Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1D22BF5E726911EDBB97DC87F1222468.roa
File: 1D22BF5E726911EDBB97DC87F1222468.roa (raw, json)
Hash identifier: X3Jkxnb7C3LEX29IcerEQ9EHk7Njl3CVToSZSjbzoQo=
Subject key identifier: 08:AE:A7:4E:5C:79:D2:E6:80:03:8A:BF:F9:C5:6F:11:D5:08:05:D7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0AE0
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1D22BF5E726911EDBB97DC87F1222468.roa
Signing time: Fri 02 Dec 2022 17:45:31 +0000
ROA not before: Fri 02 Dec 2022 17:45:26 +0000
ROA not after: Mon 02 Dec 2024 17:45:26 +0000
asID: 205320
IP address blocks: 154.16.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2784 (0xae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 2 17:45:26 2022 GMT
Not After : Dec 2 17:45:26 2024 GMT
Subject: CN=638a39ba-67a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:52:04:50:47:7b:53:cd:b0:75:5d:c6:bf:
75:fa:ea:8a:fe:9f:09:42:1c:fc:12:ed:97:8d:c6:
4c:6b:03:96:fc:73:08:ae:e0:0c:37:3d:fb:49:fc:
ff:60:3f:53:63:f9:1a:c8:25:c0:0c:31:98:ed:8e:
9c:95:82:66:36:2b:04:50:5c:f4:9c:56:bb:12:e8:
12:f0:8c:72:7c:f0:1a:35:2e:ea:37:39:ae:ce:01:
1c:e6:a5:38:43:0b:f7:fa:4b:02:86:66:ba:a9:1b:
33:18:51:09:11:b3:e4:0b:a9:96:56:73:a8:8a:00:
3d:2d:b5:4a:73:b3:42:be:0c:00:e9:5c:4b:7f:79:
39:9c:51:6f:be:55:91:05:0e:f9:1e:ff:32:5c:bf:
a3:d0:66:2b:68:d6:2e:a1:bf:11:ef:d0:97:a2:e5:
23:d5:b4:0e:10:06:f8:2f:cb:db:1a:70:b3:e2:0e:
5c:b4:df:30:cc:26:69:1c:1f:8a:e0:13:f1:20:9f:
01:45:55:ff:83:ac:7e:ac:7a:57:8a:82:c2:ed:66:
87:d9:7d:5a:09:16:a6:c2:97:16:b6:83:77:1b:44:
fd:31:69:de:fd:43:e0:98:03:95:b7:d8:4c:91:f0:
fb:0a:d0:f4:31:ac:68:d5:d2:e4:dc:d7:c8:ad:d2:
11:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AE:A7:4E:5C:79:D2:E6:80:03:8A:BF:F9:C5:6F:11:D5:08:05:D7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1D22BF5E726911EDBB97DC87F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.194.0/24
Signature Algorithm: sha256WithRSAEncryption
93:86:a7:0b:f4:0e:f4:cf:55:9a:fe:b4:42:78:d1:a6:51:54:
4a:d4:d4:25:2e:1c:ce:2e:87:2d:59:ae:5b:64:49:65:ad:a6:
b0:cc:7c:2b:28:b4:c6:ec:4d:a6:5c:a7:98:c5:52:68:54:30:
79:ef:8f:2a:2b:83:4c:99:8a:3e:d3:04:16:8f:20:66:f4:43:
dc:55:b3:1b:16:b0:bb:37:49:3a:b1:73:8e:49:de:c6:12:69:
7f:a0:b8:98:21:4f:d3:c8:00:2a:6c:5a:03:3c:8c:04:ac:87:
c0:b2:b4:d3:bf:14:e4:be:78:dd:f5:c9:db:8d:45:40:a5:50:
2c:91:0b:c1:f8:0d:07:f7:ee:35:17:d5:78:f6:71:ee:6e:38:
8b:ad:d9:6c:62:d3:3d:a1:83:34:24:0b:e8:c5:0e:88:0c:09:
43:9d:f9:c6:f9:49:83:18:b0:7f:62:2f:08:be:29:12:c1:e8:
ca:a1:f3:55:54:50:fc:fe:6c:44:47:92:87:82:5f:5d:46:a8:
6f:5c:40:b2:3b:1e:e5:ad:dd:d3:b9:30:5d:13:e4:4d:89:c0:
ab:82:06:69:50:ae:b0:67:52:7c:96:b0:d0:14:00:59:86:61:
a1:fb:7a:55:a2:9a:27:7a:77:d1:f1:f3:28:0e:ef:a0:55:ee:
ce:93:f2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org