Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/523AADEC5B0C11EDA045049AF1222468.roa
File: 523AADEC5B0C11EDA045049AF1222468.roa (raw, json)
Hash identifier: Pt8tLIC4+6lihQybBur6Ove2LrtVokF75rxQPTMhfCQ=
Subject key identifier: C4:74:92:65:B0:9F:78:29:9E:F0:A2:D2:4B:F1:F8:71:F7:7D:66:E5
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0A91
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/523AADEC5B0C11EDA045049AF1222468.roa
Signing time: Thu 03 Nov 2022 00:13:20 +0000
ROA not before: Thu 03 Nov 2022 00:00:16 +0000
ROA not after: Fri 03 Nov 2023 00:00:16 +0000
asID: 205431
IP address blocks: 154.16.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2705 (0xa91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 3 00:00:16 2022 GMT
Not After : Nov 3 00:00:16 2023 GMT
Subject: CN=6363079f-b23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:53:68:66:a0:66:40:33:39:34:f6:8c:8e:67:
4e:6e:95:dd:6f:10:b7:eb:ab:e7:b1:2a:61:3d:87:
ac:19:23:49:50:7e:ec:e7:8d:23:12:a9:c1:9e:81:
8f:fd:e6:32:b5:2c:68:9b:a8:20:59:2c:e2:30:88:
0d:0d:c9:0c:86:12:d1:29:8f:f1:9d:eb:6b:79:75:
11:80:37:6b:77:27:1a:31:6c:3f:c6:dd:1b:6a:db:
1b:6e:03:23:d7:6a:0a:bd:bc:75:07:03:e2:ac:d7:
b3:47:64:d4:a7:4e:c1:37:a2:42:2c:5f:f7:42:08:
5c:77:e8:21:85:08:c3:67:51:a4:25:c3:0e:0b:5c:
20:a4:89:09:60:f2:ab:82:07:91:ee:75:77:42:8f:
41:ed:1b:0e:36:4f:3e:45:51:4c:63:24:80:f1:c9:
b6:fc:51:49:d2:52:82:d9:56:be:28:45:ba:3a:08:
46:a4:6f:7f:29:6d:12:f7:d8:71:ad:50:14:9f:49:
7a:11:46:6d:bc:95:75:13:76:70:b3:cf:d2:3f:6d:
21:e2:2f:37:20:25:7d:46:4a:8a:10:a5:32:37:ad:
f8:64:04:05:28:05:7f:12:53:31:52:ff:40:a4:b8:
a6:1c:b5:78:b6:0b:c6:88:ec:84:cd:9f:76:64:a8:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:74:92:65:B0:9F:78:29:9E:F0:A2:D2:4B:F1:F8:71:F7:7D:66:E5
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/523AADEC5B0C11EDA045049AF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.194.0/24
Signature Algorithm: sha256WithRSAEncryption
27:76:4e:e9:75:87:32:7f:03:55:50:ec:09:e0:aa:ff:be:06:
b0:0d:b8:72:90:c6:5f:0d:ac:e3:6d:ab:88:c2:77:1b:ff:f1:
6b:60:4d:c5:33:26:51:4b:e5:de:a0:a0:c5:0a:12:ac:73:70:
6d:3f:66:f6:e6:5c:03:3a:e6:54:21:62:5e:8a:44:a1:17:cd:
51:be:a3:e8:9b:be:f3:57:af:bf:8e:8a:2c:65:b6:04:11:84:
57:e5:ce:94:09:2e:7e:f4:39:80:e8:e5:94:0f:5c:1e:84:66:
01:ff:97:cd:29:0d:fd:69:c8:a6:17:45:55:a9:00:24:c4:88:
79:0d:16:94:fe:05:66:47:da:f8:8f:e7:82:a9:3a:49:05:89:
22:3f:56:b0:23:d2:7f:f9:62:58:a4:cc:bf:c6:f7:47:63:2a:
8c:00:39:87:19:31:a6:e6:de:d6:09:62:b2:64:35:d7:de:0d:
74:30:6c:e8:03:cf:8d:b9:c2:79:a9:ec:ba:fa:44:96:3a:fa:
e3:4a:20:32:07:9c:41:47:7e:27:45:14:e9:a0:99:38:94:22:
f1:e3:5d:f2:30:ce:69:81:5b:b2:dd:ec:89:2b:26:d8:fc:64:
37:22:40:1c:2e:41:6a:4a:98:5b:29:23:0c:c2:10:24:d2:97:
50:a8:a2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org