Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7B33A742005411EE92AC01124AD9E6FC.roa
File: 7B33A742005411EE92AC01124AD9E6FC.roa (raw, json)
Hash identifier: EuriBr9/a0SUjnwz3nJlO5sj8jGanoGvB2y+GfsXIQQ=
Subject key identifier: 9A:C1:35:7E:6D:4A:F2:F0:0A:42:67:5E:AE:5D:06:26:A2:24:4B:F1
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E9E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7B33A742005411EE92AC01124AD9E6FC.roa
Signing time: Thu 01 Jun 2023 08:15:34 +0000
ROA not before: Thu 01 Jun 2023 08:15:30 +0000
ROA not after: Sun 01 Jun 2025 08:15:30 +0000
asID: 834
IP address blocks: 154.16.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3742 (0xe9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 1 08:15:30 2023 GMT
Not After : Jun 1 08:15:30 2025 GMT
Subject: CN=647853a6-2b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:e1:82:1d:c0:c5:cc:bf:13:ac:90:1b:90:
09:6f:df:00:e8:0b:52:f2:dd:6e:54:da:f4:c2:e2:
d2:13:fd:94:d8:b3:81:49:19:cc:cb:d3:35:4e:69:
40:0d:e7:99:ae:1b:4a:d0:d7:53:76:f9:de:17:47:
43:ca:05:d1:ab:8c:d8:48:12:f6:ba:ff:7f:94:6a:
26:4e:99:5b:6c:1a:7a:c7:5b:d2:10:a3:9d:e8:2f:
6c:3d:e7:e2:9f:ac:e9:f6:e8:6a:75:33:53:d8:31:
bb:9a:7b:d3:8b:3a:e1:67:93:11:b5:ed:45:b0:e7:
80:e7:ea:9f:bf:31:51:47:19:e1:c9:36:77:6b:e9:
3c:2f:f0:a6:de:10:c8:0e:b8:ad:0c:ea:d5:ab:22:
02:8f:e8:91:a5:c4:cb:c2:59:be:62:32:e4:6a:a8:
fc:59:53:33:35:e0:4c:26:3b:d8:c7:47:50:19:3f:
f0:50:51:a3:60:7e:76:81:32:5f:b0:f8:27:c8:bf:
3b:24:cf:40:72:93:12:01:31:2c:b2:de:91:d0:fb:
14:99:8a:3e:61:4a:a9:80:c8:33:0f:40:ed:8b:9c:
99:97:0e:28:e8:e8:a9:ab:1e:20:c2:ae:06:eb:e0:
48:d1:5c:70:f3:82:5c:96:cd:43:bf:5c:c1:56:77:
62:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C1:35:7E:6D:4A:F2:F0:0A:42:67:5E:AE:5D:06:26:A2:24:4B:F1
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7B33A742005411EE92AC01124AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.80.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:29:23:7c:80:c5:09:e4:1c:5a:4d:a0:b0:6e:4e:72:cb:69:
95:34:d7:25:fe:c5:88:60:61:8f:6e:89:5d:0b:0f:ea:be:6c:
33:4a:60:ce:09:43:5d:d2:6d:9c:f1:b6:a4:6d:87:f7:40:10:
66:9e:18:fa:e3:40:ba:18:3e:7e:fa:bc:1e:2d:fe:f2:6e:9d:
47:95:22:9c:76:cd:67:09:ce:74:91:71:6e:d1:74:79:7e:50:
5b:33:89:3c:b6:46:27:4b:51:2b:77:38:65:6a:f3:ea:72:fa:
7a:99:d0:07:16:5e:5b:a6:c7:40:2d:f5:e0:5d:ee:d4:01:57:
81:0e:a5:81:70:fa:7e:73:11:e6:fa:f9:e0:57:a7:9f:80:34:
35:b0:54:9d:89:2a:d4:71:8b:5b:a5:b5:a8:15:99:eb:24:de:
bd:bb:cb:60:be:c1:a8:66:cd:f5:2c:82:d7:20:0d:2c:4d:e3:
7a:4b:2a:6a:93:f0:4a:dd:96:4a:4f:43:fa:70:88:c2:da:cd:
25:19:06:50:34:dd:e3:17:c7:69:be:1b:ef:f0:ed:8e:ee:8a:
5a:3f:ae:5a:bc:0b:cf:f1:c1:44:fe:a2:14:ce:87:9e:26:87:
db:6e:de:39:de:79:a7:9e:af:ce:2b:aa:2e:25:04:b6:2c:58:
23:ea:27:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org