Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8660C93A351311EE8AAB13544AD9E6FC.roa
File: 8660C93A351311EE8AAB13544AD9E6FC.roa (raw, json)
Hash identifier: 8AJJblzcaX9Txbl68o3KI5VF64N3/a1Q6N+gzgJOMLc=
Subject key identifier: 5E:52:E0:17:B6:1A:EF:04:47:1B:BA:A3:C1:89:D8:64:F5:23:B6:3D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1113
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8660C93A351311EE8AAB13544AD9E6FC.roa
Signing time: Mon 07 Aug 2023 11:14:07 +0000
ROA not before: Mon 07 Aug 2023 11:14:02 +0000
ROA not after: Wed 07 Aug 2024 11:14:02 +0000
asID: 834
IP address blocks: 154.16.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4371 (0x1113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 7 11:14:02 2023 GMT
Not After : Aug 7 11:14:02 2024 GMT
Subject: CN=64d0d1ff-ba30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:88:4e:73:40:64:d9:52:5c:27:79:b6:1e:16:
be:85:7c:c2:91:0d:62:84:8f:78:25:e4:eb:77:c5:
45:37:76:4f:e6:39:6c:6e:6d:3d:e4:8f:0c:35:39:
09:1c:08:c6:61:d8:d8:b9:9d:87:2a:ff:5c:5d:61:
75:8d:96:f4:a6:b0:0a:cf:f4:82:1b:68:55:97:79:
2b:3e:5e:0f:90:ce:0e:73:e9:5f:2a:36:f7:47:a4:
34:59:c9:c0:00:69:f8:e8:00:3d:27:74:03:69:c6:
9e:8a:ae:49:8a:84:89:fe:40:ba:27:c0:cf:63:f2:
bf:3b:f0:41:2c:16:ff:b7:c9:b9:67:7e:ef:dc:2d:
11:ea:20:0f:18:58:a4:74:c1:e3:34:3d:7d:bc:46:
e3:11:55:b2:32:95:fe:05:f7:32:d1:ba:62:05:6b:
e7:1e:83:d0:97:74:db:32:c4:a3:fe:e4:e9:d6:93:
d0:fc:66:ce:e2:85:0d:d9:5f:f6:6f:14:53:ed:52:
93:5d:ea:c1:84:61:92:a9:ad:62:79:27:9c:41:04:
cb:44:e9:5e:68:89:b0:08:16:c5:33:ce:05:de:91:
15:3d:87:a8:74:8a:2e:b5:d2:3a:38:3a:8f:d4:e3:
6c:a2:14:7a:39:5a:00:d4:ef:dc:d0:62:d2:51:7d:
49:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:52:E0:17:B6:1A:EF:04:47:1B:BA:A3:C1:89:D8:64:F5:23:B6:3D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8660C93A351311EE8AAB13544AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.103.0/24
Signature Algorithm: sha256WithRSAEncryption
29:3a:48:80:9d:cf:f3:69:8c:7b:5d:4e:b1:82:cf:f2:35:4a:
ea:95:61:e7:4c:75:18:b9:82:d1:95:a5:17:cc:05:51:f7:98:
b8:b3:48:a9:48:24:7a:dd:10:6a:d7:c0:78:b6:93:64:c6:b8:
e3:92:5b:22:3d:9a:f1:47:38:c3:2d:71:d9:36:a6:ee:b7:9a:
6c:58:b1:a7:e3:11:96:7b:93:17:e5:39:91:9e:79:e9:77:56:
c9:f9:38:27:09:09:bf:a1:07:7c:87:44:e0:a6:48:07:99:dc:
b6:a2:56:02:bd:b3:66:5d:a2:24:e2:e9:68:ad:da:78:0b:35:
16:c0:df:25:31:7c:ba:8b:83:f4:4d:d9:63:8c:9a:d0:f4:e9:
29:e9:97:0e:e8:f3:6c:11:15:82:e1:2a:4d:b9:a0:39:8e:e8:
f1:e6:ba:fc:6a:57:61:7f:ab:3f:c2:4b:a5:95:16:da:ab:bd:
b5:be:c2:da:41:ac:db:36:b9:bd:68:a4:bc:04:0e:5a:20:db:
ed:f9:dd:05:10:6a:d8:fe:b4:e3:b8:e0:6a:f9:b4:b9:db:0d:
f4:6e:2b:23:dc:c0:7d:44:aa:9c:9a:b4:54:6e:b8:fe:18:d6:
14:e7:c6:f7:f6:76:63:e1:9f:c9:07:c1:26:4d:79:e5:21:c0:
30:05:7c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 25 11:53:59 2023 by rpki-client on console-ams.rpki-client.org