Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/00FC8C16D45B11ED9A18348BF1222468.roa
File: 00FC8C16D45B11ED9A18348BF1222468.roa (raw, json)
Hash identifier: b47819BdXXi2S2n/HLuullZAfBCaTf/v9W8UqAsnzs0=
Subject key identifier: C2:E7:79:19:E9:5C:5C:A8:5D:F1:CE:3B:95:D6:FC:89:33:8A:E5:38
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D2E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/00FC8C16D45B11ED9A18348BF1222468.roa
Signing time: Thu 06 Apr 2023 09:11:24 +0000
ROA not before: Thu 06 Apr 2023 09:11:20 +0000
ROA not after: Sat 05 Apr 2025 09:11:20 +0000
asID: 55154
IP address blocks: 154.16.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3374 (0xd2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 6 09:11:20 2023 GMT
Not After : Apr 5 09:11:20 2025 GMT
Subject: CN=642e8cbc-782d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:65:ba:13:84:6d:8c:de:48:66:02:d4:a2:87:
c0:ae:c3:67:cb:79:05:4f:51:77:45:2f:5a:ed:92:
cf:08:59:29:75:4d:23:70:54:4c:13:30:14:e6:df:
36:f4:14:36:c8:a1:63:fa:8d:0a:e2:b6:8a:4e:75:
f1:a8:46:25:67:2e:26:c3:81:c5:15:5d:4f:0b:3a:
20:0b:e0:da:1a:f5:29:0c:91:db:d5:14:c0:8b:ed:
05:a6:db:4e:a7:f1:85:04:75:b1:56:53:0d:8a:2e:
08:06:2e:9f:f3:62:08:c4:c1:71:e6:e9:bd:c2:0b:
7b:ee:11:3a:85:cb:db:c0:a4:1d:e3:4f:90:67:c2:
5e:fb:49:18:69:c6:08:e9:1f:cd:26:5a:b0:fd:28:
52:ac:be:09:c6:38:f1:db:07:d8:c4:7e:98:85:e9:
38:0a:f9:8a:fb:fb:a1:3e:2e:62:c1:a0:b3:9e:86:
c8:3a:95:83:42:28:8a:d1:32:b3:61:f8:a0:55:38:
77:ee:c6:a4:5f:3a:ba:5d:8b:61:69:b5:cf:14:08:
8b:9e:9c:d0:e7:91:28:17:bb:43:ca:40:20:0b:58:
d7:fa:ce:be:40:e9:ef:1a:11:8a:5a:fa:61:c9:3c:
f2:36:1a:95:47:06:bc:4b:e0:ed:82:49:ff:f0:75:
7e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E7:79:19:E9:5C:5C:A8:5D:F1:CE:3B:95:D6:FC:89:33:8A:E5:38
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/00FC8C16D45B11ED9A18348BF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.91.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:8a:d2:8a:da:0d:f5:ef:fa:44:ed:55:ba:ef:01:7e:e5:20:
3a:70:9e:ac:ee:c3:44:63:24:36:3a:4a:42:38:fe:01:c1:d4:
1d:e5:d1:1a:3a:56:50:de:ec:b3:cf:c3:6e:41:af:4d:72:60:
eb:93:52:14:a5:22:4f:b4:6e:14:41:37:9f:e5:37:05:f9:87:
0d:fd:35:eb:db:dc:85:39:98:5d:7a:c0:98:35:09:b5:94:a9:
11:f9:b1:d7:7d:da:2c:97:d9:85:56:36:39:39:7f:8e:78:f7:
21:cf:fe:1c:20:ab:5e:62:f9:cd:43:87:27:0c:8f:97:11:b6:
59:56:27:f4:77:50:05:22:72:b8:87:b3:dc:f0:ea:f3:63:8c:
8a:83:d4:4b:60:0d:6c:26:8d:ba:39:d8:d9:97:a3:ba:e7:5e:
60:e3:d7:b7:00:48:d6:7f:25:48:a2:59:b7:c7:39:8a:93:21:
d4:2c:a2:d8:94:cd:b8:f1:13:08:2b:78:df:fc:ab:da:35:0e:
d1:63:0d:8b:7a:1f:51:cd:9f:17:31:ca:7c:fe:2a:2c:91:77:
9e:01:e0:19:0c:fb:85:a0:e2:89:5b:5b:6d:7c:ab:10:69:d6:
4a:ba:bb:c5:7c:6b:3f:9c:d4:51:8c:05:ab:74:3e:8d:cc:ae:
89:26:d0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org