Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A7A70352B43A11ED93FE50A2F1222468.roa
File: A7A70352B43A11ED93FE50A2F1222468.roa (raw, json)
Hash identifier: 8mYAMIi9KCYURXFiDWlOehH9BqYwmIwMEZMvRtQBq7U=
Subject key identifier: AE:0A:AC:08:EB:6C:BA:03:21:31:62:6B:A2:04:7D:D0:09:FF:9D:6C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0BF7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A7A70352B43A11ED93FE50A2F1222468.roa
Signing time: Fri 24 Feb 2023 11:59:13 +0000
ROA not before: Fri 24 Feb 2023 11:59:10 +0000
ROA not after: Sat 22 Feb 2025 11:59:10 +0000
asID: 61317
IP address blocks: 154.16.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3063 (0xbf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 24 11:59:10 2023 GMT
Not After : Feb 22 11:59:10 2025 GMT
Subject: CN=63f8a691-2441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:3a:ce:cc:e0:1e:21:4c:ae:1e:cc:02:6a:
e8:ab:dd:10:01:5e:bf:04:92:c7:8f:24:d8:cd:2b:
3b:38:a0:67:86:4a:77:39:c6:07:75:24:39:35:df:
5e:1f:d7:f9:e6:f5:cf:30:08:57:d8:fc:d1:19:2b:
6b:b0:8f:00:4b:43:44:7e:46:bb:57:2a:e1:72:a7:
65:9d:80:1c:e0:03:37:ad:a7:e8:90:a6:d3:66:d7:
32:7f:e5:8f:a9:81:7a:e9:a7:b1:07:3b:b7:d2:4d:
e5:51:70:e0:b9:3a:88:9b:f7:d8:53:45:07:e6:95:
26:af:11:d0:94:55:83:41:bf:c5:66:07:ec:6a:f1:
b8:f4:31:f8:a3:c9:d9:ad:86:5b:b7:79:a7:e9:e0:
b3:89:2c:15:fe:cb:40:77:cf:d7:6b:68:95:9c:b3:
02:36:62:24:2f:0f:df:4f:42:3f:e8:c0:c7:39:d6:
eb:f3:bd:ce:07:7d:e2:13:11:68:64:3b:9c:3d:b5:
a7:7b:39:a7:63:84:78:a1:68:85:08:33:85:d1:09:
c0:f2:cb:02:aa:d9:cb:47:c0:c7:09:b9:96:4f:3d:
9e:e6:2c:74:ed:f3:1a:47:72:8b:60:e9:99:6c:da:
b5:19:8b:c9:bf:86:85:40:4f:d9:83:a1:ed:05:59:
0c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0A:AC:08:EB:6C:BA:03:21:31:62:6B:A2:04:7D:D0:09:FF:9D:6C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A7A70352B43A11ED93FE50A2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:50:da:55:24:58:9f:42:cd:e1:17:9b:ab:55:9d:f2:e9:ac:
f8:f1:13:9b:20:7b:45:11:73:ec:a4:ec:a7:4c:2b:51:e5:6f:
4f:ae:8a:2c:4f:12:5b:3a:43:31:15:28:7e:a0:75:e1:42:83:
d4:39:8b:49:93:86:e7:84:a4:38:aa:60:bc:e9:75:9c:5c:49:
9b:94:1c:39:72:19:9d:1c:e2:9b:82:5d:e1:6e:69:e1:d4:6a:
ab:f8:4b:16:1d:c3:8f:e7:24:fa:38:ff:ec:03:36:a9:ad:9c:
91:9c:bf:c8:31:74:3b:0d:f1:b3:d8:b4:93:15:a6:fc:78:d0:
6c:fa:57:f5:0f:7f:12:41:3c:08:ba:36:e5:63:2e:51:f9:9f:
29:02:54:87:af:2b:e3:24:9b:b5:1c:2e:f6:37:90:6f:46:db:
65:7f:63:3f:cb:bc:13:cb:8e:7e:b2:d9:85:d6:6d:cd:ee:72:
95:4c:e0:d5:17:52:d5:c2:a3:10:dc:f2:21:3d:e0:14:19:22:
aa:1d:82:dc:ae:3a:4c:68:4f:bc:cf:ec:24:67:a1:cf:e6:2f:
e9:36:ae:1a:b1:c4:be:83:20:b7:a9:57:38:ce:98:02:a2:c3:
ea:de:98:5a:15:5d:41:b0:35:de:81:cd:c4:1c:98:43:9e:c3:
e2:1d:89:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org