Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/858955E8241711EE9C0D5C0D4AD9E6FC.roa
File: 858955E8241711EE9C0D5C0D4AD9E6FC.roa (raw, json)
Hash identifier: i029DTLvXBkqG7KKbC5N07tW/Q3lf3GCERz7/ERF0wM=
Subject key identifier: 5C:73:F9:35:A3:E8:F6:85:AB:8A:3A:60:5B:D4:30:AB:70:FB:55:76
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1093
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/858955E8241711EE9C0D5C0D4AD9E6FC.roa
Signing time: Sun 16 Jul 2023 20:29:54 +0000
ROA not before: Sun 16 Jul 2023 20:29:48 +0000
ROA not after: Tue 15 Jul 2025 20:29:48 +0000
asID: 834
IP address blocks: 154.16.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4243 (0x1093)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 16 20:29:48 2023 GMT
Not After : Jul 15 20:29:48 2025 GMT
Subject: CN=64b45342-6c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:ce:05:48:6e:82:36:85:37:34:67:f9:27:
0d:54:92:5b:db:96:24:e0:2a:7a:9b:05:13:3c:4b:
85:5e:8d:6d:83:4e:a9:db:9a:c7:7d:e3:8c:8d:14:
fd:8f:3a:04:8f:c3:2c:4e:b9:a9:7d:a2:91:16:e6:
26:a3:54:82:30:36:7c:36:4b:2b:49:fc:4f:51:89:
33:12:b1:27:cf:a7:43:94:99:b3:bc:49:cc:59:e1:
0b:63:c6:ea:4a:10:59:d6:49:06:5e:89:6e:9d:ad:
90:35:42:21:a8:95:9e:90:44:a7:f5:8b:7c:ec:02:
31:99:63:67:a5:27:21:28:ad:69:77:3d:78:ed:e9:
e2:f3:e1:db:77:48:0b:f4:88:b3:de:ff:e9:42:ed:
24:6f:29:9f:8f:8c:0c:85:55:a7:22:60:90:13:f6:
c2:b9:c5:d6:8b:83:80:52:54:cf:d4:89:b2:ed:d8:
c9:f1:a8:b1:fd:e9:48:d2:4d:d5:51:0d:42:84:96:
34:d4:23:e0:dd:ca:af:92:f0:b7:f2:80:64:3b:7a:
c9:69:27:03:1e:aa:e2:78:c3:cc:0c:f4:ea:eb:e5:
ab:1a:a0:bc:29:cb:89:1b:78:6a:31:47:9b:d0:75:
dd:86:a4:f5:aa:0a:48:d0:76:b5:25:45:25:77:71:
05:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:73:F9:35:A3:E8:F6:85:AB:8A:3A:60:5B:D4:30:AB:70:FB:55:76
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/858955E8241711EE9C0D5C0D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.183.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:68:38:1d:a3:a4:7a:be:fe:51:0c:2a:af:cc:18:2b:2a:f7:
24:be:43:7a:cd:db:a6:3d:11:16:60:a4:7a:8c:9f:9e:c3:67:
67:ab:90:b9:77:02:33:2d:47:1d:82:a3:e9:ac:0e:76:cb:80:
c6:e3:99:48:92:17:f6:d7:d6:89:05:87:4f:3a:49:1c:ff:3e:
52:07:64:2e:ad:2d:3f:16:0c:62:26:cb:82:b0:82:30:02:d0:
7b:23:2b:68:e3:ec:30:3c:c3:00:eb:07:fe:10:28:de:7b:31:
f3:bd:37:e7:cc:06:30:88:bc:f1:7a:c2:ba:83:c6:0b:13:42:
bd:95:07:b7:dd:90:93:0a:7f:6e:3b:33:1d:32:0d:63:41:b9:
9d:24:d4:88:e3:8b:08:e2:a8:03:e0:6c:a0:86:27:42:3b:4e:
8c:91:f6:ed:dc:2c:9a:c1:de:f6:d3:65:44:6d:00:07:cf:2b:
b7:3e:ba:6a:b8:7f:78:ce:9a:c2:c2:40:51:c6:fd:ad:71:ba:
ff:68:33:e5:ce:98:a3:05:70:11:c9:a2:66:84:77:13:8c:c3:
43:6c:90:cf:62:3f:49:ec:56:53:9f:61:66:c1:94:10:65:a0:
73:25:91:d1:b1:ec:c8:20:ae:02:29:1b:17:60:77:00:ba:e6:
95:fd:b9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 19:38:54 2023 by rpki-client on console-ams.rpki-client.org