Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/622AA5FE605211ED9E8265C8F1222468.roa
File: 622AA5FE605211ED9E8265C8F1222468.roa (raw, json)
Hash identifier: /PuddKhPLYx46yY+KX7iHYFY6T+cPjYzNemuYDLneXI=
Subject key identifier: 3C:7A:4D:D9:6E:8A:DD:6B:57:31:F3:96:A9:C4:69:34:69:93:A0:B5
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0AAD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/622AA5FE605211ED9E8265C8F1222468.roa
Signing time: Wed 09 Nov 2022 17:17:27 +0000
ROA not before: Wed 09 Nov 2022 17:17:22 +0000
ROA not after: Thu 09 Nov 2023 17:17:22 +0000
asID: 212384
IP address blocks: 154.16.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2733 (0xaad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 9 17:17:22 2022 GMT
Not After : Nov 9 17:17:22 2023 GMT
Subject: CN=636be0a7-776f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:6b:66:30:db:5a:30:24:05:61:a5:f4:f2:
50:0d:1e:53:3d:1e:4e:f4:10:b6:ec:c2:60:f9:de:
15:57:87:89:d5:75:a7:3f:c9:b6:95:4c:50:cc:04:
79:14:ee:9d:7f:d9:32:5e:fe:c8:f0:7f:58:16:f4:
11:0c:b6:f2:bc:1c:e6:02:56:1f:56:61:9e:38:8e:
54:95:30:c3:52:1c:87:e5:53:08:42:50:74:4b:38:
53:12:63:94:3b:d3:2e:f5:cc:58:2b:0c:97:bf:b6:
c8:14:9c:35:a0:09:b1:09:ec:5c:09:6f:95:f8:d1:
1e:48:0a:80:b2:97:8b:83:96:ab:cf:05:c9:18:ae:
ec:9e:f2:b2:01:ce:01:12:06:63:eb:7f:2b:dc:4c:
5e:24:c3:c9:80:78:50:26:bb:78:11:e5:96:78:b9:
a4:db:1b:4c:66:6a:1d:7d:37:ea:d8:f7:e9:22:4e:
93:48:9e:ad:8e:3c:ac:63:3f:6a:26:9d:6b:67:fb:
93:bb:55:d4:0d:75:b0:5a:f7:a7:1b:49:ed:72:b8:
c8:82:80:e0:e9:57:e3:30:58:bc:23:66:3c:a2:f4:
87:9b:f0:95:fc:bf:24:e3:e6:e2:ac:81:1d:ae:35:
a0:dc:d6:db:86:3e:50:e8:a0:9d:38:56:eb:58:10:
80:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7A:4D:D9:6E:8A:DD:6B:57:31:F3:96:A9:C4:69:34:69:93:A0:B5
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/622AA5FE605211ED9E8265C8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.56.0/24
Signature Algorithm: sha256WithRSAEncryption
70:10:6d:d6:ec:3f:90:db:58:0a:c2:af:56:f9:68:6d:fd:b7:
ce:69:47:34:12:26:1c:ec:bc:c3:1e:ca:8c:1f:be:f9:57:a5:
00:f5:f7:85:b6:77:85:fc:de:be:60:e5:97:54:6e:42:f6:bb:
a7:53:a8:9e:8d:8c:b3:2f:df:1e:ed:1f:6a:b9:6e:81:68:b1:
de:1c:de:99:e2:03:04:d3:f8:6c:ef:2e:9f:1e:9e:2e:dd:e2:
a5:dc:3f:14:94:b5:9a:61:0a:96:4b:8c:71:5b:b5:b4:87:74:
b5:75:fd:2a:1e:a9:ac:b5:76:1f:16:f4:5d:e4:e2:49:8e:2a:
2c:d3:49:e4:40:af:23:b6:7b:4c:75:32:71:b7:3d:6e:66:f8:
d5:54:00:fa:12:3b:24:1a:fb:19:42:5e:7b:02:1c:34:ef:f5:
54:f4:bb:34:1a:27:06:1e:f3:cd:1f:11:22:42:a4:21:fb:e8:
38:a8:9a:4b:3c:51:67:a8:a4:af:10:38:92:66:02:f4:b6:e1:
92:ca:93:a5:da:01:ff:af:79:e7:1d:4f:d3:f5:9c:0b:1e:c9:
df:fb:a3:09:19:c3:fc:52:2d:b5:07:da:e4:64:1f:18:f0:12:
1c:41:cd:e0:d4:e7:ca:df:92:00:c4:2f:f5:0f:6e:6e:e0:09:
78:d7:2d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org