Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/142747D4307711EB9AD36A6BF8AEA228.roa
File: 142747D4307711EB9AD36A6BF8AEA228.roa (raw, json)
Hash identifier: 5uvMpZP/YNSPF9pP24cVW6CRKdPdx+oVJLO42W/QKD4=
Subject key identifier: 75:E2:9F:D6:2A:6B:64:16:89:23:45:4C:6E:61:09:D8:20:56:A8:F9
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0431
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/142747D4307711EB9AD36A6BF8AEA228.roa
Signing time: Fri 27 Nov 2020 06:09:17 +0000
ROA not before: Fri 27 Nov 2020 06:09:10 +0000
ROA not after: Tue 24 Aug 2027 06:09:10 +0000
asID: 209242
IP address blocks: 154.16.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1073 (0x431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 27 06:09:10 2020 GMT
Not After : Aug 24 06:09:10 2027 GMT
Subject: CN=5fc0980c-6512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ab:1c:4c:81:a0:29:2c:1e:f5:8d:f5:a6:3f:
54:ad:f7:d2:83:92:9c:92:c4:ce:c1:41:6e:12:89:
95:86:dc:54:46:8c:39:71:7f:87:fc:b3:6e:72:75:
e2:93:82:ac:5b:e1:8f:5b:b3:02:ca:09:da:1e:91:
ec:c8:62:2a:c4:e2:4f:a9:b4:76:d1:9f:ba:89:0b:
42:23:38:e8:14:de:6a:03:eb:b2:0f:46:df:83:25:
0b:94:29:d8:b3:d9:12:80:7c:3a:46:af:d3:1c:b3:
81:27:ae:52:9d:eb:94:f2:13:be:11:0f:7b:88:0b:
8d:c8:8b:db:4a:42:39:ab:fa:e9:fa:80:f5:e2:f9:
f9:58:1d:48:e5:19:9c:e7:79:6c:3a:2a:85:b6:95:
bb:d3:cc:43:fb:45:33:57:9a:30:33:65:9a:11:59:
68:56:a3:c5:d8:76:e1:80:e6:0a:72:33:39:1b:3c:
1e:20:78:d7:61:94:fd:a3:41:46:ce:28:91:af:2b:
b2:3a:69:de:f0:00:e3:94:35:2f:5d:fb:61:a6:01:
f5:60:80:7f:bf:e5:31:f8:d1:39:43:f2:73:df:a3:
71:df:71:7e:f5:59:ec:26:b0:fc:5b:c5:2c:3f:5e:
a4:13:c1:6b:6a:b1:eb:8d:be:6d:f9:b6:16:c9:40:
45:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E2:9F:D6:2A:6B:64:16:89:23:45:4C:6E:61:09:D8:20:56:A8:F9
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/142747D4307711EB9AD36A6BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.228.0/24
Signature Algorithm: sha256WithRSAEncryption
02:9a:80:79:75:4f:87:e2:b8:c2:b4:38:0e:dc:30:2d:78:90:
bd:45:3e:44:89:fe:d4:c4:bc:64:41:25:56:17:c1:ef:c9:34:
3a:61:b5:67:87:cb:1c:aa:67:3b:3a:b5:de:19:37:11:ad:0e:
b2:a0:35:57:97:69:1b:e1:af:1c:00:72:88:c4:8a:c7:14:3c:
ae:54:e8:95:66:c6:29:b6:c0:c0:d8:4e:86:1e:f5:e8:9e:5a:
bc:31:c1:2f:73:64:f3:85:a5:c0:ed:f8:5a:bf:51:08:29:86:
31:ef:2b:75:95:bc:5e:46:f8:09:64:bf:33:e1:c2:d6:6e:4d:
c4:1c:9d:b5:74:f1:d9:f9:a4:7f:d9:63:65:d7:b7:76:fd:ba:
a8:7e:cf:93:7f:d9:10:ab:e7:ea:29:49:9e:85:97:91:1e:8a:
23:4f:90:9a:a0:f9:74:36:f4:74:d8:82:53:45:cc:8e:47:bb:
99:4c:6b:8b:13:04:4c:a7:6b:ec:39:23:c3:1e:cd:1b:9f:d7:
69:75:90:70:d2:6b:0e:10:49:47:ed:c6:24:86:7a:6c:2a:33:
a4:c8:a8:cd:46:c8:10:99:44:7f:ad:c1:f6:69:99:52:49:de:
3f:07:87:4a:b9:23:36:3e:f2:47:5b:44:69:ec:08:6b:6b:a5:
df:54:20:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org