Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4F7087C0148111ED9A1FEAD5F1222468.roa
File: 4F7087C0148111ED9A1FEAD5F1222468.roa (raw, json)
Hash identifier: C2oAQ71j8URJwmQQUa2ClmzQd+7N75aCOSdRRcU/kc4=
Subject key identifier: F6:A8:14:EE:DE:E6:E3:FD:47:20:FB:D0:68:AB:C5:57:15:40:FF:51
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0921
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4F7087C0148111ED9A1FEAD5F1222468.roa
Signing time: Fri 05 Aug 2022 05:41:53 +0000
ROA not before: Fri 05 Aug 2022 05:41:47 +0000
ROA not after: Mon 05 Aug 2024 05:41:47 +0000
asID: 61317
IP address blocks: 154.70.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2337 (0x921)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 5 05:41:47 2022 GMT
Not After : Aug 5 05:41:47 2024 GMT
Subject: CN=62ecada1-7de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:53:66:d7:34:01:e8:29:25:0a:d8:2b:e4:b2:
b2:1a:ed:f6:64:0c:9d:7a:c5:9d:5e:56:6d:24:14:
6f:01:69:d7:c6:b0:7f:61:02:32:0c:d7:55:71:52:
d8:9e:0e:5d:7c:65:e6:5a:8e:ef:43:49:a7:48:d9:
fb:a6:6c:be:31:3d:3a:8f:31:a3:40:32:bf:20:f0:
e8:b4:44:c5:c5:d0:53:fe:41:1b:0a:14:9b:40:59:
d4:09:51:c1:16:5f:93:43:b5:e4:5f:af:d7:69:9f:
e4:3d:26:26:c4:c0:58:da:aa:a4:2f:ff:43:e8:fa:
04:22:3b:37:08:62:2a:22:5b:bb:bf:e6:6b:0a:4a:
24:9b:6a:10:7a:bb:d9:b7:c1:db:31:e7:6d:d5:2c:
56:c4:7e:c8:39:7f:ae:78:c9:89:17:dc:5c:80:a5:
3d:83:8c:e3:11:e7:10:99:0f:ff:ea:c4:45:b1:57:
a8:00:12:94:73:1a:3a:ad:23:52:43:98:0e:73:3f:
22:49:d2:39:2e:60:b3:35:d9:26:df:09:40:a2:64:
e5:d1:19:f3:6c:65:cc:cf:d5:d4:49:53:81:cc:af:
7c:70:d4:01:eb:80:47:5e:7b:a4:99:a8:7d:e3:f4:
43:7d:09:05:ff:3f:81:24:38:33:a2:56:f3:95:2e:
55:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A8:14:EE:DE:E6:E3:FD:47:20:FB:D0:68:AB:C5:57:15:40:FF:51
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4F7087C0148111ED9A1FEAD5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.70.155.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:6c:72:33:f3:a5:ee:1c:08:b1:9d:7c:6b:aa:eb:5b:17:05:
c3:8e:1a:eb:cd:57:76:50:76:f3:7b:6f:63:30:28:53:81:72:
1b:d7:31:81:50:ac:74:ef:95:e0:71:17:aa:7d:4d:19:07:e5:
64:16:8c:7b:64:fb:22:d1:c6:f1:9d:a0:37:1f:f7:bb:ee:9d:
7a:14:78:92:6a:93:7d:fd:46:07:aa:f8:19:51:3a:e6:a0:0d:
28:a2:b1:0c:ef:c0:2e:13:78:4a:9d:ea:93:5f:53:cc:24:bc:
44:63:78:76:19:c9:17:b6:d2:67:a9:76:2c:dc:f1:8e:f0:79:
fa:8a:42:01:24:28:17:e3:03:52:85:30:5b:a1:52:87:8d:2e:
ce:2d:ae:12:bf:ee:78:f1:35:e7:ea:79:ab:9a:40:1d:7e:b7:
64:63:2a:4d:2d:ac:f8:5e:50:ac:1d:f6:34:c6:2f:bf:20:1b:
9f:d1:ef:e6:c4:21:9e:a9:27:a5:2a:e1:04:09:74:bd:b3:7f:
97:ad:8b:19:e5:70:0c:20:6a:a9:da:ab:e8:e4:19:3d:a7:f0:
f4:ec:95:7a:11:73:97:5a:cc:b5:71:90:bb:37:f7:ec:ff:f2:
ce:a1:bc:d8:f8:a0:a5:06:5e:6b:d4:a9:4f:df:5f:4e:5d:5b:
82:04:7e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org