Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A656EC92C99D11ED907880EAF1222468.roa
File: A656EC92C99D11ED907880EAF1222468.roa (raw, json)
Hash identifier: qkPs7kWtiAjqtlYXtuMCUa8YqWUfzBDFs9txivJO7tM=
Subject key identifier: 15:ED:C4:1A:26:C6:9C:69:C9:1C:44:71:BA:FB:3A:BA:29:DE:FF:10
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D0B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A656EC92C99D11ED907880EAF1222468.roa
Signing time: Thu 23 Mar 2023 17:10:46 +0000
ROA not before: Thu 23 Mar 2023 17:10:41 +0000
ROA not after: Mon 24 Mar 2025 17:10:41 +0000
asID: 397423
IP address blocks: 154.16.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3339 (0xd0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 23 17:10:41 2023 GMT
Not After : Mar 24 17:10:41 2025 GMT
Subject: CN=641c8816-f6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:e3:12:7d:8c:76:75:8a:49:57:75:c4:c2:
d5:00:5e:c0:a4:27:d0:13:d5:8f:fa:dd:73:3c:7c:
66:ca:6f:ca:03:55:60:aa:ee:53:df:94:ab:3a:be:
8a:96:50:be:f7:1f:84:c8:b8:20:3c:22:12:3b:6a:
81:44:e1:3c:31:7c:50:b5:95:07:b7:35:93:99:ea:
cd:b8:7c:e5:15:a3:98:eb:90:19:b4:bd:15:ba:ca:
bf:2f:13:02:49:a3:30:0f:9f:47:bc:da:b2:ac:02:
33:3d:c2:63:3c:f2:59:a4:a5:00:3c:09:9a:cf:cf:
33:b7:9b:df:f2:c0:92:84:7f:fd:47:3b:86:e0:65:
d1:b9:63:11:22:57:7a:fd:3e:fb:dd:db:39:4a:69:
d4:12:7e:e9:4c:70:19:e8:70:07:4a:34:5b:d7:f2:
e9:d4:d5:1f:e4:b8:3c:91:cb:6d:fd:75:eb:2b:1e:
c5:38:ef:aa:91:10:9a:4b:77:c5:7d:2f:f7:44:8a:
0a:42:5c:2c:5e:81:43:19:11:90:57:40:9c:76:63:
52:ae:3a:83:11:1b:fb:0c:15:3f:fe:e8:40:3f:4d:
6e:e5:b1:d4:85:66:83:a1:25:c6:35:7d:10:59:53:
dc:ce:2a:04:a8:9f:de:2b:07:08:d8:d7:a1:0e:69:
99:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:ED:C4:1A:26:C6:9C:69:C9:1C:44:71:BA:FB:3A:BA:29:DE:FF:10
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A656EC92C99D11ED907880EAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.194.0/24
Signature Algorithm: sha256WithRSAEncryption
48:51:09:f9:b1:51:60:90:b8:a4:f2:eb:36:08:cf:8f:df:ff:
9c:53:f7:3a:ad:79:54:e7:2d:c7:33:be:ac:52:b2:e4:84:d7:
5e:a4:ce:b8:3a:33:68:a2:81:67:1e:08:1b:61:88:a0:10:50:
a0:32:2e:79:de:40:00:1f:1c:e2:da:fa:a7:72:b8:01:07:0f:
72:74:76:b1:81:9a:60:2b:07:17:8a:6c:ca:cd:a5:32:64:36:
07:9e:10:28:77:7c:9a:f0:28:11:87:c0:c3:95:f3:66:7e:1d:
59:2b:15:a3:cc:7a:fc:fd:57:44:b9:84:9c:f5:8c:37:ce:90:
7b:ed:b9:2a:48:8c:d9:7a:48:17:49:a3:0d:ad:e8:61:9b:c3:
a3:d3:bc:48:54:ce:b2:64:af:ea:11:6f:3c:77:48:2a:89:f2:
aa:33:e9:b4:9e:36:6e:45:d5:56:78:f2:75:b1:d1:a3:cf:aa:
3e:21:09:d1:18:53:40:13:6b:53:a2:04:c6:03:68:41:03:04:
64:f0:8e:ff:cb:e1:c5:08:67:62:d8:42:a0:36:73:ae:87:73:
fd:00:b8:ff:58:99:bd:17:0e:cf:ce:77:b9:af:c3:cc:66:d2:
aa:4d:a7:00:2e:f8:68:a8:9a:41:6a:c8:32:7c:d6:8d:5b:91:
af:06:b6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org