Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/883CA5D2B43D11EDAA6DEAAAF1222468.roa
File: 883CA5D2B43D11EDAA6DEAAAF1222468.roa (raw, json)
Hash identifier: /v1BH5Hk350Hi0O1E0cpG/OXJllqc1cK3Zxq4QdrJjQ=
Subject key identifier: BC:4B:25:93:09:50:46:5A:62:6B:F5:3F:F1:BA:99:8F:EB:74:3A:EB
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C0F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/883CA5D2B43D11EDAA6DEAAAF1222468.roa
Signing time: Fri 24 Feb 2023 12:19:49 +0000
ROA not before: Fri 24 Feb 2023 12:19:45 +0000
ROA not after: Sat 22 Feb 2025 12:19:45 +0000
asID: 61317
IP address blocks: 154.16.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3087 (0xc0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 24 12:19:45 2023 GMT
Not After : Feb 22 12:19:45 2025 GMT
Subject: CN=63f8ab65-7ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bc:fa:17:e2:18:31:3e:14:1e:26:1b:ff:8f:
19:c2:0b:46:16:aa:5d:12:4c:74:46:1e:43:07:80:
e0:5f:bb:34:48:11:64:f0:15:b2:0d:9a:c8:70:9e:
5b:47:17:d5:54:95:b0:3c:8d:14:97:c0:b0:01:86:
13:fb:16:13:3f:c7:ad:62:9d:2c:b4:99:00:2e:61:
ef:9b:f4:0f:3b:24:1d:30:b3:4f:77:ae:7c:cb:84:
0a:0d:7d:14:8e:ba:96:73:64:e2:29:78:e7:a3:04:
a3:28:ed:ca:eb:c2:27:ee:24:cd:71:d0:41:79:b1:
10:05:18:bb:be:a5:77:46:c8:25:15:3b:c9:dd:98:
fe:b9:de:14:49:5d:e2:82:85:01:dc:51:d7:a4:58:
37:82:ed:a9:d3:d1:32:28:44:20:43:11:29:59:75:
e0:b5:86:85:f0:5e:43:9b:50:be:e9:ab:1c:2f:02:
bc:fb:40:a1:9a:1c:42:94:09:ea:65:15:e1:32:4d:
01:6b:37:96:ff:8a:d1:26:a2:d2:25:90:fe:f2:29:
99:be:c1:86:53:44:d4:22:c3:72:41:87:e0:0f:16:
b6:ae:4b:4f:15:3e:49:b0:52:64:ef:49:20:68:4e:
6c:84:64:22:a8:a4:db:6f:4d:84:01:e8:f9:bf:ef:
3f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4B:25:93:09:50:46:5A:62:6B:F5:3F:F1:BA:99:8F:EB:74:3A:EB
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/883CA5D2B43D11EDAA6DEAAAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.45.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:bb:ef:eb:26:1f:19:89:fc:61:7f:c0:0c:0a:bd:6b:48:30:
91:89:67:42:12:50:b6:da:0c:a3:de:b5:52:bd:e1:d1:fe:39:
45:e7:47:b1:82:be:03:e9:4c:09:87:f0:f5:cf:ec:be:ff:a2:
99:1b:10:fa:17:e1:16:43:66:ea:45:eb:5f:93:55:cd:2a:d2:
5a:04:f2:da:67:8f:ca:c4:bc:d6:d9:5c:44:9d:a0:ee:42:29:
ca:14:76:6f:ca:eb:94:8d:73:1e:c9:38:cb:e8:18:4d:84:3e:
81:f2:00:bc:62:39:91:d9:44:78:97:83:0d:11:fd:f7:5e:7a:
68:62:dc:95:14:c4:97:9f:3e:c2:5a:df:fa:cf:66:7b:2f:bb:
34:72:45:e0:c8:f8:b8:d0:07:76:16:e4:f5:62:bb:bc:c9:23:
66:ea:47:97:2f:9e:0d:f3:4c:dd:34:2a:71:ff:ab:ca:ed:5d:
e8:b0:2d:6e:8c:17:37:70:7f:81:c4:74:58:ae:57:cf:4b:6f:
a5:b6:3d:31:c0:48:c5:78:89:60:af:a5:6d:f5:97:f0:eb:b2:
9e:e2:16:46:4b:20:85:c2:8e:a4:52:51:ea:95:ca:66:8a:9b:
87:db:79:67:fd:b1:2a:21:dc:4d:33:90:97:9e:12:ad:dd:00:
10:34:66:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org