Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/018C5DBAB43911EDA1435F9DF1222468.roa
File: 018C5DBAB43911EDA1435F9DF1222468.roa (raw, json)
Hash identifier: LxjVB8+EzH9ZmohO7QOh1pRyZ+gqIp+LtI2cjmU5lIA=
Subject key identifier: 7D:1A:F4:E5:F3:24:B7:EA:69:06:C8:D3:67:D5:3C:53:6F:47:EA:CF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0BE9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/018C5DBAB43911EDA1435F9DF1222468.roa
Signing time: Fri 24 Feb 2023 11:47:25 +0000
ROA not before: Fri 24 Feb 2023 11:47:22 +0000
ROA not after: Sat 22 Feb 2025 11:47:22 +0000
asID: 61317
IP address blocks: 154.16.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3049 (0xbe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 24 11:47:22 2023 GMT
Not After : Feb 22 11:47:22 2025 GMT
Subject: CN=63f8a3cd-4447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:8f:00:9f:ad:65:6f:9e:f9:f1:b0:58:d6:
8e:73:1d:77:6a:f9:3a:56:30:fa:a6:1e:f8:bc:f1:
67:7b:ac:01:bf:c4:6d:37:20:40:66:db:40:a5:ea:
2c:14:01:1c:ce:f5:88:de:db:ac:f1:e5:8b:54:fb:
22:bc:78:a5:9f:e7:97:5f:fa:33:4c:15:cf:56:22:
f0:98:15:5c:42:1f:25:8c:24:6e:41:d9:83:a6:39:
57:85:3f:c7:71:e4:c3:ad:f1:5b:64:5e:d4:62:03:
99:95:89:7a:bd:90:5f:ab:1c:42:b4:3f:17:f3:ce:
77:83:1a:b7:1c:a9:63:46:88:7b:d4:2f:70:c9:3e:
fe:a7:47:6c:f3:2b:a9:bd:50:32:c7:e8:d7:bc:c0:
b0:40:5c:7f:04:c1:00:39:ce:d9:5e:c3:e7:7e:e4:
ed:78:b5:2b:75:61:08:b6:a6:bd:2d:53:17:66:5f:
2c:16:7d:78:d0:e9:44:32:7b:11:1d:e7:44:fb:79:
28:30:e5:2e:97:89:92:33:1f:80:71:bd:8b:f0:48:
77:71:cb:fa:9c:1e:7c:ce:48:a1:e9:51:c7:47:13:
5d:c0:0d:a8:02:04:61:f4:4e:5e:da:5e:a4:85:c3:
ff:2e:fa:b2:96:a7:4e:50:a6:d6:59:32:65:e4:4d:
bd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1A:F4:E5:F3:24:B7:EA:69:06:C8:D3:67:D5:3C:53:6F:47:EA:CF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/018C5DBAB43911EDA1435F9DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.12.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:c3:4c:a1:70:c6:12:4d:a9:b2:88:66:9c:3d:36:d2:1d:b8:
66:02:28:ad:24:d0:25:5d:b1:70:cd:14:4f:d4:78:fb:f0:be:
73:01:77:ba:a6:28:50:28:67:45:f1:f3:e0:17:fd:c1:9c:03:
1e:de:d4:ae:67:64:06:83:0a:c6:3b:96:1e:ae:b9:0b:13:09:
9a:35:33:88:33:a3:21:42:58:53:ee:6f:66:94:af:03:c0:04:
b8:97:6c:55:d2:06:2f:21:ad:73:53:c1:5d:66:9d:d0:14:04:
29:54:59:46:40:a9:f9:02:db:10:81:5d:45:b7:d2:f1:3e:8d:
72:48:3d:5c:76:8b:d0:4c:f4:12:0b:e3:58:95:03:ac:47:48:
f7:7a:0b:3a:31:d5:f7:6a:5d:f8:ba:6a:4a:94:be:63:9b:fa:
08:97:03:24:54:21:17:b5:56:c2:a7:19:0c:90:85:e1:67:a3:
8e:6a:77:e2:b1:70:49:1b:17:e8:51:ec:7a:a6:35:ba:e8:2d:
30:99:b9:f0:9d:ba:3c:48:8e:4a:ca:b5:7b:f0:e2:1e:50:12:
46:1d:81:9f:1c:8a:3e:ac:0d:eb:a9:0e:53:8e:f7:f0:96:aa:
5d:63:d2:62:db:a9:a7:94:68:87:6b:2e:74:e5:53:92:07:66:
8f:e3:82:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org