Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7ADDFDF253AF11EEB57E37124AD9E6FC.roa
File: 7ADDFDF253AF11EEB57E37124AD9E6FC.roa (raw, json)
Hash identifier: IFNcryvv9w31d9e4rdxOehA1+hzUAFsXE5m8yTVlXjc=
Subject key identifier: 37:15:77:36:08:8D:80:F9:42:72:4C:F4:5C:BB:19:72:86:8A:B9:63
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1237
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7ADDFDF253AF11EEB57E37124AD9E6FC.roa
Signing time: Fri 15 Sep 2023 10:06:04 +0000
ROA not before: Fri 15 Sep 2023 10:06:01 +0000
ROA not after: Mon 15 Sep 2025 10:06:01 +0000
asID: 1991
IP address blocks: 154.70.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4663 (0x1237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 15 10:06:01 2023 GMT
Not After : Sep 15 10:06:01 2025 GMT
Subject: CN=65042c8c-da67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:92:33:e3:78:26:8a:c5:67:0e:86:2a:a0:
6b:17:ff:1e:ea:b2:b3:10:84:6d:e6:bd:56:2a:a2:
c5:21:3d:19:10:9d:a2:24:07:d9:dc:22:4b:6d:c8:
7e:1d:0c:0e:a2:18:41:b6:c6:ea:fa:3f:dc:f6:11:
76:fc:18:2e:21:7c:14:20:9a:e5:92:10:dd:c7:49:
07:2c:35:36:40:ee:12:47:0b:f2:36:c1:18:95:b1:
6b:d6:93:8b:99:2d:95:08:86:2f:16:ae:ec:30:67:
9d:fe:4e:64:c0:a9:20:37:64:91:4a:a1:6f:5b:9a:
7a:40:0f:67:68:b4:d2:d1:cb:bb:ad:d9:16:d1:28:
f0:3d:1c:9c:8d:6d:28:b8:30:c6:81:54:cc:1d:7f:
d4:d0:cd:82:55:71:cf:4a:fd:a4:59:fd:96:7a:1c:
91:cd:ce:eb:38:b5:2d:3a:32:35:9a:d2:00:33:81:
fd:78:5b:cb:f6:78:c9:52:a0:26:8b:b8:e2:f4:5e:
7c:19:1d:ee:a6:82:41:b9:82:53:bb:29:91:38:85:
32:fe:36:1f:d2:32:ba:89:46:3d:ac:c5:65:ec:d3:
ea:cd:7b:4d:26:af:bd:af:3c:ab:61:49:e8:36:83:
4b:89:27:ca:98:4b:d4:0b:66:8d:92:2f:de:ea:fb:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:15:77:36:08:8D:80:F9:42:72:4C:F4:5C:BB:19:72:86:8A:B9:63
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7ADDFDF253AF11EEB57E37124AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.70.152.0/24
Signature Algorithm: sha256WithRSAEncryption
44:cd:b5:00:c6:b8:90:5b:6c:65:8e:2f:04:93:c8:59:41:93:
15:23:36:6f:8b:88:40:bb:70:77:e5:91:4b:fd:a3:96:d9:09:
37:9d:00:ff:60:00:cb:de:cf:82:ba:c3:7d:e1:9a:59:e6:79:
54:8c:d9:25:6f:6c:71:f2:ed:84:3d:ea:74:ac:3f:2a:8f:3e:
f0:50:88:cc:2b:be:3e:6c:dc:a6:f7:e8:fc:53:d9:1b:42:8a:
2e:4c:3a:d7:fa:39:ee:19:c5:a6:76:53:43:0b:cc:03:81:4e:
67:56:cb:3f:24:1a:21:26:3c:2d:d1:c2:df:63:a8:fb:f4:57:
a9:4e:cf:60:57:34:a2:4a:63:15:c5:60:95:31:8f:8a:4d:b3:
63:95:be:09:a5:32:f4:71:2d:2b:a8:15:6a:51:43:14:b6:40:
1c:6d:8d:07:56:ea:1a:ca:bf:49:61:a8:fe:a5:bb:66:3b:f5:
28:cc:4c:5e:16:53:63:e1:98:19:df:cc:8a:32:01:e3:af:51:
8d:95:e9:40:a1:cf:e8:06:ff:4a:c3:d3:a7:15:15:42:54:d1:
83:11:50:fe:67:cb:03:e2:75:ce:a3:d0:32:91:b1:95:f9:03:
84:cf:6d:21:f6:57:1b:84:8e:87:39:aa:5d:ac:30:81:fa:98:
6a:80:1d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 12:43:04 2023 by rpki-client on console-ams.rpki-client.org