Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BB9D3530FFBB11ED86E6B93C4AD9E6FC.roa
File: BB9D3530FFBB11ED86E6B93C4AD9E6FC.roa (raw, json)
Hash identifier: zCx09a1ce1J0hpZ0aI7naVNU0FCuFpldDVUeRBbvNY4=
Subject key identifier: 89:76:EC:98:05:5F:D6:CA:97:48:7A:36:E8:DC:05:F4:29:D2:22:47
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E16
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BB9D3530FFBB11ED86E6B93C4AD9E6FC.roa
Signing time: Wed 31 May 2023 14:02:09 +0000
ROA not before: Wed 31 May 2023 14:02:05 +0000
ROA not after: Fri 30 May 2025 14:02:05 +0000
asID: 834
IP address blocks: 154.16.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3606 (0xe16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 31 14:02:05 2023 GMT
Not After : May 30 14:02:05 2025 GMT
Subject: CN=64775361-3423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:96:85:c3:04:86:70:bc:e3:f8:f8:29:c4:
58:8f:c9:98:09:a9:9e:c6:5d:79:53:a0:02:15:69:
4e:5f:6e:bf:f2:2e:a2:10:d7:b0:f4:ee:79:3a:ad:
6c:9f:dc:cd:f1:cc:9d:fd:9d:f2:ea:38:57:8c:0d:
50:39:6d:48:05:4b:bc:4a:d9:09:a8:f7:61:54:2e:
cd:2c:e3:70:d0:a6:b4:fb:3d:f1:6b:36:88:a5:96:
b0:1a:dc:22:51:c3:ad:e8:06:f5:4a:0e:c4:6c:5f:
c8:1f:76:2f:f7:7b:3e:dc:b3:2c:97:bf:74:80:e8:
d0:ce:93:df:89:9b:18:a2:79:cc:b2:3b:73:c1:87:
db:6e:48:a7:52:75:b9:ed:0d:1f:93:75:59:b0:75:
f8:78:4d:ee:be:d4:ec:cd:b2:1a:c9:77:13:4f:ec:
b0:89:5f:e3:ae:df:49:f0:67:bd:15:79:a4:74:10:
35:e4:44:a4:18:75:e3:c3:ea:24:37:dc:e7:4a:6f:
ab:66:64:ce:ca:31:ca:c7:04:6d:0e:4b:51:6e:a7:
8b:30:66:9b:19:82:70:94:dc:04:4a:07:a3:5d:20:
c7:39:9d:5b:72:f2:b9:d1:f0:f1:cc:93:63:c8:84:
7b:d6:14:44:d0:97:99:94:1f:fd:70:f4:02:5b:0c:
c9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:76:EC:98:05:5F:D6:CA:97:48:7A:36:E8:DC:05:F4:29:D2:22:47
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BB9D3530FFBB11ED86E6B93C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.87.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b1:b0:9d:d6:14:da:7b:4c:c2:d2:85:c0:be:f9:1b:1b:67:
43:e8:81:6d:45:db:f7:cc:d5:22:e9:ca:ae:d9:34:17:87:cf:
58:26:0f:e8:89:50:35:f4:a3:93:6c:f1:fb:bd:15:cb:79:c8:
65:42:85:4d:bb:af:ef:36:8c:1b:64:cf:c3:00:8f:a2:e6:81:
98:88:10:1a:4e:bb:be:17:fd:00:35:5f:f3:1c:8c:e8:82:be:
e5:5b:27:b7:11:af:02:52:38:26:3f:62:12:78:0b:60:0b:a7:
99:3b:ea:05:54:53:11:03:73:34:ae:0b:c8:8a:e0:32:1c:1c:
15:80:fb:e4:30:71:ba:a5:a3:0f:fe:e3:de:5c:e6:d0:68:28:
5b:ce:09:ab:fc:ca:7c:b3:d8:33:1f:b6:1d:5d:a9:de:72:bb:
ea:e5:b5:28:8e:a1:f8:b3:4f:3c:d2:e2:87:be:df:b5:49:94:
91:d8:e4:8e:cf:ea:9e:05:ca:bf:fc:7d:32:5c:11:b2:30:73:
98:ca:32:71:08:22:fb:4b:7e:39:f2:91:7b:63:f9:8e:be:10:
aa:31:8b:fd:c9:e3:e6:51:60:d3:17:5a:c1:d7:40:fb:78:3a:
1c:90:da:76:0a:10:e0:00:77:cd:6b:8c:4f:a4:18:c8:5b:73:
92:8d:b0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org