Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5A44031A3FA111EEA18A19224AD9E6FC.roa
File: 5A44031A3FA111EEA18A19224AD9E6FC.roa (raw, json)
Hash identifier: Fd1jGMPNRezhfMocFZixwyziVk+sYTph+xkS8bpIQ28=
Subject key identifier: 28:C8:BC:79:95:F3:C8:9F:4C:21:E6:1F:D1:AA:A3:E5:2C:E5:AE:2E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1192
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5A44031A3FA111EEA18A19224AD9E6FC.roa
Signing time: Sun 20 Aug 2023 21:34:33 +0000
ROA not before: Sun 20 Aug 2023 21:34:29 +0000
ROA not after: Tue 20 Aug 2024 21:34:29 +0000
asID: 834
IP address blocks: 154.16.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4498 (0x1192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 20 21:34:29 2023 GMT
Not After : Aug 20 21:34:29 2024 GMT
Subject: CN=64e286e9-4b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:6f:c9:8c:80:8e:4c:88:45:62:3a:48:22:
61:e3:1a:12:b5:cb:7c:8f:1b:b7:79:1f:f3:4d:15:
bd:47:b1:dc:1d:e8:88:4e:0b:4b:42:dd:db:99:d9:
2b:9c:39:9c:62:d1:d0:c6:6e:ef:5e:93:a4:06:2c:
e9:7e:95:2d:7c:be:20:98:68:c2:eb:5e:40:6a:40:
c2:cb:b4:db:40:e7:fa:00:53:77:39:fe:cd:8f:40:
e8:7c:26:e8:c6:70:d3:95:b7:f8:ca:e8:c2:3d:bb:
99:7e:aa:7d:b2:d7:d7:b2:db:da:1e:66:76:93:e9:
08:da:bd:cf:cd:73:0f:d8:51:93:bc:42:58:de:26:
43:72:62:f3:63:ea:90:df:80:19:6f:cd:d5:b5:dd:
bd:db:48:8d:d0:de:52:eb:63:99:07:46:76:ef:0d:
bd:8e:6d:6f:7b:7c:c8:c4:cd:a2:3f:c7:10:8a:bb:
0e:49:ff:27:7f:b4:b9:89:c8:f6:25:50:f9:39:4f:
8e:ad:0f:b7:33:04:6b:d3:98:0e:f1:27:b4:9c:f6:
72:d7:ce:1e:a3:41:f8:16:75:21:df:6f:6a:66:e6:
c7:72:f0:05:f2:f5:06:85:69:d3:d8:b4:46:5f:96:
c4:43:b9:ee:a9:47:4f:bd:2c:50:12:15:a4:de:fa:
0e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C8:BC:79:95:F3:C8:9F:4C:21:E6:1F:D1:AA:A3:E5:2C:E5:AE:2E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5A44031A3FA111EEA18A19224AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.33.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:0d:fa:b8:99:2d:1b:8e:df:6f:4f:f0:83:9b:e1:10:16:8c:
dc:61:9f:48:a3:55:be:6a:6b:53:97:ef:8e:4f:f4:22:03:8a:
a9:27:18:38:40:8b:0c:1d:17:60:fe:a0:04:d9:d6:8b:3d:07:
33:29:a2:cb:d1:25:68:e0:2c:c5:33:e4:6e:cf:fa:9d:ca:b1:
88:d1:c3:8b:a7:01:e1:e5:d7:66:b9:e0:65:24:22:94:00:65:
e7:3e:7e:d1:5a:16:61:9f:df:89:2b:e3:d1:2f:b4:d7:33:62:
4b:5d:06:1d:74:ea:b1:b6:ae:2f:2e:ed:75:8a:d1:5a:f5:c9:
c6:f2:28:01:b9:33:5e:d9:c6:ec:a2:25:13:2a:72:31:a1:8b:
da:92:28:5e:ca:56:48:81:2b:45:64:1c:6d:a1:00:53:00:fa:
27:a2:75:12:28:7b:f3:0f:33:55:67:c0:73:5b:76:12:0b:da:
b8:c9:ce:1a:e3:49:96:c9:be:0c:93:48:cd:1f:0d:cf:2a:df:
16:c3:c3:4f:14:8e:cc:7a:7d:61:ee:b3:c1:c8:cc:5c:32:86:
43:43:fd:c8:76:5c:ff:e7:10:e5:56:5b:23:ee:4f:68:d5:b5:
a8:a9:70:5f:c7:44:19:28:4f:e3:d7:e2:ae:a2:72:34:85:5a:
ee:24:5a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 27 13:21:34 2023 by rpki-client on console-ams.rpki-client.org