Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5EF20D2834F111EDBA891AF5F1222468.roa
File: 5EF20D2834F111EDBA891AF5F1222468.roa (raw, json)
Hash identifier: kbIpmkQsMiHSvwzHKf/a/+kQvMU4n+9V+RWbfPdEmYA=
Subject key identifier: 7A:7D:E4:AC:DE:EA:93:B5:15:8B:12:FB:8F:53:B3:E5:D1:4F:AE:34
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 099C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5EF20D2834F111EDBA891AF5F1222468.roa
Signing time: Thu 15 Sep 2022 12:24:40 +0000
ROA not before: Thu 15 Sep 2022 12:24:35 +0000
ROA not after: Sun 15 Sep 2024 12:24:35 +0000
asID: 49999
IP address blocks: 154.16.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2460 (0x99c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 15 12:24:35 2022 GMT
Not After : Sep 15 12:24:35 2024 GMT
Subject: CN=63231988-a53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:5b:f0:89:eb:fa:7b:2d:27:7f:47:e9:fd:
e7:01:83:53:1f:60:76:f0:c4:90:d0:f5:18:96:17:
68:50:8f:3a:09:28:28:8c:49:04:e5:e4:8a:4d:92:
c5:71:23:5d:cf:d0:63:0a:ed:d3:21:de:3c:db:91:
9e:4a:17:e0:e4:bb:53:55:8a:fe:28:bf:00:6b:d8:
ca:5f:11:26:4d:0d:cf:3a:35:08:ae:ec:9d:55:f8:
7b:f5:08:92:1f:34:b2:38:47:6d:2b:79:af:5f:79:
11:be:52:94:21:9e:be:98:45:d7:d0:7b:f5:45:01:
8f:76:34:41:7f:42:49:2a:63:ff:98:bd:bf:3a:36:
be:0a:cd:f6:5f:66:e9:96:98:ac:23:01:dd:a5:cb:
4b:25:18:ed:5b:12:e9:3b:d0:d9:8e:d9:31:90:79:
5a:10:9a:e1:fa:28:92:6f:31:30:0d:63:64:60:97:
ae:fe:77:00:28:52:ae:61:98:ad:b8:13:e7:17:44:
09:34:05:30:1a:11:00:1e:d1:c0:25:5c:8c:6a:9b:
52:66:16:ee:d1:81:36:a6:f4:9a:77:16:69:dc:44:
c8:94:ed:05:0a:95:be:88:3c:4a:f1:c0:d8:84:fd:
9a:6a:bb:f0:2e:56:e0:b2:b5:06:58:2f:11:e2:c8:
87:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7D:E4:AC:DE:EA:93:B5:15:8B:12:FB:8F:53:B3:E5:D1:4F:AE:34
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5EF20D2834F111EDBA891AF5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.109.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:03:a7:fb:74:b6:ef:79:38:52:ff:95:6a:59:c2:91:f7:9e:
b7:79:82:e5:2a:76:00:40:ca:55:a7:89:bc:bf:a0:d1:cd:06:
03:99:0f:1a:59:9a:f0:8c:a1:0d:40:52:25:c0:37:e7:3c:52:
f9:3a:be:57:f3:4d:e6:df:7a:68:b7:29:1e:47:4f:cc:8f:85:
a0:fe:d1:bf:d5:ed:80:77:89:5c:3a:28:b8:67:8d:f8:0b:39:
8b:cc:8f:c7:7a:79:82:32:a5:17:32:8d:22:8e:50:eb:79:4b:
1f:7e:d0:0f:a6:21:c2:f1:94:56:71:13:b7:66:75:76:08:0a:
99:0b:9f:c3:1f:c8:52:a6:1b:db:c5:64:75:4e:ef:df:33:08:
fa:58:a1:7d:6e:66:aa:79:1f:47:35:f6:1a:1d:46:fe:6b:7c:
02:9f:c9:88:31:40:75:85:33:ac:76:b6:db:5f:61:a8:8a:28:
2e:a9:61:24:ea:08:60:4f:62:da:fc:ef:b4:e4:53:b4:4b:05:
08:2c:46:4c:e5:08:7b:48:68:7a:7c:ea:46:b4:2e:32:91:e3:
ff:ce:2c:02:c3:3a:8e:d6:a3:62:69:cd:a5:85:ac:e7:92:08:
91:76:a3:69:92:0d:00:fa:bf:cd:a1:4e:e1:d5:75:0c:de:aa:
43:d3:12:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org