Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/938F16CAB69211EDA596A7B8F1222468.roa
File: 938F16CAB69211EDA596A7B8F1222468.roa (raw, json)
Hash identifier: zOnp5kFQC6S5UGCdso85uygzQwWSYxnAqtgzOGijmv8=
Subject key identifier: 4A:DD:0F:8A:BE:F6:14:A4:3E:44:D2:DD:9D:67:C5:96:6D:84:7F:B3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C4C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/938F16CAB69211EDA596A7B8F1222468.roa
Signing time: Mon 27 Feb 2023 11:33:38 +0000
ROA not before: Mon 27 Feb 2023 11:33:34 +0000
ROA not after: Thu 27 Feb 2025 11:33:34 +0000
asID: 61317
IP address blocks: 154.16.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3148 (0xc4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 27 11:33:34 2023 GMT
Not After : Feb 27 11:33:34 2025 GMT
Subject: CN=63fc9511-3e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:30:6c:99:50:f9:91:b3:98:78:1b:76:4f:
13:c1:55:b7:09:af:bc:6e:1f:5d:8a:e4:6d:ab:65:
19:f7:4b:70:f0:5a:a0:56:2f:35:47:6c:9a:c6:b1:
53:68:e1:42:d1:d8:dd:4b:94:07:36:2f:a2:a2:c2:
e9:6b:32:8b:04:a4:4b:2b:c1:49:2b:09:8e:10:b7:
48:75:ef:1b:79:ff:a8:08:d7:e0:9e:c2:49:1e:aa:
6a:2b:8c:d2:2b:aa:96:03:6f:1c:67:17:1a:ae:63:
c7:15:b1:16:49:5f:1f:03:10:4f:7f:98:3e:00:c2:
98:dc:2e:b1:10:2e:eb:48:05:95:88:99:83:dd:dd:
7d:96:ae:2c:cd:eb:9e:a4:d1:be:dc:ce:df:45:ee:
b8:89:05:40:60:3e:b7:c0:ff:fb:fa:15:3c:7e:9f:
d4:6d:4f:01:29:ec:04:a0:cd:1b:2f:1c:c9:3e:16:
a6:22:3d:e9:1c:84:4d:1b:e2:f8:7f:c3:5f:15:d0:
c0:0c:47:e1:f8:87:2c:24:95:76:2e:97:77:70:a1:
35:d6:9d:73:60:59:10:40:b2:c9:71:a9:7b:d9:64:
6e:3e:24:5d:5d:c1:b4:ed:32:8a:c1:0e:b2:85:96:
f9:dd:8e:89:2a:fe:b3:df:31:40:b8:78:f6:ef:6e:
e4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DD:0F:8A:BE:F6:14:A4:3E:44:D2:DD:9D:67:C5:96:6D:84:7F:B3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/938F16CAB69211EDA596A7B8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.89.0/24
Signature Algorithm: sha256WithRSAEncryption
04:fc:76:dd:31:cc:e9:42:65:a3:17:e0:cd:4d:0f:bf:25:62:
4a:7d:19:7e:be:49:ab:1b:f8:a0:3e:09:99:85:47:28:b4:77:
84:ff:42:08:1c:e3:c1:7a:58:0d:10:a8:97:01:ee:fd:ab:e5:
03:a2:fb:74:45:07:e6:65:0b:1a:4b:f9:d4:cc:60:cb:f1:93:
a8:ec:86:40:a2:a2:73:99:20:8b:1b:26:c5:29:0a:0c:4f:94:
2e:af:d6:39:62:f1:4a:07:b3:11:25:9c:41:1c:8d:ae:72:38:
88:2b:e6:10:0a:ef:52:8d:a4:db:ad:59:39:11:27:a0:09:91:
e4:8a:fc:8c:13:21:ed:c1:a4:1c:6b:8b:f1:4d:38:04:9b:d5:
4d:41:83:d2:a3:92:b2:c6:28:ab:de:67:84:e9:6a:36:72:4d:
3c:85:f3:2a:2d:b0:d8:58:b2:b3:99:f5:a8:3b:29:76:5e:8b:
c8:90:70:55:51:8b:04:78:54:a1:b0:02:5f:d6:92:82:fd:0f:
14:a1:85:af:4d:9b:21:84:09:62:92:e3:b0:ff:e6:b5:fc:79:
f7:fc:03:df:5e:d7:40:b0:1f:c8:6b:f2:7d:70:93:49:2d:9e:
8c:85:b0:1b:6a:eb:cd:ba:42:a9:9d:89:f0:9a:74:c2:a4:2f:
02:14:d3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org