Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/75E807E8513411EEBD0D382C4AD9E6FC.roa
File: 75E807E8513411EEBD0D382C4AD9E6FC.roa (raw, json)
Hash identifier: 88LK3s4teuRekoBacXM+7X18G2oPHfVfzdquw0cbz9U=
Subject key identifier: 7D:5D:57:4A:01:F0:76:4D:2E:BC:FB:86:4E:05:2D:99:F3:DB:76:4C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 120F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/75E807E8513411EEBD0D382C4AD9E6FC.roa
Signing time: Tue 12 Sep 2023 06:20:25 +0000
ROA not before: Tue 12 Sep 2023 06:20:22 +0000
ROA not after: Fri 12 Sep 2025 06:20:22 +0000
asID: 834
IP address blocks: 154.16.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4623 (0x120f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 12 06:20:22 2023 GMT
Not After : Sep 12 06:20:22 2025 GMT
Subject: CN=65000329-4e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:93:d9:8a:bd:d1:a2:8a:65:6e:2e:46:cd:
24:6d:e3:5a:62:ae:a1:a3:34:aa:14:52:cd:7d:ec:
27:90:48:9c:74:c9:b6:c3:97:e6:23:14:f1:34:76:
48:ec:fc:29:ad:22:4e:6f:c7:ed:0e:b1:18:80:54:
cf:dc:ea:74:77:96:62:eb:d3:45:15:4e:e1:3f:2c:
32:7a:2d:6e:2f:1d:fb:d1:8e:9c:48:3d:d7:05:32:
83:2f:99:64:b6:90:19:d0:a8:18:d5:6d:34:7e:7a:
4a:dd:bd:c3:02:e1:84:d5:e4:eb:60:02:28:51:9d:
8a:bb:0d:87:12:a2:57:ef:8d:17:e7:8f:fe:8f:77:
ae:75:d7:af:48:a0:55:c1:b2:13:ca:62:cc:7a:a6:
2a:1f:d9:6c:7a:88:cd:92:42:99:47:cf:e7:d4:38:
9d:b5:47:b5:8f:24:69:8f:d4:af:97:ef:81:bd:84:
d5:0f:fd:5e:54:ba:79:25:f2:23:da:5c:5c:ec:dc:
fe:f6:34:5e:c1:19:62:1b:02:03:d5:dc:3e:e3:ea:
62:0e:19:45:5f:f5:07:dd:7f:62:e0:e7:72:be:a5:
e2:da:0b:d4:aa:bc:26:cf:29:64:47:e3:eb:8e:9b:
c6:b8:7b:b4:7d:e8:fd:2b:c2:9d:28:7e:29:06:ef:
08:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5D:57:4A:01:F0:76:4D:2E:BC:FB:86:4E:05:2D:99:F3:DB:76:4C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/75E807E8513411EEBD0D382C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.45.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:7c:66:61:30:f2:b7:e3:ee:b1:b2:6e:f7:5c:19:0b:b7:12:
20:35:6c:31:3d:a0:55:b2:90:a6:cf:5b:61:eb:08:37:53:99:
26:54:b7:6b:46:4a:c5:df:8f:55:14:c4:65:7d:c5:c5:e9:67:
e9:5d:8e:f5:33:33:a0:e0:8a:06:0d:c1:95:43:a6:26:87:f8:
1f:d3:ce:70:6c:71:50:3c:0a:9f:9d:96:41:78:2f:0d:d6:9f:
d9:17:41:09:4d:2d:39:2c:ef:04:36:a7:19:41:38:00:a4:e0:
6a:1f:45:33:e5:6d:5f:b8:5d:31:8f:56:d7:2a:b8:77:f3:48:
cc:66:28:e8:83:d0:a1:11:cd:33:4c:b7:67:9f:0a:e5:be:8f:
6d:68:6f:91:3f:97:8b:90:62:29:ca:10:66:e0:c1:fb:1d:83:
11:53:73:61:8c:a2:d2:70:e7:30:dd:4f:8d:8b:b0:e0:be:a9:
15:eb:01:1a:2d:59:6b:ef:87:19:47:79:de:5f:68:54:0c:17:
f2:9d:bb:15:84:67:c3:11:36:6a:39:61:3f:a2:7b:0a:05:59:
f4:1e:69:58:3a:dc:af:34:f9:86:61:3b:77:b1:45:15:9b:57:
fa:50:ed:2b:3c:c1:4f:30:68:f6:74:3e:a2:1c:9b:7e:ce:aa:
d1:1d:07:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 25 11:53:59 2023 by rpki-client on console-ams.rpki-client.org