Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5DE26C603BFA11ED8782579DF1222468.roa
File: 5DE26C603BFA11ED8782579DF1222468.roa (raw, json)
Hash identifier: ax1znDnlnc/RESfcPX1b3kw7Dp3Y+ybhX8fH7Rq9iOw=
Subject key identifier: 6D:FE:1F:8E:8F:C2:A8:C9:D6:30:0C:D4:4F:1C:CE:39:27:5F:66:27
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 09BA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5DE26C603BFA11ED8782579DF1222468.roa
Signing time: Sat 24 Sep 2022 11:16:42 +0000
ROA not before: Sat 24 Sep 2022 11:16:39 +0000
ROA not after: Tue 24 Sep 2024 11:16:39 +0000
asID: 14445
IP address blocks: 154.16.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2490 (0x9ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 24 11:16:39 2022 GMT
Not After : Sep 24 11:16:39 2024 GMT
Subject: CN=632ee71a-8840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1f:3c:13:91:e0:91:75:7c:1a:22:d9:4e:f6:
5a:b9:e9:4a:11:89:6b:4b:b6:b3:11:8e:45:e1:a0:
6e:d7:98:6d:42:b9:3f:2a:be:01:6b:ae:2f:ee:5e:
ef:d7:4f:c7:25:01:8d:49:b7:06:da:16:3f:b2:dd:
04:df:8e:12:53:9c:95:3e:77:32:6c:08:ff:69:fe:
13:ae:4b:e2:3e:f2:9d:09:b0:01:33:ff:4e:1a:1d:
0e:d9:99:a2:14:fa:13:d0:40:9f:43:f6:7c:1f:14:
db:7a:f3:0d:79:8a:1d:4d:a3:85:60:c6:1b:f1:ac:
6a:a0:ad:48:25:4a:3a:97:c8:fa:ae:72:ab:cf:eb:
39:3e:48:de:39:8e:e2:1a:3d:d6:b8:37:f1:ca:13:
8a:73:da:b2:d9:98:a9:ac:bb:23:e0:90:a3:98:f2:
9f:fe:0b:b5:76:c0:5c:9a:87:da:8b:bd:1e:49:dd:
86:ac:14:43:bc:e9:06:4c:9f:7e:88:e1:5c:d2:ca:
64:62:94:3f:15:02:c4:a5:36:6a:cb:f4:08:90:7d:
ce:2d:dc:f7:b9:0d:2d:f3:56:f6:fa:84:31:4c:93:
9e:b0:16:f2:43:8f:dd:b0:40:1b:64:36:49:ab:26:
c3:e7:2b:fd:2b:9e:30:51:9c:9f:f1:bf:34:a2:19:
a1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FE:1F:8E:8F:C2:A8:C9:D6:30:0C:D4:4F:1C:CE:39:27:5F:66:27
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5DE26C603BFA11ED8782579DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.52.0/24
Signature Algorithm: sha256WithRSAEncryption
26:6e:a9:9a:ed:8a:4d:4a:7c:95:8b:fb:c0:64:2a:d7:71:df:
07:05:aa:79:ad:89:cd:5a:33:fe:cc:26:3f:07:3b:98:a8:e9:
96:35:72:9a:b7:68:16:71:3c:2b:61:26:1c:96:93:c6:99:04:
93:4e:5e:1a:e5:27:73:9e:3a:db:67:29:72:73:08:69:76:57:
7e:b1:72:b9:19:12:a4:ff:87:f9:73:3e:aa:d2:1c:7e:3b:6a:
45:43:04:85:e1:00:36:01:b5:1a:67:82:26:a2:27:4c:1a:4d:
ae:f8:6a:91:a3:cc:bd:c7:44:65:ec:bc:2b:79:54:a1:00:53:
d9:90:e5:c7:2c:f4:31:7b:07:2f:1c:c0:6d:44:f6:0c:9a:57:
ea:93:ba:9c:f3:e0:3a:cc:ce:6b:ee:2f:b5:83:61:da:2c:b5:
6f:b7:ea:69:e9:38:ca:02:4d:12:70:90:c3:33:1d:0e:ff:91:
f6:08:1c:4d:5c:50:b3:f0:6f:65:a6:d9:f3:e5:82:56:6f:4e:
d2:00:c0:60:94:9c:5d:99:94:8e:23:e7:4f:8b:74:7e:6e:57:
3b:e8:13:f1:6a:81:47:84:07:3b:18:77:20:de:1c:60:a5:38:
70:ad:1d:52:0e:5e:15:f4:0f:ea:98:a4:2e:0b:94:c6:ca:e7:
6d:80:78:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org