Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/808540F0B69111ED9DDF9AB5F1222468.roa
File: 808540F0B69111ED9DDF9AB5F1222468.roa (raw, json)
Hash identifier: ChLt1ImqS1el5i/kPAhaAZzVZjdZhxRztgtZJQCgeRM=
Subject key identifier: 9B:AB:32:75:62:90:12:D7:D9:71:DB:B9:07:E4:C5:CC:C2:F0:5A:37
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C42
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/808540F0B69111ED9DDF9AB5F1222468.roa
Signing time: Mon 27 Feb 2023 11:25:56 +0000
ROA not before: Mon 27 Feb 2023 11:25:52 +0000
ROA not after: Thu 27 Feb 2025 11:25:52 +0000
asID: 61317
IP address blocks: 154.16.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3138 (0xc42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 27 11:25:52 2023 GMT
Not After : Feb 27 11:25:52 2025 GMT
Subject: CN=63fc9344-a2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5c:f7:14:68:95:b9:fd:29:41:c8:22:e7:9d:
fc:47:1d:be:b8:ba:a5:35:59:68:e1:15:e3:01:7b:
e5:30:4a:89:c4:f9:5b:16:99:7c:6b:37:8f:93:4e:
55:14:dc:4c:33:7d:fe:ca:12:00:b8:b8:59:bb:3e:
a2:45:f9:2d:d4:9e:13:0f:6b:5d:b4:2c:f2:9b:b6:
10:a2:d2:f6:1f:4e:a8:e3:0c:79:5d:fd:f0:63:d2:
74:e7:0c:24:a3:70:24:45:6c:d5:07:ca:0b:72:1a:
c0:c4:94:4f:02:f1:54:6f:19:c5:e8:ea:f5:60:61:
a7:65:74:7a:eb:65:01:a9:23:00:77:04:f6:11:56:
f0:24:2d:c9:6a:28:36:bc:96:e4:c3:23:0c:9d:5b:
ec:8f:f2:74:51:72:e7:0b:ad:4b:6c:98:78:f8:4f:
2f:e3:39:ed:a5:2f:6c:5a:79:d0:cf:84:18:55:c7:
f0:0f:c4:f7:74:b4:2d:b0:ec:a3:63:dd:9f:2d:9e:
99:b8:f2:ec:2d:d4:e8:16:7c:4d:7b:22:9b:fd:6f:
a7:84:e6:be:53:3c:71:d4:3b:b8:77:84:f0:28:18:
5b:1d:1d:2b:b6:4d:62:fe:a5:e4:7b:d5:a0:68:4b:
01:81:42:d1:82:37:52:30:1d:2f:f0:b5:d0:69:94:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AB:32:75:62:90:12:D7:D9:71:DB:B9:07:E4:C5:CC:C2:F0:5A:37
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/808540F0B69111ED9DDF9AB5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.80.0/24
Signature Algorithm: sha256WithRSAEncryption
00:05:0d:ba:5c:e9:0b:18:a8:e3:66:6d:af:35:43:f1:7e:1c:
5d:fb:70:d4:b3:82:80:b6:99:44:84:67:a5:10:aa:42:b9:38:
bb:77:da:ec:25:87:b8:ee:f4:4c:46:d5:5f:70:88:6f:b9:9b:
16:cd:64:10:bd:7f:ef:be:d1:5f:eb:6a:74:61:bf:03:18:99:
9d:d2:db:d6:6f:13:1d:f4:5b:72:7b:4b:12:81:4a:84:79:77:
1f:1c:87:59:8c:c5:eb:91:4b:58:58:56:36:3e:83:9e:fa:11:
82:0d:26:a6:33:ee:39:75:08:42:a9:1a:57:f9:75:40:dd:0c:
62:2d:f6:60:b5:7a:ff:87:70:2b:c6:b9:7d:52:93:5f:e6:04:
d1:18:5e:38:25:a5:62:81:30:01:b2:86:aa:0e:2c:0e:10:ab:
43:e1:c9:1e:27:2e:40:4b:41:f2:14:89:6b:e8:ad:5a:ca:75:
77:15:aa:41:e7:37:78:c1:86:92:13:1e:90:d7:25:70:e5:94:
07:90:70:1f:b2:31:e2:41:5e:31:a6:6a:e9:5c:44:2c:b5:a2:
4d:7e:1b:00:f7:ae:17:81:0b:a3:bc:ee:44:22:d7:30:32:c7:
0c:12:98:6b:f5:a8:7e:5e:e6:34:f9:23:3b:9a:36:14:93:13:
ab:36:36:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org