Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5E77DC9A53BF11EE9F8976424AD9E6FC.roa
File: 5E77DC9A53BF11EE9F8976424AD9E6FC.roa (raw, json)
Hash identifier: sy7+VUZVpQCzrGDpSePdhcLh/kMvNZwnCicS2jPac9g=
Subject key identifier: EC:E5:B5:CC:30:CB:FB:9C:D0:73:10:E2:1F:A7:AA:57:A5:9E:79:2C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 123B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5E77DC9A53BF11EE9F8976424AD9E6FC.roa
Signing time: Fri 15 Sep 2023 11:59:48 +0000
ROA not before: Fri 15 Sep 2023 11:59:45 +0000
ROA not after: Sat 20 Sep 2025 11:59:45 +0000
asID: 42831
IP address blocks: 154.70.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 11:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4667 (0x123b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 15 11:59:45 2023 GMT
Not After : Sep 20 11:59:45 2025 GMT
Subject: CN=65044734-d825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:79:75:5e:94:0e:32:10:92:9c:30:41:2e:
4d:b7:c6:ec:0d:a5:47:89:e7:7c:bf:76:6d:f5:73:
f9:ed:c9:77:53:25:a7:b6:df:29:42:79:be:22:97:
ec:ba:33:6d:81:9a:61:4f:c6:6e:ed:32:af:72:55:
d7:cf:30:43:b3:40:37:38:02:29:04:53:0f:1d:0c:
e3:73:8d:d0:3f:df:2f:59:f7:5a:8b:92:08:61:ad:
d3:19:d6:41:f5:fe:33:9e:45:e2:fe:64:0b:09:e5:
7e:dd:d0:99:48:a8:38:5b:fb:94:d1:1a:4c:75:54:
ec:cf:d3:5e:fe:2e:18:b2:40:5a:3e:11:b8:75:97:
b0:79:24:3d:c7:b0:f5:e8:f5:20:d7:98:0f:ed:1f:
6e:83:93:73:1d:53:6f:cb:35:93:cc:4a:13:1a:a4:
2d:9a:43:a8:b7:09:cd:4f:30:31:c9:fc:bc:a5:23:
f1:13:df:dd:63:3c:f3:37:74:5e:51:ef:d8:a7:59:
02:61:ee:18:f3:4c:25:ea:6a:f7:32:dc:8d:23:a6:
19:84:9b:d6:9c:3f:1b:79:76:f9:72:6e:3f:5e:fe:
b7:04:f0:e9:d8:90:78:82:b8:85:af:b5:a3:cd:09:
ff:d9:2a:27:58:1f:26:40:a4:88:ce:ef:a1:83:38:
8a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E5:B5:CC:30:CB:FB:9C:D0:73:10:E2:1F:A7:AA:57:A5:9E:79:2C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5E77DC9A53BF11EE9F8976424AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.70.152.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:be:51:aa:ef:a1:85:9e:0e:17:e9:01:ee:20:a4:c2:9b:b6:
32:f6:f0:08:d9:59:98:cc:05:6a:4f:0e:35:f6:1f:16:6d:07:
96:b1:bf:2f:55:f6:4f:46:59:8a:48:8f:23:cf:1e:de:b7:d8:
08:f5:e6:a0:c1:50:51:b0:7f:65:1d:c6:7b:ed:0d:47:fa:bf:
11:00:19:be:11:46:85:9a:77:fc:e1:33:21:95:12:3c:80:43:
92:54:4e:2a:4c:80:8d:80:60:4b:5a:b2:f0:e4:df:21:9d:af:
4e:ec:e1:57:df:1f:03:c8:22:1a:aa:6a:59:d2:80:15:8d:61:
63:bc:59:fb:f1:c2:87:91:58:ae:ca:9e:4d:c7:18:68:6b:74:
0e:70:40:b2:bf:87:87:8c:2d:9c:9c:4a:f3:8c:73:4e:a2:4a:
aa:51:de:b0:75:84:16:34:56:ad:04:f5:ec:f6:8a:87:2e:63:
a5:f0:23:f7:a6:26:89:37:46:7e:5d:29:94:6e:2b:a7:e2:eb:
1f:ef:12:1d:e9:0a:88:9c:4c:0f:43:a7:52:18:f9:f2:02:a8:
dd:99:86:b5:62:5b:47:3b:0b:ba:5c:d2:eb:cf:76:f1:1d:79:
37:75:a0:11:5c:f1:f0:e3:4c:48:50:bf:ed:cd:d5:fa:40:0b:
02:26:60:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 15:17:06 2024 by rpki-client on console-ams.rpki-client.org