Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9C5B5AC2D9B811EDB53132F62F6D8C1D.roa
File: 9C5B5AC2D9B811EDB53132F62F6D8C1D.roa (raw, json)
Hash identifier: o/pTuohGF0liJXSrWz6Pym/dORnP5DRowt3Poj/IQZw=
Subject key identifier: 90:11:AB:C9:5B:97:EE:BD:89:A1:81:2E:05:F3:62:51:17:BE:C9:49
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D4A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9C5B5AC2D9B811EDB53132F62F6D8C1D.roa
Signing time: Thu 13 Apr 2023 05:04:04 +0000
ROA not before: Thu 13 Apr 2023 05:03:59 +0000
ROA not after: Tue 01 Apr 2025 05:03:59 +0000
asID: 834
IP address blocks: 154.16.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3402 (0xd4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 13 05:03:59 2023 GMT
Not After : Apr 1 05:03:59 2025 GMT
Subject: CN=64378d44-e2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:f4:be:fa:94:c0:88:a7:f6:e5:21:09:68:
fc:c8:b2:7f:06:d3:85:c5:c2:34:77:0c:c0:8a:13:
9b:75:d8:cd:5a:c3:2d:1c:a0:4b:10:9e:66:01:68:
34:f2:1a:df:4e:be:9f:db:85:d8:9c:4d:3b:b1:67:
c3:e1:00:29:ca:4a:da:a9:78:7f:c8:63:af:be:d0:
62:4d:f1:4c:48:c0:47:6b:b9:5e:16:be:37:7a:df:
0b:8d:59:f8:4b:c0:1f:a8:67:ba:b2:b8:b5:ac:ae:
e8:bd:ef:e6:61:ca:f7:38:42:dd:b0:aa:dd:e6:4d:
5f:57:c2:f9:8a:d3:a3:36:09:3d:09:1c:b2:c7:e9:
5d:11:58:b8:cd:07:37:f8:81:36:1c:39:33:19:9e:
98:25:6f:f3:b6:9b:29:4c:fc:72:5a:c4:1e:f3:ff:
0d:bd:5d:57:af:57:f8:33:da:f0:cc:fb:6b:48:56:
49:1e:81:2c:88:95:d6:31:a5:50:9c:22:5a:1e:d3:
af:ae:bb:d6:0b:15:7e:d0:0d:74:ac:38:cd:2c:ba:
7e:d6:16:24:b3:d2:ad:dc:4e:ff:64:29:90:c2:df:
20:47:c5:c6:96:05:9c:8a:a6:5b:52:4e:2c:cb:66:
17:5e:c0:31:ca:c6:96:b5:ce:45:7d:e4:b1:0c:85:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:11:AB:C9:5B:97:EE:BD:89:A1:81:2E:05:F3:62:51:17:BE:C9:49
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9C5B5AC2D9B811EDB53132F62F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.183.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:b9:17:9c:cf:b4:6a:3a:e3:6d:38:8f:0d:10:64:f0:99:2b:
7b:ce:3b:49:07:6a:e7:67:e1:51:f9:94:26:83:e6:15:5c:98:
98:33:a6:ac:bf:4b:5d:e0:af:1d:74:c6:19:62:b4:58:31:ad:
c6:fc:28:7f:c5:77:f2:fd:78:5e:f7:c3:65:3c:23:47:23:84:
47:ae:ea:6d:08:47:15:8c:56:19:ed:25:c0:47:3a:58:91:cb:
a0:8b:10:2c:7d:61:47:7d:b0:6a:17:c5:a0:69:e5:2f:6b:13:
36:2b:90:a6:e8:e5:ed:15:04:62:6d:50:c8:a8:43:6d:77:64:
d1:fd:13:6c:27:e0:9b:3c:07:4c:b7:40:06:c9:22:15:2b:ba:
7f:8d:cc:bd:9e:79:df:6f:7b:e5:dc:0b:58:72:fd:f5:64:fc:
ec:30:3a:24:f5:94:12:78:92:d5:a4:0e:5e:0a:87:1d:5c:f5:
69:0f:bb:ae:d1:f4:64:b6:b9:98:41:f4:f0:14:d7:a9:25:9c:
5a:fe:d4:a3:d4:76:f1:89:0c:bd:2e:45:39:cb:89:c5:4b:b5:
af:5f:b5:6c:e4:53:f6:be:0a:6c:db:8f:58:4d:e0:32:10:d2:
5a:66:7c:83:c7:e2:e3:79:8f:21:36:50:cc:96:86:89:04:50:
1e:61:64:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org