Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7938E4AADCCB11ECAA918A80F1222468.roa
File: 7938E4AADCCB11ECAA918A80F1222468.roa (raw, json)
Hash identifier: W8l9JXmGBS0mdj2b70iyK5qwSVG83Ww3Zam5jSGAH1M=
Subject key identifier: 76:59:13:1A:07:A4:B2:98:30:39:D4:5A:F8:E8:8A:4F:7B:C8:E9:B0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0871
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7938E4AADCCB11ECAA918A80F1222468.roa
Signing time: Thu 26 May 2022 08:11:41 +0000
ROA not before: Thu 26 May 2022 08:11:37 +0000
ROA not after: Sun 26 May 2024 08:11:37 +0000
asID: 270014
IP address blocks: 154.16.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2161 (0x871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 26 08:11:37 2022 GMT
Not After : May 26 08:11:37 2024 GMT
Subject: CN=628f363d-0c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:8c:43:6a:ff:79:98:1d:47:f3:23:e6:5f:
be:da:de:d7:15:4c:f0:ba:92:22:57:61:bf:40:7f:
81:27:25:c3:48:05:7c:18:f9:b3:68:30:d1:2f:6f:
e3:06:22:e9:7f:fb:2c:3f:0b:e2:dd:1e:7a:74:c4:
2f:95:24:4b:94:2a:17:ee:03:eb:68:2e:ad:bf:06:
ad:d6:14:cf:27:85:e8:a6:d6:40:d3:70:91:c9:4d:
ce:be:d6:3c:c4:b2:0b:e1:2e:31:39:5b:4c:c8:6e:
dc:cb:d1:5e:20:20:11:cc:8a:b5:8c:36:09:02:5f:
43:4b:ef:b3:42:af:19:44:07:6a:54:72:b8:fe:7a:
a8:75:bb:f0:3b:88:87:ee:a2:3f:15:45:32:4a:b1:
0c:6d:9d:e7:f7:b5:73:13:0e:ed:95:90:66:fb:62:
51:47:f2:35:00:d6:48:b9:23:64:e0:4a:6c:da:42:
af:b5:df:b8:5b:91:ba:49:46:d2:48:43:83:19:ae:
95:f7:e1:2a:03:a7:5c:98:95:ae:27:0a:83:bd:4f:
95:41:a7:62:db:3c:f3:48:67:d6:d2:32:b5:f3:f0:
81:3d:c1:3f:50:23:42:72:f0:6f:11:5c:ae:45:46:
79:d0:85:ca:7a:94:e7:df:ea:b6:46:04:af:40:02:
69:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:59:13:1A:07:A4:B2:98:30:39:D4:5A:F8:E8:8A:4F:7B:C8:E9:B0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7938E4AADCCB11ECAA918A80F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.208.0/24
Signature Algorithm: sha256WithRSAEncryption
55:dc:0e:78:b4:c3:8b:f9:a3:1a:0c:b9:c5:3c:72:fc:f9:e5:
54:0b:aa:f6:62:91:fe:5b:25:00:e3:f2:24:a2:1c:d4:73:89:
70:f0:5d:05:e4:43:4d:21:87:fa:75:af:ec:01:4c:d2:0c:60:
33:f5:b7:bc:a2:7b:ec:f2:4f:61:85:3f:d1:e8:67:16:07:a1:
8b:87:93:86:27:7f:eb:f8:8c:7d:16:f0:d5:52:4f:af:ff:db:
88:b6:2a:c9:46:6e:02:54:63:51:42:36:42:d5:0c:55:1e:ff:
48:3f:55:5c:ef:a5:fa:aa:0d:ce:12:8a:f2:9c:c1:23:4d:7b:
3a:a5:80:b0:63:6e:dc:64:02:95:23:cd:86:d1:69:e7:85:4c:
e6:74:53:31:51:ae:68:73:db:f7:f9:3f:44:d9:72:28:fa:ac:
32:a3:30:52:7e:9d:c7:27:f3:84:f5:30:f4:1d:93:df:90:6b:
da:11:b4:9f:e5:38:41:cd:44:74:13:38:98:4e:78:f7:fc:7e:
1b:e1:40:01:d3:2e:91:81:18:62:c6:79:74:ac:5b:9e:16:f1:
6f:78:48:03:e8:a2:4b:cb:b2:48:e2:ee:e4:3a:c8:19:ad:23:
a8:ac:e3:82:17:06:8c:66:a8:47:e5:03:ee:be:23:9f:2a:ad:
cc:7e:10:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 06:59:38 2023 by rpki-client on console-ams.rpki-client.org