Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/995670AC91F111EB9D1B6867F8AEA228.roa
File: 995670AC91F111EB9D1B6867F8AEA228.roa (raw, json)
Hash identifier: mteutY3JfZA1OgPVC+8gCljoyit6nOCzyUj+Ik7c778=
Subject key identifier: 7C:92:AE:6D:62:E6:8B:C4:31:08:CA:E0:68:41:C4:8D:C1:6B:9E:C4
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0530
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/995670AC91F111EB9D1B6867F8AEA228.roa
Signing time: Wed 31 Mar 2021 07:20:41 +0000
ROA not before: Wed 31 Mar 2021 07:20:38 +0000
ROA not after: Tue 25 Mar 2025 07:20:38 +0000
asID: 133752
IP address blocks: 154.16.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1328 (0x530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 31 07:20:38 2021 GMT
Not After : Mar 25 07:20:38 2025 GMT
Subject: CN=606422c9-80a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:64:2d:2f:a3:d7:ae:4c:53:1b:3c:fd:2f:
0f:a9:24:45:fb:7b:20:b7:20:00:ce:92:b0:c5:8c:
68:81:78:8b:79:80:3c:fc:64:c5:94:99:dc:51:02:
07:e4:6c:3e:6a:6d:32:27:b7:90:be:b4:dd:4c:55:
6e:8b:0f:f9:c9:79:27:94:97:57:ce:5f:96:a1:df:
89:23:c5:f2:e9:26:fd:cf:ed:eb:c9:dc:82:16:98:
ff:a5:cb:8b:ef:08:13:39:c1:69:c9:6a:2b:72:56:
53:86:8b:9f:c3:12:f0:9d:6c:1c:9b:f4:ea:11:46:
e3:1b:a5:9b:39:fd:b0:d7:7e:f9:56:fc:36:17:12:
f6:fc:53:85:2d:59:06:ef:9a:fa:6b:33:a0:0c:8e:
bf:3d:00:e2:62:a3:d6:45:7a:24:1b:c9:96:bb:e2:
2e:38:67:d3:91:77:0b:30:9b:25:6a:40:d5:a8:0a:
01:51:40:15:6d:14:23:be:13:e4:ed:8d:3e:62:64:
4a:fa:61:87:9d:7f:cd:55:bc:09:24:20:88:70:86:
40:6a:9b:e9:44:be:92:15:8e:8c:19:d3:79:f9:22:
14:ba:58:63:c8:9c:83:27:86:0e:15:5e:44:7a:bb:
56:e3:7e:19:6f:5d:67:fe:fc:60:29:de:96:7b:79:
a6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:92:AE:6D:62:E6:8B:C4:31:08:CA:E0:68:41:C4:8D:C1:6B:9E:C4
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/995670AC91F111EB9D1B6867F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.220.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:16:12:0b:d0:63:6e:f7:61:db:db:95:7b:0c:78:13:e7:c4:
15:7a:f1:21:97:20:95:09:74:af:d0:79:02:cb:08:b2:94:72:
3f:ef:4c:41:64:18:c4:1a:5f:8d:c5:01:43:1e:aa:f6:3d:0f:
71:b7:bf:38:42:77:45:e4:03:a3:cb:c8:77:83:fa:55:87:c7:
78:dd:09:82:d5:24:a2:20:13:38:20:74:ea:92:23:ab:7f:48:
18:e4:64:12:27:96:eb:05:a1:51:e1:95:32:ce:85:77:5a:c1:
91:6f:eb:6d:f0:11:d5:60:78:70:ee:f4:59:a8:bf:9c:77:99:
9a:72:3e:cc:fa:a8:26:96:3a:5a:e9:af:e4:66:97:dc:ef:6c:
db:5e:c7:d6:83:ea:32:4e:40:5c:d6:30:a2:af:a4:86:70:3e:
27:5c:0d:3e:10:00:fd:91:d9:a3:54:0d:37:aa:9b:51:d5:91:
3d:79:a3:2e:be:d6:2d:7a:2a:2c:0a:1c:03:5c:74:c1:52:25:
ab:09:1a:03:08:83:aa:2d:31:e1:a2:0f:96:cc:64:97:67:6e:
12:7f:6b:76:b8:a8:37:4f:9d:76:8a:a7:14:37:c6:1b:08:a1:
8b:06:0f:cb:65:9e:41:8f:a7:80:68:26:b7:8d:9c:cc:f5:af:
2c:ef:19:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org