Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7CE0222C843711ECA5FE73A75A40D577.roa
File: 7CE0222C843711ECA5FE73A75A40D577.roa (raw, json)
Hash identifier: /3dVWSBNFttDogk3EFpPhGK1KDhNZyIV/SZLkS6wcNM=
Subject key identifier: 80:7B:EC:3B:08:98:BE:76:1A:1D:8B:F3:F2:3D:1C:DA:F5:00:9F:A8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 07AE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7CE0222C843711ECA5FE73A75A40D577.roa
Signing time: Wed 02 Feb 2022 14:50:39 +0000
ROA not before: Wed 02 Feb 2022 14:50:35 +0000
ROA not after: Fri 02 Feb 2024 14:50:35 +0000
asID: 212238
IP address blocks: 154.16.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 12:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1966 (0x7ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 2 14:50:35 2022 GMT
Not After : Feb 2 14:50:35 2024 GMT
Subject: CN=61fa9a3f-eceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:20:f4:07:1c:01:ad:bb:68:8b:f3:33:f8:5e:
aa:de:fc:01:9c:79:20:5e:71:7e:7f:49:f7:8e:a8:
32:87:26:fd:55:61:ab:0b:5f:f2:8a:3a:37:b3:7f:
4f:56:ff:b7:b2:30:73:7a:ef:58:88:d1:a6:5c:0b:
56:3d:cb:dd:df:7d:f8:8b:e4:72:b2:d3:c7:99:d4:
57:94:95:05:49:86:1a:b9:e1:72:23:a1:9e:f0:5f:
b8:4f:4b:86:7b:82:36:ba:a2:81:77:ff:63:df:11:
0f:f2:8d:d3:59:a9:01:72:65:63:28:78:1f:87:53:
11:95:8e:29:8e:d0:51:b1:a9:93:3d:54:fd:62:7d:
c0:33:90:f6:f5:32:c9:1e:df:b6:61:2f:e5:29:7c:
7b:5b:1d:33:92:57:43:72:e4:56:0e:70:9d:d1:e4:
7d:98:4c:2f:a9:9c:a3:4a:c1:4f:01:06:05:ea:aa:
28:29:7c:3b:01:4e:1c:ac:02:49:b6:68:10:b6:6f:
3f:b7:d2:52:11:0b:62:75:5a:13:10:30:33:39:57:
78:a3:03:09:79:aa:dc:36:39:cd:c8:9c:4c:9c:b8:
b3:58:54:b1:9b:63:a6:16:db:2e:7c:df:6a:34:24:
c7:46:54:fb:c0:96:97:50:b1:97:ff:d6:70:e1:8c:
f7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7B:EC:3B:08:98:BE:76:1A:1D:8B:F3:F2:3D:1C:DA:F5:00:9F:A8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7CE0222C843711ECA5FE73A75A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.133.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:99:ff:de:25:0b:b4:a7:c3:1b:c7:9e:1a:35:ee:f7:2c:e0:
d6:2d:e1:fa:8c:1e:88:7e:ea:63:4a:7c:c2:23:31:6a:04:b8:
e2:f2:79:40:c9:35:ff:68:e7:88:50:d7:fc:a9:7d:85:57:ad:
cc:c6:52:5d:f5:07:ab:b3:39:16:49:3f:c7:92:db:50:f2:f0:
77:3c:8c:72:2a:1d:72:f8:04:b2:3e:a4:ae:76:1a:51:b9:1c:
31:bf:11:c4:ba:43:6f:22:20:2e:80:6c:ce:8c:6c:41:18:46:
c9:a0:e3:5d:f4:ce:5b:3f:6a:d2:36:18:d0:24:26:64:a7:da:
05:ba:48:7a:95:c5:17:6b:bb:70:08:3a:38:29:b4:4a:89:4c:
a1:45:c7:11:7a:16:32:4a:05:b9:8e:73:0f:9b:d2:bf:8b:ea:
f5:52:ee:c3:b1:b6:8f:f8:e7:ee:44:b0:a6:b0:b7:4e:dc:ba:
55:c3:66:cb:06:a8:3a:8b:cd:07:fd:e9:b6:e3:3c:ac:c8:df:
ba:c3:9a:bb:53:be:ed:b3:ac:01:6d:a4:0c:98:85:44:35:9a:
f4:ac:89:73:7f:07:8b:6a:87:53:2f:f3:31:41:08:06:b9:cb:
c1:d4:f3:ef:2a:95:f8:b8:eb:85:03:bf:d9:aa:91:a6:f3:11:
f4:af:02:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 16:10:59 2024 by rpki-client on console-fra.rpki-client.org