Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F3965C40EE6E11ED80B385884AD9E6FC.roa
File: F3965C40EE6E11ED80B385884AD9E6FC.roa (raw, json)
Hash identifier: ju8ZHGUKxSDaj3/4VOyfAigL0f6mQN4rm5kRNIAMbNU=
Subject key identifier: D5:C2:50:5C:E8:DA:A5:D4:BE:0A:17:CA:26:BD:64:79:BD:91:E1:99
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0DAC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F3965C40EE6E11ED80B385884AD9E6FC.roa
Signing time: Tue 09 May 2023 13:39:42 +0000
ROA not before: Tue 09 May 2023 13:39:37 +0000
ROA not after: Thu 08 May 2025 13:39:37 +0000
asID: 834
IP address blocks: 154.16.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3500 (0xdac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 9 13:39:37 2023 GMT
Not After : May 8 13:39:37 2025 GMT
Subject: CN=645a4d1e-fd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:fb:e5:73:cd:33:52:35:cf:fe:9f:34:76:
c7:fd:2f:fd:fc:bf:3e:f7:55:be:b5:f8:a3:fc:6b:
94:e3:8e:37:99:74:f0:c6:0e:2f:9f:ef:7f:75:00:
d6:d1:44:68:a6:49:0f:38:6c:ab:7c:15:11:a7:45:
9d:5e:01:7c:6f:bb:cc:f4:ed:f1:03:f0:66:83:dd:
ff:a9:14:fd:76:53:cd:ed:43:2a:11:30:b8:47:52:
33:70:a6:f5:4a:04:70:bc:12:0c:f1:1e:21:16:a5:
7d:68:d0:86:30:d6:bf:6c:f4:4d:70:ba:bf:1b:da:
82:7b:7a:65:4a:8f:9c:35:9e:f4:d1:b2:64:24:f1:
bc:36:dd:12:e8:96:a6:18:62:2a:bc:d3:60:97:85:
6f:48:bd:75:42:62:52:dc:36:77:56:c8:ff:56:5c:
4e:eb:33:8c:94:cb:f4:6e:97:ca:9f:78:95:11:4b:
86:52:e5:f3:bb:2c:f7:37:db:b5:5f:8d:f5:12:05:
c8:61:f0:1a:8c:95:b2:fd:7a:54:6b:00:18:06:18:
3e:c3:9d:29:f6:92:7a:e8:ad:8d:c2:dc:40:08:f7:
60:bb:30:92:05:61:88:56:5d:72:ef:ae:f0:5f:df:
4e:dc:41:c3:b4:84:a0:31:f2:af:99:13:f4:72:f3:
a4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C2:50:5C:E8:DA:A5:D4:BE:0A:17:CA:26:BD:64:79:BD:91:E1:99
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F3965C40EE6E11ED80B385884AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.86.0/24
Signature Algorithm: sha256WithRSAEncryption
66:8a:53:a1:c3:69:62:b2:f4:61:ef:95:9b:8b:c1:52:72:52:
62:f5:78:d7:ec:91:23:b1:ba:94:1c:9b:fb:de:63:83:9a:51:
3d:66:f1:6d:4a:c7:cf:ac:10:28:5b:4d:cf:44:00:ac:2c:29:
c9:34:61:79:11:33:4e:28:ce:b2:86:5f:b1:c8:82:d2:47:3f:
95:96:a1:8b:dc:d1:49:10:57:de:03:a1:bb:45:67:03:08:0f:
44:e8:4e:29:4e:bd:58:9a:66:f6:e9:2d:04:18:26:ea:52:dd:
1d:6d:51:77:05:35:a0:ab:d1:ce:d4:a2:82:ae:59:d5:ca:63:
29:b8:a4:dd:64:d8:44:b8:5f:7a:97:f6:2d:06:0f:64:11:db:
bd:2b:db:eb:0f:27:7f:0e:c2:c6:2b:d8:e3:1c:bc:2e:ee:05:
7c:57:1f:28:0f:80:69:73:53:e8:98:8c:35:62:5b:9d:8a:51:
10:2f:0a:c5:bc:64:8c:79:e7:8b:c9:db:5f:e0:2a:eb:a3:6d:
a1:e0:e0:9a:80:e5:fb:c7:f8:45:b1:b4:3b:c0:9c:ab:cf:2a:
ac:5e:e2:a2:64:9d:db:da:3f:78:21:7c:7a:7a:40:55:80:dc:
97:95:eb:98:62:2a:24:2d:66:c1:2a:23:af:10:cb:2b:21:f7:
d2:4d:e9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org