Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/996B7DC240E411EE9C2FBA2B4AD9E6FC.roa
File: 996B7DC240E411EE9C2FBA2B4AD9E6FC.roa (raw, json)
Hash identifier: hYJHvLY0dYugIc/RfMzZyi7C7ImzWqysGCAjTTuizYc=
Subject key identifier: 16:41:46:70:C1:6F:70:9A:D2:F1:34:72:6A:AF:9B:FE:DA:D5:4A:7A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 11A2
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/996B7DC240E411EE9C2FBA2B4AD9E6FC.roa
Signing time: Tue 22 Aug 2023 12:08:27 +0000
ROA not before: Tue 22 Aug 2023 12:08:23 +0000
ROA not after: Sat 23 Aug 2025 12:08:23 +0000
asID: 834
IP address blocks: 154.16.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4514 (0x11a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 22 12:08:23 2023 GMT
Not After : Aug 23 12:08:23 2025 GMT
Subject: CN=64e4a53a-0550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:86:29:1b:ba:62:97:82:d9:ff:e5:d4:2e:
79:e8:b1:02:69:50:39:a9:ad:d8:a8:f8:0a:c6:98:
0f:6c:6a:ec:38:f0:ab:75:83:f4:af:cf:d9:8a:bf:
7c:ae:e7:d2:1c:4d:f5:74:dd:08:df:fa:d5:73:c0:
70:09:83:69:67:3a:78:06:e0:38:7e:5f:3f:67:79:
cd:65:70:ac:7a:73:a8:52:fb:4c:e8:18:62:60:61:
4b:32:0d:fb:31:a3:15:86:a3:33:d7:3d:cc:6b:6d:
3a:fb:e5:b1:0c:3e:49:a7:4d:37:ea:87:7a:88:8d:
ef:44:f1:41:aa:2b:64:74:2f:95:a4:f2:a4:e4:6e:
c1:39:47:c7:c9:62:a9:b4:27:84:b2:08:7b:3c:2e:
7a:49:0e:77:e5:cf:7b:ff:6a:52:ee:20:b9:54:6e:
27:e6:9d:d9:0e:97:52:1d:2c:5e:c7:93:8b:84:8d:
a1:38:08:0e:ac:d5:a0:f6:4a:1e:54:05:33:91:56:
2f:46:06:da:39:14:01:94:8d:08:b4:78:5f:86:dc:
85:6e:ba:0c:18:49:f0:ed:91:1c:42:c1:21:78:9d:
b7:51:a4:6c:ee:49:15:8a:94:09:74:e0:8c:1b:a6:
56:b8:8e:ee:1d:95:c4:35:e3:df:69:57:f7:cc:94:
8b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:41:46:70:C1:6F:70:9A:D2:F1:34:72:6A:AF:9B:FE:DA:D5:4A:7A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/996B7DC240E411EE9C2FBA2B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.94.0/24
Signature Algorithm: sha256WithRSAEncryption
66:e5:74:4f:36:a5:4c:ea:dd:72:ed:26:83:96:14:10:da:b1:
ad:10:f5:db:46:85:72:8a:07:9b:51:1f:b9:6f:2f:a7:00:5c:
43:2b:f2:15:0a:68:b0:75:68:e8:da:76:27:eb:14:bd:45:d7:
02:2b:af:82:b3:9c:e7:86:a4:71:98:05:22:bd:20:3d:f0:60:
f7:f2:59:46:05:db:04:61:85:2d:95:d7:12:2a:f9:a6:f5:4e:
1e:a5:01:15:dd:8c:c3:45:36:75:2a:d7:96:d5:d2:ea:22:d3:
d6:ad:af:59:ee:da:de:27:63:30:c8:34:0e:cc:5e:cd:fe:13:
e1:9f:bb:e0:11:9b:94:f2:58:7f:e7:8c:ba:24:7b:c7:4f:aa:
3f:75:12:2a:59:15:39:32:6c:77:7a:22:8b:a4:eb:b9:db:a6:
8f:9c:f7:9e:3f:37:d3:1c:cc:e1:a4:4a:14:d9:64:7e:d9:c8:
0a:21:db:69:ab:e1:f0:57:d0:87:a5:7f:9f:49:09:05:b3:0a:
0c:4a:a4:4b:f5:21:b9:ae:ba:6e:7a:02:f4:d1:b8:18:12:c0:
92:aa:fe:99:91:5d:96:66:62:7d:0e:15:5e:e9:4c:9e:36:cd:
db:d1:95:47:c2:ee:ad:5a:1d:e4:f3:58:25:c0:d4:97:7f:c0:
ab:6f:2e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 12:48:08 2023 by rpki-client on console-ams.rpki-client.org