Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8BC4038E0FD311EEA830B87F4AD9E6FC.roa
File: 8BC4038E0FD311EEA830B87F4AD9E6FC.roa (raw, json)
Hash identifier: eB+tX8rAKDH5M91SLnr9wl4Z75rkZ/WXCU3j3nUv2+I=
Subject key identifier: 5F:11:8C:8C:73:45:B4:5D:7F:CF:27:CD:FF:4C:18:9C:94:C2:35:00
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0FD5
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8BC4038E0FD311EEA830B87F4AD9E6FC.roa
Signing time: Wed 21 Jun 2023 01:32:55 +0000
ROA not before: Wed 21 Jun 2023 01:32:52 +0000
ROA not after: Wed 12 Jun 2024 01:32:52 +0000
asID: 834
IP address blocks: 154.16.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4053 (0xfd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 21 01:32:52 2023 GMT
Not After : Jun 12 01:32:52 2024 GMT
Subject: CN=64925347-e64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:18:d2:22:b5:43:6b:7d:96:09:34:d7:4b:
0c:e2:15:01:7f:5f:ee:71:e1:9c:2b:d5:ad:01:1b:
d4:76:18:48:97:a1:74:79:9e:ed:a6:ad:b6:fb:a3:
13:3d:6f:d9:2b:d0:fe:49:65:e7:28:51:f1:2e:dd:
d8:76:61:75:9b:3c:ec:b7:c5:8c:b9:d4:b9:41:a9:
62:1f:64:ab:43:fb:87:cf:88:16:60:75:60:87:3f:
1f:fe:a1:a7:64:2e:2b:49:79:0e:31:4b:58:af:3d:
59:3f:6c:aa:3c:99:ea:77:29:a4:4c:86:d5:22:3d:
97:94:8e:20:0b:66:84:27:b9:b7:fc:f7:11:8c:3d:
c4:ce:23:84:be:81:55:45:8a:1e:79:a8:25:12:26:
00:4c:87:2e:35:60:c2:3b:03:90:c0:6a:a5:ba:c6:
81:3a:fc:82:ae:4e:90:42:42:41:4d:8d:17:8b:a3:
64:30:fb:36:f9:15:dd:89:73:f7:2e:6d:bc:d6:3c:
f5:a2:bc:4b:3f:78:4c:89:9d:79:3d:99:79:ec:a3:
bb:0b:90:5a:d4:8a:2e:92:5c:93:48:db:9c:fa:fd:
8e:a3:06:d9:3d:ad:da:bd:09:e3:0a:46:84:de:bd:
97:5a:e2:cf:c7:99:25:b7:ac:1e:ef:a8:ee:5d:fd:
de:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:11:8C:8C:73:45:B4:5D:7F:CF:27:CD:FF:4C:18:9C:94:C2:35:00
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8BC4038E0FD311EEA830B87F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.42.0/24
Signature Algorithm: sha256WithRSAEncryption
54:e7:68:9d:ca:81:3c:19:a3:cf:67:81:1d:bd:d8:0e:7a:5d:
91:a9:5a:af:42:15:1b:39:f9:e2:fd:76:73:9e:19:bd:3d:fc:
65:28:05:29:5a:8a:c9:6e:b1:37:8c:99:f0:d1:ed:52:f7:26:
da:de:a4:8a:5e:81:bf:0c:d1:88:d3:09:c7:38:bd:29:60:cb:
6b:a0:38:05:cd:55:1a:0c:b8:be:dc:22:4a:ca:9b:45:41:69:
bd:8b:e5:6c:03:aa:5c:32:c2:e5:c6:49:fe:01:80:fd:57:1c:
e3:10:f2:ef:09:28:e5:89:2a:83:5d:30:60:af:f1:2d:43:10:
40:40:19:68:03:ea:46:8b:39:27:ee:72:f3:ec:79:34:81:4f:
6f:49:ed:79:13:9e:be:31:81:51:71:2c:cd:97:63:2c:fb:93:
57:85:65:c3:ae:04:5c:d1:c6:2a:7e:1a:a9:3e:d9:03:f1:6f:
7f:f1:39:d8:88:4c:5a:80:49:49:f6:fe:8b:11:fd:30:aa:c2:
78:f6:47:2f:9a:ef:87:53:9b:82:ed:42:ba:e1:24:3b:8a:94:
31:86:35:8b:ef:44:a9:c9:95:56:36:71:1c:01:1e:83:89:d1:
34:59:71:7d:7a:c7:ac:09:fc:68:e4:e5:a4:69:0f:a0:0b:45:
99:d4:40:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org