Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A426ED5268F111EEAC43714A4AD9E6FC.roa
File: A426ED5268F111EEAC43714A4AD9E6FC.roa (raw, json)
Hash identifier: bnQN7JdnhkosMzGB/grWkIr+xBvyEwo2cnEvcReUFNc=
Subject key identifier: 07:97:B0:AF:71:B0:DA:B9:47:C2:47:E5:5A:91:AB:DB:35:1F:CB:96
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 12CA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A426ED5268F111EEAC43714A4AD9E6FC.roa
Signing time: Thu 12 Oct 2023 11:22:35 +0000
ROA not before: Thu 12 Oct 2023 11:22:31 +0000
ROA not after: Wed 09 Oct 2024 11:22:31 +0000
asID: 213060
IP address blocks: 154.16.24.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4810 (0x12ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 12 11:22:31 2023 GMT
Not After : Oct 9 11:22:31 2024 GMT
Subject: CN=6527d6fa-0158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:40:c0:dd:db:62:e6:f9:c0:0f:85:df:4f:
7f:b6:55:75:bd:d2:e4:69:bf:f4:90:53:cb:ad:b6:
63:6a:94:b6:bb:e7:1c:cc:a9:da:d9:4b:77:1c:d1:
36:bf:bf:fc:dc:7e:c2:4a:54:1f:f9:c9:82:6c:37:
55:b5:61:ab:93:be:c3:21:85:9b:dc:17:d0:4b:45:
a8:62:db:8d:bc:e6:dd:4f:ae:f0:2a:e1:39:4a:ea:
b3:1e:95:22:0b:7b:e8:2e:54:18:4a:ee:f0:04:ea:
ac:3f:a5:d9:aa:15:88:f0:c6:8e:90:62:3e:eb:fc:
a5:4f:09:c0:3a:5a:38:fa:b3:0f:7a:a3:7d:f3:52:
03:93:da:ca:a9:d8:77:e0:8b:8e:85:07:38:7a:0c:
58:c5:5e:f7:f4:c6:da:a2:8d:2a:3f:c1:80:ad:14:
fb:90:b4:ef:87:af:32:b8:3d:43:d2:a8:b1:cc:35:
66:44:ea:9f:bc:91:44:e6:ef:af:c9:68:41:5e:86:
12:8a:30:24:2c:5d:24:6d:f2:87:e8:79:9f:d7:f3:
ae:99:7f:f1:07:85:4c:c6:8f:ac:84:c5:5c:79:86:
6e:27:b6:9e:36:da:90:d9:c5:89:47:fe:3f:9e:4d:
6d:02:e7:c4:fd:0b:de:2e:58:a3:2a:18:70:74:b9:
d3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:97:B0:AF:71:B0:DA:B9:47:C2:47:E5:5A:91:AB:DB:35:1F:CB:96
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A426ED5268F111EEAC43714A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.24.0/23
Signature Algorithm: sha256WithRSAEncryption
76:31:c7:72:bd:95:d5:8c:23:5c:5f:3d:31:ca:07:ef:29:a4:
14:03:8a:ab:52:cd:5f:63:c5:ff:a4:0b:e1:9e:7b:df:80:13:
c7:ab:b4:07:6b:0a:a9:15:46:9c:25:1e:a2:f7:77:dc:be:b9:
2c:10:eb:e8:b6:16:26:74:b6:20:ee:1d:d4:c8:7a:68:82:b8:
e6:c8:77:fc:90:4f:f2:b9:37:9d:db:4a:e8:3a:ea:de:0e:ec:
e2:fe:8c:c4:51:37:1c:4e:88:e1:57:fd:89:b6:73:7c:79:fd:
0d:95:e7:c5:1e:e7:94:67:4b:ec:f1:d2:4d:cd:77:22:80:8b:
d0:a1:18:a8:e7:39:87:06:8b:ff:19:f8:28:b3:b2:77:fc:d3:
e4:5c:fd:c4:d1:85:b8:2a:0c:81:f3:00:91:2c:94:5b:d0:e6:
ff:2f:bf:1d:f7:84:83:ff:50:87:80:f6:5a:11:98:20:8c:74:
f2:c5:ea:b1:42:43:54:ef:5f:e2:d8:b5:fa:83:3c:2b:ab:a8:
2b:b7:fc:d1:7a:d6:1e:b2:20:4f:f4:11:5e:a7:a0:f3:0e:1b:
98:f3:c5:20:cc:24:18:9a:2f:f8:ad:50:9b:c8:37:cd:e1:7d:
b7:5b:21:6a:e6:39:cc:de:e6:1e:50:26:6c:e3:a1:94:dc:fe:
fa:08:53:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 13:18:47 2023 by rpki-client on console-ams.rpki-client.org