Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C6F9FDCC90EA11EDAC9521F3F1222468.roa
File: C6F9FDCC90EA11EDAC9521F3F1222468.roa (raw, json)
Hash identifier: Ut7I6e5tBtYUVGo/+yMTFj+6PZ2Pee20uhjwYsnyj68=
Subject key identifier: FB:64:29:AF:B5:B5:E0:14:6C:B5:0C:FD:C5:A6:E8:EE:71:F6:FD:58
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0B62
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C6F9FDCC90EA11EDAC9521F3F1222468.roa
Signing time: Tue 10 Jan 2023 13:29:15 +0000
ROA not before: Tue 10 Jan 2023 13:29:12 +0000
ROA not after: Wed 10 Jan 2024 13:29:12 +0000
asID: 35913
IP address blocks: 154.16.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2914 (0xb62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 10 13:29:12 2023 GMT
Not After : Jan 10 13:29:12 2024 GMT
Subject: CN=63bd682b-5bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d5:99:e9:a1:d7:fa:e0:60:3a:ee:d8:c6:f7:
06:58:a9:3f:e4:53:47:7b:b2:78:49:5e:6b:c0:c2:
49:c6:48:ca:b5:55:f3:4f:77:b4:38:c3:4c:f3:f5:
a1:c7:70:96:85:53:49:70:ed:48:71:1d:99:d6:1c:
4e:6b:03:0a:d5:0a:64:ce:c1:5f:f3:36:13:7f:44:
8d:dd:07:b7:c3:08:12:a3:f9:90:92:72:1e:d2:ca:
49:ca:d5:f1:c9:52:df:ac:49:56:a0:8f:c6:4c:d7:
25:4a:54:57:97:96:67:78:0d:8b:78:3c:29:61:9a:
bf:cc:14:34:d8:b6:57:ff:fe:97:9e:02:a5:8c:73:
07:66:ec:05:31:39:17:f6:d0:c5:96:44:f7:d4:9a:
c5:49:2d:1c:b6:76:36:03:7d:b7:22:a3:46:7a:b5:
07:27:e6:da:79:92:69:d0:90:90:fe:d0:a9:c1:b1:
09:f3:17:b2:95:b7:dc:73:04:b6:c3:f5:0d:96:5e:
5c:f0:87:47:9c:9e:e6:a9:3d:3d:6e:d4:ef:b9:af:
17:90:f8:4d:dc:e2:47:23:3c:b1:ab:99:7f:e4:3d:
50:8f:bd:5f:18:6f:a6:77:3f:b2:a4:d1:13:d6:a0:
3b:f9:82:75:07:31:d2:b4:a5:7a:5b:13:61:1f:1c:
f0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:64:29:AF:B5:B5:E0:14:6C:B5:0C:FD:C5:A6:E8:EE:71:F6:FD:58
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C6F9FDCC90EA11EDAC9521F3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.52.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:26:f6:90:04:03:37:aa:bb:bf:fa:ea:22:15:05:b2:83:23:
d8:f5:ab:31:e0:3c:96:a0:df:ef:2e:f5:63:62:7b:00:f6:73:
74:be:ac:10:ac:d7:b9:be:38:78:77:49:f4:80:5e:85:df:f1:
72:24:69:dc:29:ed:3e:0b:2f:1e:c2:c2:19:a9:f1:3c:be:1a:
55:a8:75:7f:b7:f2:fa:38:70:b9:5e:7a:53:41:16:97:25:58:
91:7d:5e:62:95:97:3e:d0:9c:7b:51:3c:49:c7:ef:d5:f0:4c:
2e:e9:1d:ab:7e:2e:30:a3:11:6c:48:1d:e5:96:58:3b:af:5a:
89:80:3c:e4:6f:46:17:a7:b8:3e:68:bf:47:28:29:45:dd:af:
71:ef:88:2f:12:b3:62:6d:bf:9b:9e:8f:92:e8:6a:c7:80:a2:
0b:a6:58:1e:e4:89:d4:40:5a:cb:e6:3c:01:04:a5:ec:f9:e3:
48:54:dc:e0:4b:b6:0a:08:e6:1d:81:00:ba:26:55:e9:34:d5:
38:08:b4:5e:66:97:02:c4:d4:d3:9a:f7:e2:eb:2a:f7:8f:92:
0e:62:d3:2d:b8:03:b1:e8:f0:f1:2e:b2:cb:73:dc:3b:32:e4:
0c:a0:af:f3:88:31:72:33:56:ae:0e:59:ce:36:f0:72:17:37:
6a:a5:a3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org