Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CBC8047CB43811ED89F8C09CF1222468.roa
File: CBC8047CB43811ED89F8C09CF1222468.roa (raw, json)
Hash identifier: J5s2bwi2sz/q0Lu2vtH3KmTvM0yUr77Jgs0iFT4t6hQ=
Subject key identifier: 1E:6F:F5:DF:F3:FE:51:16:3B:02:7D:B2:10:FD:F6:DA:CE:DD:88:46
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0BE5
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CBC8047CB43811ED89F8C09CF1222468.roa
Signing time: Fri 24 Feb 2023 11:45:55 +0000
ROA not before: Fri 24 Feb 2023 11:45:51 +0000
ROA not after: Sat 22 Feb 2025 11:45:51 +0000
asID: 61317
IP address blocks: 154.16.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3045 (0xbe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 24 11:45:51 2023 GMT
Not After : Feb 22 11:45:51 2025 GMT
Subject: CN=63f8a373-a7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:a0:50:d6:94:a0:82:26:1b:ab:0a:82:40:
51:0d:53:3c:e5:c1:af:d0:84:d9:16:a8:12:7b:97:
9b:01:80:58:6c:38:a5:4e:6c:de:be:28:3f:2d:82:
88:74:5d:ca:36:73:23:c0:ff:a2:d9:a1:b1:86:2e:
aa:cc:ec:6b:7a:3c:eb:4d:63:3e:f5:7e:6a:c0:1c:
a5:0a:1d:d5:82:e3:5c:fa:f8:92:bd:39:fc:b0:1b:
70:24:38:c9:3f:8d:26:02:e8:25:6c:bb:4c:df:9c:
08:fb:e4:a7:ce:68:0f:31:54:18:96:93:65:1b:6a:
f9:5e:27:6d:85:a2:0b:a7:0d:20:d8:58:18:ca:0b:
22:57:26:9a:9c:30:12:8b:8a:13:03:d5:55:7b:18:
90:ca:74:c1:90:55:9b:be:20:64:93:6e:1e:5a:81:
5c:0f:9a:db:b7:6a:91:71:89:2f:35:c0:88:3c:e8:
29:0f:11:93:1b:7b:14:03:27:80:e9:26:fe:aa:f3:
74:8c:bf:d5:96:0f:19:d5:25:74:15:b1:48:bf:2e:
36:fc:4d:6b:73:7b:a3:8f:88:e7:1d:32:c1:f0:02:
f0:e7:44:c9:07:39:dd:56:af:34:6d:cb:6d:66:a2:
2f:2a:65:09:fd:e3:1e:0c:5c:ff:c9:49:1e:25:21:
da:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6F:F5:DF:F3:FE:51:16:3B:02:7D:B2:10:FD:F6:DA:CE:DD:88:46
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CBC8047CB43811ED89F8C09CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.10.0/24
Signature Algorithm: sha256WithRSAEncryption
49:fe:98:64:c7:99:d7:80:17:b8:3f:21:27:54:7e:29:d9:be:
84:ca:89:44:88:2a:8e:4b:f6:ac:b9:a1:38:56:a7:73:de:f9:
5d:45:6a:53:d3:cb:4a:25:7c:3f:b6:c0:80:b3:7d:c4:b5:23:
aa:5c:78:53:a3:62:7e:eb:40:94:39:4d:26:35:ea:42:06:f1:
43:c8:2d:06:ea:3b:d8:d4:c4:49:e7:bc:89:1b:0b:3e:82:4d:
63:26:12:c4:bd:b9:68:64:3e:d6:e1:3b:6d:74:a6:90:3f:49:
e4:e8:e5:35:61:79:0c:13:00:d3:8e:76:54:76:ad:dd:75:bd:
3d:9e:96:21:d4:5d:c1:be:5b:0b:70:f1:ad:23:f9:9a:5f:4d:
14:16:1a:dc:04:46:49:23:fc:04:9a:71:7f:02:05:ed:ac:58:
6d:55:91:0e:8a:75:33:12:0e:1f:78:11:29:5d:3b:4e:45:93:
e4:1b:0b:57:4b:02:0c:20:94:6f:8b:5c:70:13:eb:4d:58:c9:
37:c3:a6:6a:fb:a4:28:ed:bc:71:ca:27:da:34:da:57:14:e6:
88:2c:46:47:db:7b:d7:9d:82:ec:46:8c:4f:51:74:13:42:5e:
1f:1a:ed:44:5a:84:9d:de:06:79:29:8f:ea:f3:11:88:1d:c1:
20:d7:f9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org