Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/65C8B00AB43C11EDAC9675A7F1222468.roa
File: 65C8B00AB43C11EDAC9675A7F1222468.roa (raw, json)
Hash identifier: vtrkMm9t0+HKY8xA8P5l8kcV2kNpeW3rAi+2jZSHGII=
Subject key identifier: E2:3A:63:D9:AD:A3:5C:D9:59:4C:EC:75:FF:03:C6:3A:37:39:A8:A2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C09
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/65C8B00AB43C11EDAC9675A7F1222468.roa
Signing time: Fri 24 Feb 2023 12:11:42 +0000
ROA not before: Fri 24 Feb 2023 12:11:38 +0000
ROA not after: Sat 22 Feb 2025 12:11:38 +0000
asID: 61317
IP address blocks: 154.16.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3081 (0xc09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 24 12:11:38 2023 GMT
Not After : Feb 22 12:11:38 2025 GMT
Subject: CN=63f8a97e-3d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:56:a1:7d:ac:cc:92:f1:a4:a6:c8:e8:bf:
a7:f3:80:f4:f2:06:e7:86:80:a6:48:ec:81:cc:ba:
4e:a8:7b:a4:76:42:61:7d:65:fa:de:d9:33:4b:a3:
30:b9:d2:44:47:2b:34:1b:04:61:91:ea:cf:65:04:
f3:25:c0:44:35:7c:07:8f:66:cc:26:fd:2d:26:0e:
73:e5:d9:dc:a9:17:8a:2b:5b:1a:e8:cc:db:af:18:
2d:5b:ed:48:c9:5a:75:11:cb:e9:4c:ba:67:78:2d:
02:9c:ef:c4:69:ee:f2:cc:50:df:93:ab:97:eb:0b:
5a:68:c4:99:1d:37:92:a6:d7:6a:e3:74:57:70:b9:
3a:d6:1e:c0:ff:f9:b2:e4:3c:d2:af:e7:37:b0:16:
8d:e4:9b:86:b9:7b:1c:60:33:f6:2b:b2:60:4f:94:
c1:bf:18:53:cd:61:57:08:ea:f7:a5:4d:5d:73:47:
61:03:34:4e:de:6d:20:04:b1:99:04:6c:2b:a7:9b:
ec:d4:bd:16:be:ae:e2:1e:50:00:f7:fd:1f:84:85:
1a:d0:a8:81:d9:fd:fa:00:ee:56:a2:56:05:8a:d0:
bd:f9:7e:a1:ee:c1:b3:f8:6d:4f:e5:cf:93:e0:6d:
fd:0d:ba:bd:be:fd:e0:c6:c7:fe:f4:a2:c1:35:cb:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3A:63:D9:AD:A3:5C:D9:59:4C:EC:75:FF:03:C6:3A:37:39:A8:A2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/65C8B00AB43C11EDAC9675A7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.42.0/24
Signature Algorithm: sha256WithRSAEncryption
16:33:2e:d2:20:18:28:c0:48:98:df:cf:87:62:28:5f:87:d6:
89:c0:48:0e:a7:f2:f8:09:b2:5c:ee:0d:9c:02:2e:f8:1f:1a:
ee:20:e1:76:51:73:ef:28:a0:b8:c4:b4:cb:33:5d:4b:d9:04:
9f:3a:87:ad:d5:f7:69:8b:11:85:2b:0d:27:fb:fa:4f:c6:bb:
d0:90:56:b9:3d:3b:47:d2:08:48:55:3a:b4:ef:05:6d:c2:a1:
c0:a6:41:2a:1d:a7:b4:a3:a4:ad:09:1a:4e:56:9d:7b:c9:64:
e8:6f:3c:4f:80:65:d6:04:4c:93:e7:b2:90:54:b1:d6:46:eb:
b7:4c:4f:a1:80:ff:6f:62:1c:d1:5c:2e:09:c2:5d:89:e7:64:
ed:6e:1d:31:f7:ed:4a:f4:43:c2:fe:88:2f:04:99:40:6b:2a:
70:11:44:75:f8:ff:57:5d:0e:09:7c:56:cf:d9:9b:3b:d3:ac:
8b:12:db:00:32:e5:da:23:6f:2e:c9:da:7d:f1:df:e9:7a:8f:
0d:9a:11:ea:ab:d9:54:f8:99:22:ba:b9:3b:1c:4d:57:69:bb:
13:cf:cb:c3:23:73:81:40:05:df:ec:70:34:0a:5c:5f:c1:b1:
e1:ca:39:07:49:ed:61:77:61:5b:07:a9:53:49:38:fa:e7:aa:
4e:c5:71:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org