Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/66D728CE09F411EEBD646F2C4AD9E6FC.roa
File: 66D728CE09F411EEBD646F2C4AD9E6FC.roa (raw, json)
Hash identifier: Eh+hf/hVLy9dmD9/Fj/DNaL6J9g+QSHmvCT1GyASD2k=
Subject key identifier: 97:18:A9:C4:E8:57:0E:05:F4:1D:2C:C9:BE:B0:00:9F:3B:13:9E:34
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F44
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/66D728CE09F411EEBD646F2C4AD9E6FC.roa
Signing time: Tue 13 Jun 2023 14:13:00 +0000
ROA not before: Tue 13 Jun 2023 14:12:55 +0000
ROA not after: Thu 12 Jun 2025 14:12:55 +0000
asID: 49981
IP address blocks: 154.16.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3908 (0xf44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 13 14:12:55 2023 GMT
Not After : Jun 12 14:12:55 2025 GMT
Subject: CN=6488796c-0737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5a:d3:2f:47:db:0c:fe:1b:bd:a4:7c:da:75:
f8:be:e4:ef:12:cf:3d:e3:f7:b0:54:ea:d7:41:ce:
a3:15:74:30:16:ca:75:3e:ec:ef:ea:d6:10:bc:da:
ad:55:b7:f6:66:df:32:90:02:60:d2:52:fd:30:4f:
c9:8f:0f:59:30:72:78:63:f8:46:e2:a8:c0:2c:b9:
2b:bb:59:55:ac:af:dc:97:94:da:08:46:dd:1f:88:
15:ed:5f:6f:3e:bc:1a:6e:54:23:b1:9f:60:e6:76:
59:3e:48:72:87:d3:a2:a6:20:5b:da:85:9b:23:7b:
93:c8:b7:2b:e3:33:e7:a8:d8:c1:18:cb:13:e2:9f:
a1:72:23:42:a2:07:99:74:89:67:84:12:1c:a3:4b:
e4:fc:64:3b:95:5d:3f:ed:e4:e7:9e:ac:bc:a1:85:
3a:f6:a2:b3:d1:0e:85:3e:25:1e:d6:86:f8:ac:3d:
eb:54:1b:2f:f7:11:00:e1:56:dd:62:b4:60:1f:78:
d1:ee:f9:c1:94:45:f4:c8:b1:af:96:00:0a:82:1b:
c9:fa:01:93:c5:d4:fc:70:41:ad:37:3f:9f:8c:9f:
4b:45:82:06:dc:b4:2d:13:1a:ad:29:c8:50:b0:4e:
0b:68:4a:3a:a9:63:b6:2b:a8:4f:d3:d2:5d:1a:a9:
eb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:18:A9:C4:E8:57:0E:05:F4:1D:2C:C9:BE:B0:00:9F:3B:13:9E:34
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/66D728CE09F411EEBD646F2C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.32.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:94:0a:e5:f9:7f:77:5c:68:13:5f:71:0c:80:5c:8a:87:41:
5f:65:62:c2:16:8e:72:07:e6:be:12:a4:3b:7d:09:2d:ab:0a:
21:a2:96:f2:fc:b5:af:f4:f9:40:2b:1b:5b:63:aa:8f:6d:f6:
02:d9:ff:99:7f:3d:22:bb:de:e6:29:8d:47:1d:34:54:56:c6:
98:87:b8:53:b5:9c:3a:66:86:4d:08:46:c0:cb:93:fb:1f:b1:
1f:58:cd:4f:39:7b:c1:24:71:1e:56:8c:07:26:52:b0:c6:6a:
7b:39:d8:45:99:ab:8a:41:ac:1e:10:cc:0b:6e:3a:83:ae:a2:
f2:3d:7b:9c:76:3a:8b:70:ac:b2:30:11:ce:55:fd:ab:59:5d:
4a:1f:ca:ca:f2:ab:a8:6d:84:c1:d9:88:10:4c:66:bc:87:dc:
e0:fd:ff:57:69:0c:33:06:1e:2d:30:d3:66:da:bf:56:e4:67:
14:35:8d:da:b5:35:1c:99:91:b3:84:84:a2:78:50:0d:76:0b:
ef:73:87:18:11:ab:82:a7:ea:88:3c:9e:1a:b9:f0:69:3d:1f:
f8:44:f8:b7:0c:5d:e9:d0:13:88:ec:45:b8:b8:54:fb:33:25:
c9:97:ca:e4:11:60:5a:a1:8a:82:56:1b:b8:b1:41:84:9d:47:
9b:4e:59:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 19:46:31 2023 by rpki-client on console-ams.rpki-client.org