Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2E63D17437ED11EDB5F1B7CFF1222468.roa
File: 2E63D17437ED11EDB5F1B7CFF1222468.roa (raw, json)
Hash identifier: 2grKfIU04Z2DaxMJ0wAy/L8kCX0xjgGQbhQISSnN918=
Subject key identifier: 8C:11:3E:51:BE:F1:B6:1B:0C:85:06:6E:9A:8A:1D:16:82:AC:D7:31
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 09A6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2E63D17437ED11EDB5F1B7CFF1222468.roa
Signing time: Mon 19 Sep 2022 07:32:14 +0000
ROA not before: Mon 19 Sep 2022 07:32:11 +0000
ROA not after: Tue 17 Sep 2024 07:32:11 +0000
asID: 60721
IP address blocks: 154.16.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2470 (0x9a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 19 07:32:11 2022 GMT
Not After : Sep 17 07:32:11 2024 GMT
Subject: CN=63281afe-9f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:61:c2:ed:1b:67:5a:12:32:d0:47:41:be:c6:
ea:b9:df:c2:04:77:d0:2f:e5:10:4b:59:99:3f:80:
41:72:25:a7:78:f3:e8:29:4a:f4:63:85:1f:bd:df:
77:32:33:24:39:9b:35:45:b9:05:ca:31:bc:4a:06:
b4:5c:f9:d6:34:5c:ff:00:a6:95:fb:26:c7:95:18:
77:3e:1e:3b:79:6a:9d:78:3f:4b:63:53:b2:c2:87:
77:ba:6d:49:09:c2:ea:8a:2f:34:ef:f6:05:83:09:
51:b2:64:4c:70:9d:6f:cc:5c:c3:06:51:2f:88:ae:
d4:df:3a:dc:50:a1:eb:be:62:d0:4c:98:9b:03:fb:
69:5f:c0:54:c1:3f:15:dd:37:ca:bf:59:58:78:8a:
fd:37:10:8b:f0:e1:6f:5b:1d:47:15:d2:3f:56:8f:
b2:0a:78:9c:c1:16:8a:2f:9a:e6:86:ed:0b:d6:49:
5a:84:ca:eb:6d:94:59:0f:95:02:02:d9:d2:33:7c:
c3:39:22:07:8a:99:f0:9a:d4:42:e7:e3:4e:40:31:
07:ec:35:da:71:01:0a:7f:85:1b:cc:aa:46:01:03:
fe:71:ef:80:22:95:84:a6:e1:80:46:28:8a:5d:88:
8a:fd:a7:10:95:df:4d:b5:6b:06:38:22:13:83:3e:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:11:3E:51:BE:F1:B6:1B:0C:85:06:6E:9A:8A:1D:16:82:AC:D7:31
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2E63D17437ED11EDB5F1B7CFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.41.0/24
Signature Algorithm: sha256WithRSAEncryption
af:c9:6f:9e:89:a3:1f:30:d0:e6:27:b5:4e:65:14:67:37:58:
56:7f:6b:62:96:7f:84:c4:05:08:17:2c:a5:d5:71:12:fb:48:
e6:c5:89:5b:01:c3:d1:4d:3f:2d:4a:02:76:55:9f:3b:54:f1:
b7:72:51:c8:e4:5e:30:da:da:ab:17:c5:e9:74:3f:4f:a2:85:
72:a3:af:6b:7e:54:b2:39:bb:43:84:0e:b7:41:2d:48:18:06:
ee:85:b1:ae:82:f2:6d:bf:d4:71:4b:f3:20:0e:a2:95:b1:cc:
de:a5:51:ff:92:05:c1:74:65:c8:83:22:f1:5a:ea:de:c2:6e:
75:ab:ec:e3:fc:91:6b:c6:d3:b1:43:81:43:26:1e:ec:09:2e:
2c:ba:45:92:96:2f:74:38:e9:a6:22:07:0a:f5:4e:e1:bd:10:
19:91:0d:b0:b5:f7:d9:84:2f:80:c4:dc:2e:be:6e:78:46:71:
f4:04:e0:7c:be:14:81:a4:25:4c:c9:22:e1:12:03:f9:67:50:
22:7c:a8:ff:a4:6e:fa:8f:d5:a8:a0:e9:63:4e:28:ff:38:83:
59:84:b8:a5:5d:a4:94:4b:47:ee:96:45:3b:f7:99:a7:bb:06:
8b:bb:0d:a2:a8:62:f8:3f:6b:ba:32:e4:5e:1c:2b:8a:a4:9f:
91:2d:98:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org