Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ED8D4E00351B11EEBA4A4F6C4AD9E6FC.roa
File: ED8D4E00351B11EEBA4A4F6C4AD9E6FC.roa (raw, json)
Hash identifier: 6bNj2AUM+pYem/b1es/9xXwhAfC3fwy5cYExge9+wAk=
Subject key identifier: DF:C1:EE:06:EF:83:8C:69:42:7C:89:2A:D0:A6:52:86:42:74:66:BE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1119
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ED8D4E00351B11EEBA4A4F6C4AD9E6FC.roa
Signing time: Mon 07 Aug 2023 12:14:16 +0000
ROA not before: Mon 07 Aug 2023 12:14:10 +0000
ROA not after: Wed 14 Aug 2024 12:14:10 +0000
asID: 834
IP address blocks: 154.16.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4377 (0x1119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 7 12:14:10 2023 GMT
Not After : Aug 14 12:14:10 2024 GMT
Subject: CN=64d0e018-0499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f6:3c:91:d9:f8:07:54:39:55:aa:26:19:31:
6c:5d:c9:27:43:63:32:63:c2:44:5b:9c:2f:31:76:
22:90:e4:d1:b0:4b:d5:63:1f:bb:18:32:44:36:7e:
13:97:83:d8:1c:51:43:3a:ea:67:5e:21:85:b1:60:
01:bb:42:1d:12:9e:07:bf:31:33:f7:41:ff:35:5c:
ef:8a:4f:6c:10:48:cd:08:8e:a7:9f:67:6a:32:db:
f8:37:cf:09:a9:bf:41:66:d0:6f:ce:fd:1d:86:f5:
70:59:80:e6:28:d6:4f:62:e1:01:6e:1f:2c:3e:f7:
d8:b3:80:e0:eb:e4:d3:a7:70:ae:07:e3:f2:d6:38:
ca:21:5f:2f:cb:95:41:cd:57:7f:b5:d3:de:90:2f:
42:52:46:5a:7c:49:5b:e2:e8:b0:09:d6:34:ba:6c:
cf:9b:b5:50:34:c0:25:31:51:7b:c8:ce:fb:a4:be:
b9:00:24:1b:2f:fb:d2:29:72:64:5c:d5:b9:e3:96:
44:00:21:e2:2a:23:aa:b2:ee:fc:86:87:32:29:94:
7c:a2:f8:95:18:d4:58:01:60:0c:de:87:29:db:d4:
c7:c2:b4:3d:46:7f:18:1a:43:02:de:8a:eb:9a:6f:
e0:3d:2d:77:22:7a:51:cb:7c:b8:f5:62:91:ce:2c:
34:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C1:EE:06:EF:83:8C:69:42:7C:89:2A:D0:A6:52:86:42:74:66:BE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ED8D4E00351B11EEBA4A4F6C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.60.0/24
Signature Algorithm: sha256WithRSAEncryption
62:60:e6:2b:1d:51:e9:5c:42:cc:82:94:6e:df:2d:90:a6:72:
33:65:92:aa:d6:8c:0c:de:c7:37:3c:bb:b0:85:da:38:39:af:
aa:a5:6e:b0:4a:da:80:90:68:82:9d:eb:64:5a:ae:c2:98:ca:
61:9f:a3:8d:7b:bf:5a:ed:11:c8:e5:3a:a4:cb:4a:ae:66:a7:
fc:3b:91:67:b5:f0:aa:36:38:ae:8f:b1:4f:71:71:9e:bc:e1:
71:90:1c:28:a9:68:76:2c:5c:05:32:39:cc:d2:0d:d3:65:08:
42:ab:07:cd:5b:61:47:05:00:3b:7a:80:72:49:55:a5:ab:c9:
cc:b4:a8:24:7b:cc:4f:10:80:18:71:d1:1d:80:46:fe:aa:05:
db:b7:69:d5:a8:d6:30:cc:6a:0f:34:a9:c3:31:ff:b7:39:e6:
49:8e:e7:f2:12:84:33:bd:16:8c:af:0d:fe:1d:5a:c5:af:30:
bd:83:10:0a:63:3f:68:85:50:cb:36:0b:4c:97:27:3b:2f:d1:
fd:2a:c2:5c:3f:2d:43:71:0f:bf:23:77:4f:3b:f2:c5:f5:6a:
c3:dd:5e:d5:46:cc:42:56:20:6e:fd:f7:0c:80:14:d4:85:91:
af:0e:19:27:59:bc:f8:a6:1e:ee:9b:dc:1e:2e:29:8b:6e:b7:
d2:91:04:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 13:49:38 2023 by rpki-client on console-ams.rpki-client.org