Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6A2F9352CAE511EC8894B0B2F1222468.roa
File: 6A2F9352CAE511EC8894B0B2F1222468.roa (raw, json)
Hash identifier: 9Ahlr3uEO/qS5+7MNo1NN6d66bjQf5oA5TJssn8Ln50=
Subject key identifier: 9F:05:3B:1D:E1:61:BE:7B:2C:53:A0:26:E7:1C:30:F8:AA:3C:0B:BA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0849
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6A2F9352CAE511EC8894B0B2F1222468.roa
Signing time: Tue 03 May 2022 13:32:02 +0000
ROA not before: Tue 03 May 2022 13:31:58 +0000
ROA not after: Fri 03 May 2024 13:31:58 +0000
asID: 1239
IP address blocks: 154.16.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121 (0x849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 3 13:31:58 2022 GMT
Not After : May 3 13:31:58 2024 GMT
Subject: CN=62712ed2-fc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:82:f9:b4:c3:52:4c:30:db:df:6b:44:85:
c3:25:07:54:1e:01:33:f4:31:22:a6:9c:66:94:96:
92:61:45:35:b8:65:74:9c:8c:a4:9a:de:5e:23:57:
75:54:9c:81:a4:5c:2f:9e:98:ff:38:11:ef:c8:fd:
a7:0d:d2:e7:4d:f3:1c:00:46:f8:b6:4d:65:04:12:
68:5d:97:7e:9a:dc:2b:1c:e8:a5:03:b3:6d:9c:56:
55:46:00:75:14:9c:6c:bd:18:33:b0:f4:4f:76:e5:
9b:db:37:02:84:1a:52:c0:e5:a2:fe:cf:29:d2:f3:
25:fb:fc:24:f0:7d:61:90:d9:c5:e1:9a:b6:b0:e8:
9c:c7:60:c5:92:7e:1a:b8:57:a1:91:9d:8f:90:f1:
b7:4b:a4:c6:62:f3:bd:23:da:5a:75:f0:84:4a:64:
06:3e:dd:6a:fd:c4:94:a4:48:ec:8e:a1:15:c5:50:
64:98:d5:a1:d0:a0:f2:c3:ec:08:35:e7:97:da:79:
3f:1b:d9:b9:97:f2:f8:bf:8c:7f:99:91:b9:55:74:
85:9b:28:75:a5:12:f3:e7:e7:62:88:42:cb:9d:79:
80:cc:f4:d6:38:c2:e1:c2:25:50:25:03:4c:ac:d5:
e2:60:b2:d8:3b:f2:e0:f7:5c:72:28:d9:fa:21:79:
cd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:05:3B:1D:E1:61:BE:7B:2C:53:A0:26:E7:1C:30:F8:AA:3C:0B:BA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6A2F9352CAE511EC8894B0B2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.207.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:a8:96:73:12:0f:a2:bf:b5:f6:11:fb:cd:78:3c:6d:11:fd:
56:b5:72:1a:1a:da:de:e9:b4:7c:67:90:8c:0f:42:12:89:77:
a8:38:41:6d:2b:30:3a:e2:50:43:98:f7:b5:ec:d3:6e:05:2b:
33:a0:84:c6:5a:fc:cc:6f:49:39:79:8a:82:97:18:fc:bd:e6:
87:bb:74:49:15:fe:41:fe:61:ed:3d:87:00:35:9b:25:03:40:
41:8c:22:aa:bd:bb:22:a7:52:02:af:a1:da:f2:e6:9c:70:cf:
b2:61:e7:62:78:37:c0:26:4b:67:25:3b:67:12:ab:82:30:bc:
06:64:b0:d9:93:5b:cc:29:2b:27:c8:bb:ec:c2:dc:d8:0f:55:
f5:a7:d0:36:a6:f8:5d:55:b1:13:b3:e7:eb:ce:69:cc:96:31:
f7:73:f1:95:04:cc:58:24:5d:d3:5a:81:0d:fd:a9:7e:da:a2:
73:41:3e:66:cd:a7:ee:5a:d9:db:b9:6c:0a:d6:6b:fb:c1:c9:
aa:3b:7e:89:2e:81:4e:64:2d:37:18:8c:09:8f:a0:9f:27:c1:
df:6f:b6:a2:7e:58:e3:f3:f2:c3:dd:95:fb:09:e4:72:3c:38:
4c:69:fc:a3:a3:ec:59:e3:29:52:16:8c:d3:2e:8a:5b:b0:8d:
8a:fd:0b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org