Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EEB5657C04C611EE8B3E61134AD9E6FC.roa
File: EEB5657C04C611EE8B3E61134AD9E6FC.roa (raw, json)
Hash identifier: 45NztZnzqAM2EkfxMlknRtii4lDmwQ/uK+ud69RuWgw=
Subject key identifier: A0:2F:3F:6A:A4:11:32:61:BB:89:64:89:8E:3A:C3:9D:00:2B:BB:6E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0EE3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EEB5657C04C611EE8B3E61134AD9E6FC.roa
Signing time: Wed 07 Jun 2023 00:04:55 +0000
ROA not before: Wed 07 Jun 2023 00:00:52 +0000
ROA not after: Sat 07 Jun 2025 00:00:52 +0000
asID: 50131
IP address blocks: 154.16.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3811 (0xee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 7 00:00:52 2023 GMT
Not After : Jun 7 00:00:52 2025 GMT
Subject: CN=647fc9a7-de3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b5:6d:04:93:d0:40:e1:0e:c7:23:b1:6d:73:
e3:9d:ee:29:25:88:9f:c5:a8:d0:cf:2d:4f:88:04:
aa:ea:a3:1c:e2:f6:c5:66:42:87:cd:50:60:82:d0:
6e:80:3c:20:f1:ba:19:f8:9a:0d:c3:57:ed:3a:6e:
fb:35:b8:3b:b6:48:55:ff:ef:0f:7a:95:18:37:68:
c3:b9:63:4c:6a:2b:de:0b:23:55:ac:4a:96:30:b9:
87:25:d9:a2:55:fa:05:72:ec:c0:f4:41:dc:c0:e8:
a7:c8:11:3f:71:e1:4b:0a:bf:ae:d1:41:4c:dd:d1:
b4:97:51:36:68:db:bd:bc:66:f0:3c:9c:80:03:47:
35:da:a4:2f:b8:ea:77:50:3e:f7:9f:9b:ee:6e:ff:
0a:8c:5b:33:95:b5:1d:8c:ec:22:0d:d1:4a:d7:34:
ef:1e:24:a0:a8:98:ed:9c:ac:5c:65:21:72:ea:49:
fa:52:a2:f4:98:0d:44:35:9c:84:5b:4e:4a:7c:bf:
4b:c3:7e:8b:4c:90:99:3c:4b:6e:dc:24:bb:42:39:
e6:f2:ff:33:a8:de:e7:48:a5:74:8e:32:9b:31:f7:
42:1a:99:3b:c6:ec:0a:94:c3:76:62:f2:16:13:77:
b8:bf:3a:d4:76:2a:b8:23:dc:41:2b:b5:fe:97:0e:
4d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2F:3F:6A:A4:11:32:61:BB:89:64:89:8E:3A:C3:9D:00:2B:BB:6E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EEB5657C04C611EE8B3E61134AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.10.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:1a:de:3e:55:67:6f:a5:b8:2c:ec:91:8b:e2:b1:db:ee:a3:
70:b4:3f:e8:68:51:71:a6:e1:d7:c1:eb:12:59:65:2e:5e:6a:
e0:c2:1b:60:22:60:c5:c1:9b:57:2b:26:73:b1:b0:3c:b0:d6:
34:5c:a7:87:b9:10:3c:93:c0:8e:c5:2b:14:bd:7e:cc:fb:ca:
64:85:b9:18:2b:fe:0a:00:01:a1:e9:a1:3c:d5:15:06:fd:fa:
11:ec:c5:91:56:81:91:c6:fb:a1:e5:c6:53:b4:3f:8c:ec:5f:
7b:24:c9:d9:43:d2:67:3d:1a:ec:60:48:be:7f:ee:c9:a2:1b:
30:2a:a5:d7:67:8c:ea:d7:f8:64:60:97:ea:ff:1f:45:6e:f5:
9d:50:34:f1:88:e1:9c:a9:10:da:dd:13:72:28:54:d4:b9:09:
4a:c1:ab:cf:c2:a2:0d:c4:c0:72:6e:20:cf:85:5b:c2:85:22:
f5:a1:f9:75:0a:f6:26:f7:17:d8:19:69:c8:95:1c:ba:20:67:
13:1f:3a:5e:5a:8c:3c:0b:73:88:70:aa:0b:fe:31:d6:b5:50:
06:2f:6f:54:16:5a:fe:3a:03:fb:d5:24:d8:0d:5e:77:da:41:
14:3d:8c:c4:ec:41:92:e1:46:38:1d:0a:ee:a0:4d:90:b5:26:
d5:ec:32:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org