Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/65BBA3E0FFE811EDA81345414AD9E6FC.roa
File: 65BBA3E0FFE811EDA81345414AD9E6FC.roa (raw, json)
Hash identifier: ntJ5si5LeTPuesgtWenavYSrLgrygX2PNVH2TBe+718=
Subject key identifier: C1:06:EA:55:99:A6:FD:9B:F4:C1:4A:3D:F5:40:86:FF:E3:1A:12:41
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E5F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/65BBA3E0FFE811EDA81345414AD9E6FC.roa
Signing time: Wed 31 May 2023 19:21:52 +0000
ROA not before: Wed 31 May 2023 19:21:48 +0000
ROA not after: Sat 31 May 2025 19:21:48 +0000
asID: 834
IP address blocks: 154.16.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3679 (0xe5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 31 19:21:48 2023 GMT
Not After : May 31 19:21:48 2025 GMT
Subject: CN=64779e50-2a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:68:2e:0d:7e:97:6a:ae:80:a3:50:74:84:
a7:ea:c4:0e:72:e0:47:ee:5f:31:fa:a5:0a:df:92:
0d:ab:2b:b8:2c:95:8f:8e:4c:28:49:72:88:10:63:
5c:00:a0:9b:d4:55:f3:71:77:d6:1b:d2:2b:9e:2d:
2e:c5:6b:86:99:a9:02:55:9c:55:2f:22:b8:9d:77:
04:96:50:e9:b1:35:f5:a6:92:bb:62:b0:39:ed:de:
76:55:2c:0a:aa:8b:40:ea:01:40:47:2c:8d:1b:37:
9a:9d:ca:00:d0:56:bf:c6:5f:36:a6:fc:b1:2e:47:
4d:5c:cc:78:43:61:ae:62:c4:35:77:68:d0:50:90:
cb:1c:83:3f:d1:f3:9a:3e:92:bf:7d:eb:54:5a:88:
ae:26:45:67:2a:fb:f5:4b:cf:60:a7:40:5e:bd:c6:
95:24:84:6e:e8:03:95:00:97:f1:b4:e8:0a:f4:f6:
77:c9:6c:a7:56:4c:36:ba:31:8b:65:8a:39:78:dd:
06:5c:84:e5:c4:2c:df:a8:65:df:d9:d2:f2:11:3b:
35:2f:9d:1a:46:a2:14:60:25:c4:d8:62:0b:c5:d6:
e2:47:f8:81:b3:da:20:32:d6:e9:b4:29:2d:d5:4c:
a9:c2:e1:60:73:94:d3:46:21:80:9d:1f:a3:6c:3c:
13:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:06:EA:55:99:A6:FD:9B:F4:C1:4A:3D:F5:40:86:FF:E3:1A:12:41
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/65BBA3E0FFE811EDA81345414AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.62.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ae:17:da:a6:87:29:16:0d:aa:4f:ae:b3:d7:e3:7c:6f:0f:
c8:3a:9d:fd:d7:d7:6e:f9:53:a4:6e:ea:e9:fd:db:d1:86:a4:
70:cd:3a:1d:de:d1:96:eb:f4:37:7e:b1:1a:54:15:f4:02:00:
08:04:88:1a:ed:6e:5a:fc:05:7e:13:75:5a:47:8a:60:12:fe:
bd:06:ef:95:a1:79:4f:9d:70:24:70:e5:3b:97:e0:87:ce:17:
72:92:da:0a:28:ca:f9:e3:c2:02:67:82:f9:e9:15:4d:19:e3:
19:7b:d5:ed:0c:33:fa:d9:e3:1f:45:04:92:5d:9c:c6:e6:92:
18:92:63:cf:1b:82:95:86:3c:2f:07:16:fe:9d:03:21:d2:e0:
1f:c2:4c:e8:9e:e9:c3:0a:f5:51:a3:f2:bc:9d:40:11:92:04:
19:90:06:7c:8c:8b:9f:81:18:e4:b8:65:03:c7:7b:ec:f3:da:
cd:5c:42:a9:71:17:4f:75:c2:db:37:7f:55:9c:bc:f6:b2:34:
5a:eb:d7:c9:8c:de:40:05:18:39:08:69:c0:43:40:5b:22:14:
29:d6:41:2a:dc:2e:37:7d:56:8a:96:19:81:46:f9:93:b3:82:
0e:af:b7:e0:92:c8:f6:98:0e:9c:6b:5a:98:a2:5a:d4:1a:12:
ce:f6:51:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org