Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A7424ADEB69211EDB96AF6B8F1222468.roa
File: A7424ADEB69211EDB96AF6B8F1222468.roa (raw, json)
Hash identifier: vTHabwSP/0sEnOKaK3YVbCiGvaUgzgaqGe88h9MspEA=
Subject key identifier: BB:D3:49:A0:B5:39:D7:DB:63:03:5A:58:AC:36:49:99:21:41:8C:A1
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C4E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A7424ADEB69211EDB96AF6B8F1222468.roa
Signing time: Mon 27 Feb 2023 11:34:11 +0000
ROA not before: Mon 27 Feb 2023 11:34:07 +0000
ROA not after: Thu 27 Feb 2025 11:34:07 +0000
asID: 61317
IP address blocks: 154.16.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3150 (0xc4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 27 11:34:07 2023 GMT
Not After : Feb 27 11:34:07 2025 GMT
Subject: CN=63fc9532-1533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:18:e5:19:7f:66:ce:e8:81:6a:08:18:34:
36:64:31:79:78:5e:9e:e6:83:dc:b2:b9:32:82:e3:
c0:f9:c8:69:8a:b6:17:fd:b1:40:25:dd:3b:19:be:
c1:04:e5:73:80:96:3a:ff:63:0f:f8:24:9c:e0:5b:
3b:a3:a7:f2:65:0e:c9:2c:51:36:76:c2:eb:3e:d9:
1b:a3:a9:44:81:4d:8b:d6:91:5d:76:74:1b:10:04:
6f:ce:33:4a:fe:f9:e7:94:09:9d:5b:57:d3:ea:84:
66:27:7f:bf:79:d0:82:d2:12:7c:5c:24:e2:6f:25:
fa:07:88:3e:c8:f2:f4:6a:14:c1:9b:98:10:30:c7:
dc:28:72:e1:9d:ac:b6:b8:0f:03:ac:6b:de:25:5b:
88:8e:85:b1:80:36:9a:2d:5e:66:54:07:26:9a:a8:
b6:00:f8:c1:a3:76:04:6f:25:e7:45:ac:b8:77:48:
a6:ec:d1:3b:08:53:5c:2a:99:e3:20:d9:53:5d:45:
c7:ce:0b:16:c1:0e:26:60:07:78:d5:26:07:54:1f:
d9:42:98:cd:ff:cf:d0:a1:af:9c:6d:6d:b7:3b:31:
4f:77:94:77:07:3f:d3:e7:ac:7b:43:72:d1:7e:b9:
ab:b3:2c:10:cd:28:0c:17:28:13:1c:5a:27:c2:ff:
de:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D3:49:A0:B5:39:D7:DB:63:03:5A:58:AC:36:49:99:21:41:8C:A1
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A7424ADEB69211EDB96AF6B8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.90.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:87:1b:d1:38:fe:be:d7:4f:47:32:c9:63:b0:49:af:87:eb:
68:ba:c3:9c:9b:ec:22:63:1b:43:dc:1b:be:cf:aa:82:30:f3:
78:9f:28:26:8b:17:56:40:fe:8d:c1:42:3c:6e:9e:9d:b7:3a:
fd:48:c1:92:33:4b:ac:d8:e8:b1:22:95:0a:82:6c:65:51:ba:
1d:a8:d4:0c:b1:60:ce:1a:87:8a:5e:eb:04:7a:d1:54:28:71:
1f:a5:d3:1d:c5:67:db:35:a3:8d:74:8a:18:1e:e4:5e:ee:dd:
61:be:fb:28:be:8c:63:f0:76:6b:2f:ab:fa:34:26:e8:7e:24:
62:3a:6b:eb:2d:99:9c:71:00:ea:c5:c5:10:96:26:cf:c4:84:
07:4c:60:c2:7f:42:5f:b8:e6:87:6b:4f:43:85:9c:29:a9:00:
59:59:60:0c:fa:d5:88:6b:73:a8:58:6d:d8:0f:37:ad:6b:c5:
6e:9d:c7:5e:8c:f9:e6:f6:0a:9b:04:0f:2f:b0:41:09:02:74:
c0:ab:9d:ac:fb:e5:d1:ca:57:76:21:89:1d:2c:3b:cb:e4:b1:
a2:c4:c8:bb:70:a9:3d:f7:0c:df:19:e1:a6:7d:53:6f:ad:b3:
2e:78:1d:60:d0:77:d6:c7:a7:2b:ef:22:86:3d:41:a1:a9:1c:
88:bc:1a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org