Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ADEC7E96351211EE92CABA514AD9E6FC.roa
File: ADEC7E96351211EE92CABA514AD9E6FC.roa (raw, json)
Hash identifier: ylFzQsFmXQ+Ib8TfaePSKZ2PkM+KWfYmbkyhSGrFBzs=
Subject key identifier: D8:DF:F1:DC:21:C8:C4:91:2D:F9:61:21:5D:C1:A1:6B:C1:68:0D:1A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1110
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ADEC7E96351211EE92CABA514AD9E6FC.roa
Signing time: Mon 07 Aug 2023 11:08:04 +0000
ROA not before: Mon 07 Aug 2023 11:08:00 +0000
ROA not after: Wed 14 Aug 2024 11:08:00 +0000
asID: 834
IP address blocks: 154.16.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4368 (0x1110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 7 11:08:00 2023 GMT
Not After : Aug 14 11:08:00 2024 GMT
Subject: CN=64d0d094-897a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e3:22:66:89:95:54:8d:cc:6e:ad:c5:fb:99:
97:61:c6:fb:66:df:1a:07:b3:14:e2:2e:b2:57:29:
31:e1:f6:d3:a8:f5:f4:18:73:1b:45:ac:5f:77:cb:
91:d8:6f:d3:b0:b5:fc:ee:dd:0f:0e:85:f2:fa:5e:
46:a1:6a:37:f7:84:1e:ea:ea:b5:10:36:0c:f2:5f:
55:3a:55:69:c5:9c:f6:bc:3e:b9:9f:08:b4:68:90:
f4:a6:31:9c:9d:ae:b4:a2:9a:e6:8f:18:bc:59:01:
37:7e:6d:d7:23:f6:fd:8b:91:82:c9:d8:58:e7:c0:
87:6b:c2:2f:2c:f9:07:41:7e:2d:d5:b3:96:ef:52:
32:fd:65:8a:e1:d7:60:f1:0f:e2:c3:49:dc:d0:98:
64:cf:07:43:ed:21:58:a6:23:61:5a:3c:d0:bd:22:
a6:3a:0e:b2:82:1c:c3:f2:ac:f4:91:e2:ed:de:9a:
c7:8d:bb:d5:8f:30:90:ad:19:c5:f8:da:fd:c8:b1:
9c:83:1c:7e:87:c6:ec:ca:cb:bc:16:bf:3d:a0:98:
2c:7f:fd:25:8c:90:a1:de:69:43:74:84:b8:82:80:
9c:08:a7:1d:90:6a:43:91:ff:33:07:6c:47:75:14:
e1:4d:55:88:cb:76:ed:df:63:28:c6:0e:b7:04:3e:
6c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DF:F1:DC:21:C8:C4:91:2D:F9:61:21:5D:C1:A1:6B:C1:68:0D:1A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ADEC7E96351211EE92CABA514AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.34.0/24
Signature Algorithm: sha256WithRSAEncryption
18:fb:8a:ac:b8:9a:ab:a8:a2:8d:57:1e:61:42:3b:93:bb:f8:
55:98:b0:ab:95:92:cb:97:a7:57:2e:8e:05:07:1c:17:0b:09:
33:b2:b0:75:8d:bc:00:7d:0a:5d:41:42:94:81:ac:5f:83:68:
4c:2e:bf:e5:9f:c4:19:14:20:92:f2:c0:7b:b0:7d:5c:46:71:
c7:b0:6f:fa:b6:53:cd:c7:fb:25:4f:2b:73:02:08:9d:8e:14:
27:d3:8e:21:e9:cb:1d:3b:68:2d:b8:c7:d6:39:70:a6:00:95:
9f:e8:dd:9e:f6:64:cb:ac:51:26:64:97:3d:4b:5f:74:18:06:
70:53:15:94:cf:54:a0:bf:31:5b:13:cf:93:57:c3:c4:33:72:
ca:33:9f:e2:c9:72:d8:21:13:a7:03:cd:28:f2:2a:15:b0:a5:
d9:4d:e4:7b:3d:a4:0c:33:ef:04:6f:d5:59:ab:0e:89:0b:e1:
cc:47:a2:86:d5:2b:c9:9c:7d:ad:cc:4c:30:23:20:56:36:f7:
c2:61:e5:b6:48:ef:72:34:8a:78:0b:13:2e:86:9b:b4:1e:14:
b9:13:9b:4d:8e:55:51:2a:27:6a:d6:85:cd:ad:42:59:a0:02:
3a:99:84:3c:7e:1d:b8:e8:0a:c9:9e:f1:a3:5b:7c:b5:ce:6a:
85:1d:13:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 25 11:53:59 2023 by rpki-client on console-ams.rpki-client.org