Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D2F08DFAF9B611EDB6E081704AD9E6FC.roa
File: D2F08DFAF9B611EDB6E081704AD9E6FC.roa (raw, json)
Hash identifier: WrvB1vzHQd/7F445HQGfYWGa177YfEYJ0tfFwAmd6lc=
Subject key identifier: 67:1C:27:52:B2:20:17:C0:E2:FF:0C:D6:A4:3F:DC:99:11:2E:04:1F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0DD9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D2F08DFAF9B611EDB6E081704AD9E6FC.roa
Signing time: Tue 23 May 2023 22:11:54 +0000
ROA not before: Wed 24 May 2023 22:11:50 +0000
ROA not after: Wed 28 May 2025 22:11:50 +0000
asID: 46337
IP address blocks: 154.16.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3545 (0xdd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 24 22:11:50 2023 GMT
Not After : May 28 22:11:50 2025 GMT
Subject: CN=646d3a2a-f4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:0b:5f:6f:ba:fe:e6:75:d8:55:3c:cb:0c:
f6:19:5b:be:88:70:bc:44:81:38:b9:c8:ec:33:b0:
13:ba:6b:32:66:c5:f1:98:c3:41:35:09:90:0a:ba:
30:cf:24:3b:cd:94:c0:ba:8d:c1:3b:e1:f2:57:12:
d8:43:a8:5c:dd:5d:1d:ab:9d:01:a4:8b:b5:0f:84:
bf:4c:98:2b:d1:7b:bf:ff:58:ad:59:1d:68:cd:d7:
f9:a9:3e:31:18:54:e0:7d:03:7f:6d:91:97:cd:95:
f3:82:7e:aa:02:4c:93:cd:b3:2f:e7:7a:61:3b:0d:
41:20:86:24:f7:48:21:fc:89:12:59:d7:38:0e:14:
44:45:06:f9:39:e4:00:e8:ca:79:df:3a:4b:df:2f:
de:93:06:9f:b4:d0:44:6c:c9:8d:84:18:c4:38:78:
39:74:4e:f8:f0:c4:3f:54:96:f2:a5:b0:94:98:60:
a2:b6:52:ba:48:a7:3e:d7:ca:2d:b6:78:10:dd:f9:
dc:cd:e7:e7:97:46:e9:dd:fa:70:84:41:c1:c8:cb:
ba:1b:83:1f:8b:b3:4b:3a:a0:5e:ad:ef:5c:e5:e5:
6e:ba:d7:04:7e:6b:04:6d:f8:15:16:c2:79:d1:80:
80:65:36:8a:05:9a:11:9c:68:5e:5c:0c:ce:45:f8:
2d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1C:27:52:B2:20:17:C0:E2:FF:0C:D6:A4:3F:DC:99:11:2E:04:1F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D2F08DFAF9B611EDB6E081704AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.119.0/24
Signature Algorithm: sha256WithRSAEncryption
07:7a:9f:2b:d7:b3:ad:93:5a:c1:3c:3c:b6:8c:bf:60:ff:40:
ab:39:29:bc:28:a9:53:a6:cf:b3:8a:d5:9b:6c:37:ab:9b:77:
31:ef:3f:ac:c1:83:2c:9c:19:62:dc:10:7b:8c:70:87:27:18:
b4:e5:73:f5:0f:fa:9b:6d:f4:66:11:ab:01:c8:b8:7e:ba:42:
e1:54:29:4a:9c:30:ad:40:c7:fb:41:44:0d:f8:85:04:41:b1:
a2:7a:ba:a2:5c:65:a5:12:82:ec:f3:5c:5c:93:c5:94:87:12:
11:a5:92:36:3a:4d:d1:19:75:cc:44:ce:97:be:c4:09:2d:84:
5c:1e:15:4c:88:bf:2c:4b:c0:1f:d4:54:d0:ed:1c:fa:bf:0b:
c3:c7:34:7c:03:bd:b1:6c:00:81:9b:0d:8a:f9:af:11:98:37:
e2:f4:76:d8:53:36:a2:03:b9:b9:df:76:12:08:b1:5a:73:83:
5a:8e:34:3c:92:eb:6a:ed:35:f9:42:29:f4:f6:4f:b6:c5:f9:
6d:2f:47:98:b7:05:32:db:e3:58:cc:31:87:b2:4f:ae:17:cf:
73:1a:6b:18:e4:04:c3:a0:1f:9b:f5:d1:a0:5f:4a:0d:f3:7d:
2d:2d:03:31:3b:4b:12:bb:a6:c6:0f:82:9c:6d:00:6c:8f:b7:
97:a8:50:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org