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org