Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1C6DC5FC45B111EDBBFFF8CFF1222468.roa
File: 1C6DC5FC45B111EDBBFFF8CFF1222468.roa (raw, json)
Hash identifier: 7CquIX+LqvKAaO7QTlQMxau2maiqmNITSxfSIbjAFdI=
Subject key identifier: E3:37:EE:0B:A4:60:18:22:C2:0F:12:77:E1:D9:E4:DA:F1:8C:D9:08
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 09E4
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1C6DC5FC45B111EDBBFFF8CFF1222468.roa
Signing time: Thu 06 Oct 2022 19:57:31 +0000
ROA not before: Thu 06 Oct 2022 19:57:25 +0000
ROA not after: Fri 06 Oct 2023 19:57:25 +0000
asID: 212238
IP address blocks: 154.16.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2532 (0x9e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 6 19:57:25 2022 GMT
Not After : Oct 6 19:57:25 2023 GMT
Subject: CN=633f332b-b1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:4b:37:91:65:ff:23:e1:0c:70:54:76:23:
d9:bc:f5:9a:b5:5b:9a:24:3f:7e:ba:d0:b5:e2:4a:
78:a7:fa:2a:da:fe:68:8d:4e:9a:76:02:c2:94:e2:
61:c7:ff:27:4d:a9:38:ef:77:ec:41:15:0f:c4:3b:
7c:3e:39:db:e8:d4:d2:af:fb:7e:be:b9:39:3c:e1:
7b:27:8a:f2:07:1f:29:cc:98:6b:0a:aa:70:eb:6a:
9f:d3:1f:68:bb:04:d5:bf:64:d1:d7:1e:cc:53:3d:
d5:0c:6e:c7:f3:6c:bc:51:c4:92:d9:84:7d:b9:21:
5e:9b:a2:5d:20:75:db:91:cf:ad:f9:72:8e:9e:d6:
87:6b:f5:5b:13:0e:bf:f7:f0:5e:f3:6d:86:89:48:
5e:cd:c6:4b:c6:bc:6e:f7:00:34:6c:8e:6b:8e:27:
c9:5b:48:96:70:77:ec:13:03:09:e5:e7:91:50:44:
86:34:85:35:25:0b:50:d3:8a:9c:98:7c:33:5a:2b:
81:ff:a2:05:49:04:cf:d6:31:62:08:27:f5:fd:4a:
c2:f1:d2:9e:d5:ab:cd:bf:89:18:13:ad:22:b3:fc:
17:da:c4:6b:63:24:1b:de:f2:cd:7f:50:ff:3f:c4:
59:37:87:e1:a4:9d:38:2b:9d:cd:14:41:e1:00:15:
f7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:37:EE:0B:A4:60:18:22:C2:0F:12:77:E1:D9:E4:DA:F1:8C:D9:08
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1C6DC5FC45B111EDBBFFF8CFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.153.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:9a:ee:69:57:88:6d:1f:2c:d3:52:4b:60:bf:35:98:bc:14:
a6:a2:c9:c1:0c:a0:89:1e:ff:cd:a6:6a:9f:8d:d2:d6:9b:0c:
77:f1:b9:11:30:58:60:55:3f:86:a9:79:c4:82:af:e4:cb:5a:
1f:f7:34:42:06:e2:ed:8f:98:06:36:9a:6b:d8:d3:df:6b:00:
a8:77:ef:f4:29:c3:e2:7c:e8:e2:23:7d:af:d6:0a:54:df:ec:
5e:06:c4:77:a6:a6:95:32:5f:21:a2:06:7f:49:81:97:a4:ec:
b7:00:e8:08:07:24:60:ec:1e:24:b1:56:e0:8e:a0:1a:21:93:
31:eb:77:7d:2a:ce:1e:91:68:f6:69:e9:e9:ab:0d:c7:b1:8e:
3e:c2:0f:84:13:5c:31:51:19:a8:87:a9:a7:ea:4d:e2:c4:6a:
6e:4c:79:85:90:b7:f9:ba:d5:69:22:2f:3e:8b:ff:e0:49:1a:
c7:69:d8:2d:63:b5:4f:6f:39:58:17:49:75:50:4b:cd:be:ea:
cb:ad:5a:af:1f:c4:bc:c2:6a:ca:fb:1b:ee:16:ec:d0:e3:5c:
22:e1:be:17:dd:64:da:4c:53:72:77:2b:e2:f7:dc:3a:63:12:
48:f5:93:ad:a3:cf:35:00:0d:33:50:17:e0:21:f1:a1:86:c4:
a5:38:6d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 07:07:59 2023 by rpki-client on console-fra.rpki-client.org