Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/793396C6CFC811ED97FBF6A6F1222468.roa
File: 793396C6CFC811ED97FBF6A6F1222468.roa (raw, json)
Hash identifier: 4k7W/B7JkpNNxXAmXPZ6Xi83+8i3Afo2StBQ0MUQ1go=
Subject key identifier: 37:0F:31:6A:E9:C4:97:B0:78:42:21:04:DC:2F:A3:2D:E8:64:BE:DA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D1B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/793396C6CFC811ED97FBF6A6F1222468.roa
Signing time: Fri 31 Mar 2023 13:32:26 +0000
ROA not before: Fri 31 Mar 2023 13:32:20 +0000
ROA not after: Sun 31 Mar 2024 13:32:20 +0000
asID: 834
IP address blocks: 154.16.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3355 (0xd1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 31 13:32:20 2023 GMT
Not After : Mar 31 13:32:20 2024 GMT
Subject: CN=6426e0e9-1d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:eb:98:f6:7f:39:b8:0e:be:76:ca:c9:a5:79:
18:e2:9f:7b:bd:56:77:7c:2f:13:62:d3:87:16:50:
45:08:e5:eb:bf:78:e3:4a:e0:c6:61:8c:c4:bb:cb:
38:e9:93:a3:9d:d9:33:1f:e2:ba:56:a5:70:3c:49:
62:b7:4d:8f:4c:fa:d1:ff:b4:e0:ce:53:2f:df:b4:
4b:60:ce:ec:e8:ff:b9:0a:17:73:a9:9a:94:3b:c7:
72:ac:30:e2:f6:2f:7a:28:35:f4:67:85:7a:85:7b:
c4:98:6d:20:be:75:d2:fe:76:50:98:92:4e:52:b8:
e2:ac:20:6c:89:f7:f9:7a:9a:86:88:b8:ef:ff:fa:
1a:87:a0:ef:02:ff:95:e9:7d:f5:d7:bb:15:1b:29:
65:5a:7e:bf:68:fd:51:5d:ec:1f:16:e2:82:1c:a4:
6b:9d:c5:48:07:b8:11:84:d3:7b:e8:f1:18:76:91:
56:e9:ab:1e:b6:7a:7b:dc:5e:ed:df:9b:23:11:0e:
51:68:bf:59:67:3d:6e:0e:f1:2e:7c:aa:df:f6:95:
ae:08:a6:df:25:b0:5f:b8:9a:ee:75:5f:c3:87:22:
74:2b:d8:92:c8:3e:26:8b:d5:99:b7:af:52:23:4c:
17:34:2e:40:7a:5e:84:e0:b5:03:6f:fe:92:5f:39:
80:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0F:31:6A:E9:C4:97:B0:78:42:21:04:DC:2F:A3:2D:E8:64:BE:DA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/793396C6CFC811ED97FBF6A6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.250.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b7:5a:c9:02:6b:a9:27:fb:69:b9:6f:e9:94:3d:ea:a3:ea:
e9:7b:85:56:c9:64:41:b8:1f:08:09:13:8d:fa:8d:61:e1:a6:
13:f4:ca:c2:03:72:98:57:cb:24:58:92:94:24:e6:6e:07:26:
cb:76:03:bd:0a:d8:d0:89:53:b6:14:02:20:7c:53:21:0c:d1:
63:ec:51:88:97:69:37:75:e5:0d:e4:99:d6:67:98:ca:ab:65:
b1:9e:ac:8a:6b:1c:07:05:6d:87:77:03:76:d0:b8:4f:8e:3e:
26:5f:9a:1f:99:b3:ad:80:87:ff:0e:84:61:50:d3:e9:d0:7e:
f7:c7:cd:21:6b:0c:9e:72:c3:77:63:89:27:ac:8c:8c:79:20:
21:74:e1:d8:e0:20:10:9b:8d:26:da:9b:7a:7f:b5:a8:fa:4f:
c1:ed:f9:09:7e:89:f8:6d:1d:09:f3:5e:90:f7:67:40:1b:92:
c8:20:e6:70:a3:cf:0f:7d:e9:9c:ea:20:c7:83:69:dd:dc:c9:
63:0f:77:8e:b1:d0:9d:da:7c:43:7c:25:30:88:ef:86:e3:d1:
bd:8d:1b:82:8b:ad:ab:64:99:db:c4:59:15:ea:5f:cd:75:79:
0f:ad:6d:e8:b5:eb:56:25:f7:b2:fe:56:14:f2:df:5c:b9:af:
e4:1c:a9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org