Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EC5288D0FFD211ED8D5504804AD9E6FC.roa
File: EC5288D0FFD211ED8D5504804AD9E6FC.roa (raw, json)
Hash identifier: 75Bm6/LsuKG1BiUJv8gJF+XQ6uMBaekX4O679JXGDeU=
Subject key identifier: 42:A4:3D:65:2B:FE:CF:07:51:2B:B7:D5:ED:16:07:6C:06:D5:24:1E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E31
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EC5288D0FFD211ED8D5504804AD9E6FC.roa
Signing time: Wed 31 May 2023 16:48:09 +0000
ROA not before: Wed 31 May 2023 16:48:04 +0000
ROA not after: Sat 31 May 2025 16:48:04 +0000
asID: 834
IP address blocks: 154.16.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3633 (0xe31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 31 16:48:04 2023 GMT
Not After : May 31 16:48:04 2025 GMT
Subject: CN=64777a49-59af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:a0:fe:27:c3:bc:44:77:dd:2b:18:05:06:
70:b1:d9:83:78:ff:13:29:37:7b:18:24:d6:20:10:
50:82:f5:c3:16:00:42:0c:e1:1c:95:b2:13:e2:e8:
6d:d6:1e:f5:d4:1a:e4:8b:46:a1:7f:3b:23:ea:5c:
6e:1e:8f:4a:b0:3c:90:5c:f3:de:c8:41:f8:51:5a:
10:09:2f:ee:5f:1f:da:27:d0:d6:f4:84:87:f9:bc:
f5:b0:7a:ac:48:5b:e6:db:ed:0b:18:bd:b4:78:3d:
73:43:94:fe:3d:e1:32:64:a8:7b:fa:ed:4a:d0:59:
7f:3d:1c:30:a9:cf:53:e1:ae:cc:8a:ad:c6:39:92:
2f:14:6f:5b:34:52:25:b2:f2:1d:eb:8c:ba:76:25:
be:ac:39:c7:c0:55:96:52:0e:b5:c8:5d:b2:d4:6c:
1e:60:92:3a:f2:ce:4b:c3:63:c2:49:99:4d:fa:19:
f1:44:22:03:19:63:c1:63:49:aa:95:28:9c:c2:0a:
0e:1f:fd:94:fb:92:d2:d6:4e:44:60:ef:01:eb:98:
1f:70:53:d8:f2:ca:25:9f:70:5e:7a:f5:c9:28:31:
ec:35:0a:42:d0:d1:0a:50:69:a2:ed:a8:78:01:ba:
60:51:95:b3:fc:ee:71:60:83:78:1e:5f:06:54:9d:
03:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A4:3D:65:2B:FE:CF:07:51:2B:B7:D5:ED:16:07:6C:06:D5:24:1E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EC5288D0FFD211ED8D5504804AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.61.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:84:8c:b2:d7:df:70:09:57:2a:30:3d:7c:07:8b:6b:a9:9c:
5b:52:d2:39:b2:fe:c9:14:2f:02:33:fd:dd:91:3f:5d:2f:d3:
08:4e:fc:8a:b9:92:c9:82:00:d6:c9:a6:fd:fd:23:c9:32:96:
cb:bf:7c:e6:a6:c9:22:44:ea:c4:80:bd:e4:bf:f8:85:fd:95:
55:30:e4:e6:f5:88:7b:4d:7a:6a:f4:f1:d7:6a:fd:c0:5f:95:
f5:d3:da:09:42:71:a4:1b:f0:85:34:4f:e9:cf:74:d1:03:25:
3b:65:13:f3:e3:6a:d5:45:8a:4d:fe:fb:d5:d7:ce:7a:b2:bb:
8a:e3:22:ba:22:d8:70:62:1d:d2:bd:10:83:cb:76:52:3d:63:
b7:80:b2:30:6d:a9:cb:82:d5:8d:2a:97:4c:6a:ce:dc:d7:cd:
99:a3:0b:07:ca:6f:03:47:2f:5e:72:dc:bf:eb:bc:3b:42:a5:
f5:e6:43:f1:54:05:70:5a:6b:08:ec:80:cd:a9:60:76:8d:77:
35:5f:ff:46:e6:83:45:8a:a3:94:86:98:e1:d0:36:30:03:62:
f6:d1:97:1b:c3:ad:25:03:67:0e:0f:59:9b:f9:bf:9c:a2:a0:
69:46:56:3e:08:12:05:09:7a:d0:2a:7e:53:3f:b2:d2:2a:09:
42:e3:68:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:03 2023 by rpki-client on console-fra.rpki-client.org