Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1ACA86566BE311EDBEEDF699F1222468.roa
File: 1ACA86566BE311EDBEEDF699F1222468.roa (raw, json)
Hash identifier: sSZSdtj0VDnhn6JaTCHmTPA600GXIDkr+t/1T2xGHoY=
Subject key identifier: ED:D5:BD:05:9A:33:8B:2C:F4:74:73:A4:CE:2D:4A:9C:EF:8D:88:26
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0ACB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1ACA86566BE311EDBEEDF699F1222468.roa
Signing time: Thu 24 Nov 2022 10:31:07 +0000
ROA not before: Thu 24 Nov 2022 10:31:02 +0000
ROA not after: Sun 24 Nov 2024 10:31:02 +0000
asID: 62240
IP address blocks: 154.16.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2763 (0xacb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 24 10:31:02 2022 GMT
Not After : Nov 24 10:31:02 2024 GMT
Subject: CN=637f47eb-dc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:56:21:6d:84:2c:80:ad:fd:e6:8d:39:08:8f:
d6:99:8f:26:df:f0:e2:81:92:fe:bb:0a:c1:58:db:
c9:c6:6a:c4:d8:5d:16:b0:8f:f7:e3:be:55:e1:a9:
b3:a3:cc:d1:05:a9:b7:ce:87:d0:79:4d:57:01:92:
0f:6e:02:ed:84:2a:a1:81:92:2e:a4:78:a5:29:e7:
9e:5e:67:92:1c:5a:a1:a4:cd:5a:24:a7:d8:37:b9:
1c:3e:e2:82:05:9e:0f:f9:9a:08:43:31:6c:8d:12:
94:84:3e:a0:cf:9e:39:e7:69:89:0d:b0:5e:2f:8d:
82:f6:7b:c2:29:af:99:67:de:5d:07:74:78:a7:87:
9c:01:34:d9:08:9d:b8:58:2f:5a:b8:f4:7a:86:71:
d4:88:fa:83:9e:e0:91:58:07:8e:f8:c2:42:b4:54:
79:67:03:23:c8:7f:00:8f:dd:49:de:e8:7e:75:40:
5d:cf:d4:68:95:c8:65:31:3d:64:b9:02:ab:19:e3:
66:5d:85:bb:d1:80:81:30:97:2e:5a:56:d0:fc:f5:
ae:93:6c:58:dc:89:fd:58:a6:f6:4b:e6:b0:35:16:
c9:36:2d:48:51:ec:5e:05:47:38:c1:b4:9c:62:c9:
93:fb:66:45:d9:78:05:58:bf:b4:f6:63:92:12:ac:
35:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D5:BD:05:9A:33:8B:2C:F4:74:73:A4:CE:2D:4A:9C:EF:8D:88:26
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1ACA86566BE311EDBEEDF699F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.211.0/24
Signature Algorithm: sha256WithRSAEncryption
86:6f:21:b9:6f:ad:64:64:a4:18:00:67:b4:9c:32:a8:03:97:
b3:01:2a:bf:63:6b:ba:ba:9a:9a:76:7d:f3:df:87:1b:56:eb:
3b:89:93:70:02:67:55:78:67:e1:00:18:83:bd:fa:4a:6a:ea:
07:20:b7:d8:75:7f:74:02:e4:51:e1:e5:1a:27:8e:33:1a:f9:
cc:4a:57:26:b9:42:8f:da:80:6b:c7:7b:2e:1a:01:23:32:14:
ea:68:2d:bf:22:be:d7:05:cb:41:a4:25:51:24:03:6a:3c:73:
e6:ed:98:06:91:4f:8b:6f:69:6e:b3:d7:62:a4:6a:e2:89:ff:
d5:a6:43:d7:ce:17:c7:5e:64:c9:73:b1:51:27:d0:48:35:20:
fa:7d:aa:e9:1b:26:11:28:82:65:2f:56:1f:df:48:f7:fd:c8:
78:f3:90:7e:ea:6e:d5:ad:32:29:77:9f:55:e6:f7:93:26:0b:
2c:03:7e:6e:61:df:ab:8a:08:67:41:52:ca:38:76:0c:d5:fb:
32:5f:02:19:5b:08:28:9f:45:14:5f:1a:c0:c7:a5:92:8e:e8:
62:9f:7d:b7:5d:06:e8:db:dd:8b:74:c2:01:30:44:ff:77:f9:
62:08:cc:d3:0b:33:2c:81:0e:d3:5b:74:d3:4b:ca:fd:40:0a:
af:95:8f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org