Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/00233E80ED5611EC9D8E25DCF1222468.roa
File: 00233E80ED5611EC9D8E25DCF1222468.roa (raw, json)
Hash identifier: Ryts17HqvfGrp+rTum8yyxw5P2810j0/PuzQtzD6dJw=
Subject key identifier: 4F:C5:AF:28:84:FF:A6:F9:07:7E:C6:A0:D6:69:E7:56:F5:52:DB:14
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 08A1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/00233E80ED5611EC9D8E25DCF1222468.roa
Signing time: Thu 16 Jun 2022 09:23:37 +0000
ROA not before: Thu 16 Jun 2022 09:23:33 +0000
ROA not after: Sun 16 Jun 2024 09:23:33 +0000
asID: 40676
IP address blocks: 154.16.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2209 (0x8a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 16 09:23:33 2022 GMT
Not After : Jun 16 09:23:33 2024 GMT
Subject: CN=62aaf699-bd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:46:b1:66:19:a4:7e:aa:10:c7:79:1c:38:09:
0c:fd:bf:ee:7e:23:bf:b2:38:4d:0a:23:3e:65:cb:
d0:74:b0:69:61:77:85:ca:5e:72:ec:52:17:63:ed:
9d:02:a7:4b:aa:d8:03:de:ea:f6:21:ff:e9:35:b9:
a2:75:79:93:da:80:be:13:a5:fe:60:97:65:e9:e5:
d4:28:71:f8:aa:c7:90:ff:9b:dd:29:96:7f:eb:93:
d9:2f:bb:9b:63:0f:90:13:2f:85:38:d6:0a:1a:69:
2c:b6:3f:1e:34:59:ff:c1:38:8e:8c:fb:1b:cc:8a:
e0:f2:04:ce:9c:ef:5f:71:8d:56:a7:4c:9f:f5:a8:
02:04:51:ee:20:f7:60:8b:99:11:a1:f1:b2:d8:66:
fa:82:c9:b2:7f:13:88:db:bc:7d:0e:70:54:b2:fc:
0b:e2:fd:2e:5b:09:10:db:70:1d:15:1f:75:6b:48:
fa:36:24:04:13:e8:a3:3c:9e:cc:04:3e:b5:f4:56:
7c:26:aa:90:d8:4a:db:95:e5:0e:77:82:5a:53:b6:
a1:d3:41:d0:b1:90:bf:91:4a:c8:fb:64:a4:c1:d1:
03:30:5a:68:33:fd:31:50:64:f5:83:a0:12:d4:af:
08:46:f3:49:c4:ae:f7:78:ec:e3:5c:5c:92:15:4f:
3c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C5:AF:28:84:FF:A6:F9:07:7E:C6:A0:D6:69:E7:56:F5:52:DB:14
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/00233E80ED5611EC9D8E25DCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.91.0/24
Signature Algorithm: sha256WithRSAEncryption
06:86:5c:dd:f9:2b:be:96:77:a0:e5:73:df:de:e2:c6:06:09:
2f:b6:79:2c:51:1d:76:5e:a2:ca:1f:7c:21:3f:f2:26:c6:6d:
b4:f0:83:f9:3b:a7:85:81:88:5b:7b:72:96:ed:c2:33:b8:82:
72:f1:1c:26:23:34:26:22:9e:01:b6:53:41:a3:7e:93:dd:8e:
65:41:ee:38:a3:34:2e:c2:55:42:96:00:72:22:c8:45:d6:85:
6c:97:f5:df:ec:d8:e8:2c:ca:75:1d:50:97:7a:46:ad:21:ea:
be:e9:5f:49:06:0a:e6:23:75:f3:a5:d6:cf:51:d5:2c:e0:71:
82:a3:a1:bd:bc:a4:5c:14:17:c1:78:af:5c:ed:9d:d3:b9:cd:
1f:4a:83:a2:93:08:09:50:34:f0:a8:c9:d0:2e:e9:ff:d6:3b:
a1:6a:96:98:eb:15:81:8a:16:5a:dc:18:73:e0:a9:53:32:25:
33:d6:bd:28:dd:75:29:d5:4c:e7:79:ab:40:fa:b0:43:82:43:
18:eb:f0:da:cc:1f:fb:49:37:67:83:39:0b:cf:97:d3:be:85:
1b:71:24:bc:b6:4b:c6:f6:84:3a:19:c2:ad:fa:24:e6:d2:69:
a0:52:41:4f:00:f1:2f:0d:0c:7b:3a:36:b3:37:d8:93:01:8a:
b2:e6:f3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org