Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A14E2A00B8F711ED965ACFF2F1222468.roa
File: A14E2A00B8F711ED965ACFF2F1222468.roa (raw, json)
Hash identifier: R6jj0tT0ouQPLqDBNVbn0vChp7uWri+NLRR7wc3yh4E=
Subject key identifier: 2F:6B:3F:56:A9:06:95:2B:BC:AA:ED:00:09:FE:A0:78:EF:D6:60:89
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0CAC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A14E2A00B8F711ED965ACFF2F1222468.roa
Signing time: Thu 02 Mar 2023 12:42:02 +0000
ROA not before: Thu 02 Mar 2023 12:41:58 +0000
ROA not after: Sat 01 Mar 2025 12:41:58 +0000
asID: 61317
IP address blocks: 154.16.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3244 (0xcac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 2 12:41:58 2023 GMT
Not After : Mar 1 12:41:58 2025 GMT
Subject: CN=6400999a-ff14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:04:1b:7d:94:c8:83:cf:1d:93:cb:82:57:
64:3d:b5:df:81:8d:07:35:9b:58:ca:97:0e:9d:44:
39:87:3a:0b:ed:4a:d7:d7:aa:b2:99:0e:66:3d:6b:
fa:3c:80:9c:97:76:e3:bd:f7:39:10:f4:77:ac:8e:
0e:90:ab:a6:5a:67:10:d7:1c:84:84:03:ed:56:b2:
40:de:0a:c3:fe:ec:93:8c:9c:b6:77:14:1e:0a:dd:
72:af:0a:d2:e1:a1:8d:76:3f:ed:cf:d9:ff:bd:77:
3a:c3:63:2c:15:01:54:a5:6b:d2:eb:7b:0f:33:f2:
28:b2:a1:f5:60:1e:bd:5f:1d:46:73:b9:dd:c3:2c:
41:6c:28:5e:cf:27:41:1a:01:32:17:63:47:6d:78:
8b:0e:c1:a0:b1:c1:85:1c:90:28:7d:e6:50:77:e0:
0f:1b:04:e9:18:a6:fb:1f:fe:37:d7:6c:47:d1:55:
e1:0a:49:d8:dd:24:73:fc:37:44:0b:b9:5f:bf:fe:
79:df:0d:ad:61:58:76:fd:be:8e:a6:32:0d:0a:b8:
ee:7f:6a:f6:5f:07:d5:0d:d0:18:ac:39:a8:b6:93:
6a:19:f9:09:b9:09:58:f4:67:6f:54:d9:f5:8e:25:
1d:f4:9a:74:08:cc:1d:f6:40:8c:88:b0:a4:28:b4:
38:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6B:3F:56:A9:06:95:2B:BC:AA:ED:00:09:FE:A0:78:EF:D6:60:89
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A14E2A00B8F711ED965ACFF2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.225.0/24
Signature Algorithm: sha256WithRSAEncryption
30:e4:7a:45:60:e3:38:89:c7:56:5f:ee:2d:15:57:a5:96:c3:
f9:1e:a6:61:08:b9:e0:8a:3a:ae:42:73:0d:8b:c2:ec:81:c4:
28:49:cc:6c:7f:1f:b7:e7:7f:b2:db:6a:b7:60:14:c5:f8:38:
02:b9:a3:8a:19:1d:ea:86:24:93:f3:8e:6d:c6:9b:10:7b:b2:
c7:0f:0f:6d:00:d4:3a:50:f4:6f:89:49:2a:74:5c:44:63:54:
a6:4b:78:9b:3e:aa:d2:7c:fc:88:ae:f2:63:b3:6a:b2:14:f2:
5f:b4:f8:a6:94:a5:8d:d0:60:65:3a:4c:41:0d:69:2a:71:19:
f7:ea:ec:81:fa:72:b7:18:55:2a:89:5e:7b:88:49:30:b1:62:
f3:4d:f0:fb:d2:ab:f4:3f:94:d4:04:6f:4a:df:2e:69:11:9a:
4a:e1:9f:27:dd:fa:ed:5a:b8:94:06:3a:cb:be:64:b5:73:09:
cc:23:8c:65:0f:36:93:15:23:c8:7d:a7:52:57:66:cc:2c:46:
cb:6d:49:90:1d:2a:0b:a0:c5:5f:1f:f4:8e:f9:58:08:e6:94:
a5:ad:6f:75:d3:07:76:7d:ba:dd:14:ff:c5:3c:71:d1:a3:5a:
80:50:a6:38:e3:a9:c8:01:dc:2b:05:29:d2:3e:05:0a:38:bc:
fa:4b:83:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org