Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ECBDD8940EB211EE9DBA4D134AD9E6FC.roa
File: ECBDD8940EB211EE9DBA4D134AD9E6FC.roa (raw, json)
Hash identifier: bdFvRqiB4JGnOLtlY5z1rxlmyrgGDwhP+6tz8yct0SM=
Subject key identifier: 65:DB:7B:C8:99:B7:59:28:35:AA:3C:49:AC:FE:AD:FD:6A:3A:8A:1E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0FB5
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ECBDD8940EB211EE9DBA4D134AD9E6FC.roa
Signing time: Mon 19 Jun 2023 15:06:53 +0000
ROA not before: Mon 19 Jun 2023 15:06:48 +0000
ROA not after: Wed 18 Jun 2025 15:06:48 +0000
asID: 834
IP address blocks: 154.16.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4021 (0xfb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 19 15:06:48 2023 GMT
Not After : Jun 18 15:06:48 2025 GMT
Subject: CN=64906f0d-58a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e8:56:1b:36:4c:9a:f1:17:e3:02:86:3b:29:
88:a6:c1:a6:7b:dd:14:f3:34:25:10:65:2f:dc:53:
1f:a4:29:a9:83:89:d5:ff:2c:dd:81:9a:d1:58:c7:
74:fe:a3:2a:40:30:9f:6e:76:ac:d4:21:15:e9:a1:
75:c2:8b:4a:78:3d:cb:40:7c:23:e3:10:9c:6f:05:
78:1c:97:f8:0d:ed:31:b6:d3:fc:a1:e2:aa:75:95:
28:3a:c5:92:b3:a2:df:b0:af:b6:3c:3a:c1:e2:37:
e4:68:cf:0e:1a:29:58:ba:01:e1:d7:0a:41:22:9c:
b0:31:60:15:16:8f:7b:38:46:3d:dd:1b:53:2f:7f:
62:19:f5:59:fe:ba:95:00:c5:e5:f2:28:eb:2d:85:
71:e5:a9:49:fa:a9:5c:be:0a:78:65:c7:28:63:7a:
32:b4:19:66:df:1f:6c:3a:32:38:ba:7f:37:c0:6d:
db:39:07:23:a5:06:33:db:a3:2f:21:72:33:05:97:
e3:05:6b:eb:e7:e8:d7:49:34:f7:7c:b7:83:e0:dc:
41:9e:2f:1b:9c:55:ce:11:fa:63:7e:4e:69:c5:a9:
0c:a8:1d:db:1e:66:13:eb:df:ed:9e:ee:4a:b1:dc:
d7:05:e6:f1:e7:7c:1f:a6:8e:98:b7:1c:f5:06:9c:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DB:7B:C8:99:B7:59:28:35:AA:3C:49:AC:FE:AD:FD:6A:3A:8A:1E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ECBDD8940EB211EE9DBA4D134AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.33.0/24
Signature Algorithm: sha256WithRSAEncryption
84:73:09:eb:17:48:72:43:70:4c:c9:01:cc:f6:f5:76:08:11:
dd:59:aa:3c:64:33:55:fc:fb:46:2b:54:63:df:eb:7a:67:d8:
56:88:19:38:d6:ad:3e:fb:e9:1f:7d:4a:7e:55:4d:de:6c:11:
9d:8b:61:72:d9:60:d0:db:e8:2f:e0:42:6c:79:0c:a8:b1:91:
ba:dc:83:ae:e2:95:5b:6c:0d:d2:e0:3d:0e:51:09:da:a8:7b:
15:50:55:55:66:81:ee:a3:23:1d:c7:69:df:ea:d6:96:ac:42:
db:1a:81:6c:2e:cb:9d:76:78:ed:47:1e:2a:6b:49:ae:cd:5a:
ce:a3:56:14:a2:41:b1:86:10:6b:10:16:30:dc:b3:bd:fc:91:
05:42:ce:49:31:67:d6:08:ef:71:5c:79:be:de:00:01:34:63:
e5:41:b6:37:55:f9:7f:dd:ea:46:ec:22:9b:ab:9c:f0:f1:3e:
fe:13:45:d7:5e:ed:d3:c1:ae:11:10:4b:7b:a3:fd:63:d9:c9:
37:49:46:5b:b1:95:cd:7f:49:f4:8b:02:d9:e7:81:09:d7:78:
a9:d4:b0:1c:80:2a:c6:92:1b:5b:30:5e:e1:cc:2c:18:35:1f:
f0:00:fb:98:12:cb:3b:f2:40:2d:b9:d1:cd:49:54:ad:0c:80:
26:1a:f7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org