Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A7A81106977111EDA214F1B6F1222468.roa
File: A7A81106977111EDA214F1B6F1222468.roa (raw, json)
Hash identifier: hzp6L/unb2Wa15sjrHrlcrOEaqaynygrCk++OSbsUPk=
Subject key identifier: A2:3B:33:B8:AC:32:71:51:C9:BD:5E:47:4C:D7:15:F0:19:A1:FC:99
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0B82
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A7A81106977111EDA214F1B6F1222468.roa
Signing time: Wed 18 Jan 2023 20:49:52 +0000
ROA not before: Wed 18 Jan 2023 20:49:46 +0000
ROA not after: Sat 18 Jan 2025 20:49:46 +0000
asID: 209242
IP address blocks: 154.16.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2946 (0xb82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 18 20:49:46 2023 GMT
Not After : Jan 18 20:49:46 2025 GMT
Subject: CN=63c85b70-c75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:c0:3f:3e:66:69:35:ca:1d:21:91:5c:06:
6b:b7:78:98:3b:47:9f:3c:45:6c:15:b4:ca:94:75:
90:34:6b:48:68:2e:59:b1:bd:e5:24:81:a4:42:e2:
f3:69:e4:cb:20:eb:10:43:03:40:cf:15:0b:96:be:
97:51:54:35:71:43:61:fc:77:ef:7a:5c:a9:30:06:
e5:87:19:28:8c:8e:9d:16:1d:9c:61:f5:f4:74:b3:
f9:7a:8e:1f:a0:f1:c1:65:84:66:a4:03:c1:89:ab:
0e:a8:c4:76:ef:91:8b:e9:6b:3d:8f:f9:35:ba:f4:
fa:50:b1:25:4d:58:61:ad:bc:7f:4b:ab:9a:68:67:
d1:a0:01:2e:d6:01:73:f1:ea:87:30:84:65:29:55:
ee:05:ec:d2:d2:cd:24:fc:15:1b:60:d0:54:53:56:
c7:92:ca:f3:7b:5d:14:02:69:f8:e5:bf:b4:28:60:
93:63:61:09:ca:a4:70:4b:b1:a6:85:65:79:08:25:
47:8f:65:2c:6c:8e:bb:36:d0:d1:a3:65:b4:e2:0a:
95:d7:12:43:25:37:d5:69:a7:a8:0c:eb:09:47:d0:
ad:8a:35:ee:c8:d1:76:8f:a6:75:fa:73:d1:46:84:
c3:31:ea:2f:a6:71:94:25:7c:fb:d5:f3:5a:37:31:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3B:33:B8:AC:32:71:51:C9:BD:5E:47:4C:D7:15:F0:19:A1:FC:99
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A7A81106977111EDA214F1B6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.91.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:18:7c:18:bc:17:16:35:d1:4e:c6:dc:86:86:68:c0:c3:66:
15:06:a1:14:d6:3c:51:2e:b1:9b:3b:fd:52:bb:d7:c5:61:c3:
e7:66:96:21:fb:d8:f0:3b:86:0b:1d:cf:42:d9:b4:46:a8:dd:
b0:04:60:94:01:a4:fb:05:cd:ad:ab:58:6c:9b:b9:f5:86:14:
b0:88:0e:77:7b:71:ee:81:e4:ac:a4:3e:b2:7d:5b:4c:d4:70:
92:b3:4c:bc:a4:3f:a5:06:e4:6a:59:ae:1f:c8:e3:0c:60:42:
62:79:d6:d5:58:0e:9e:61:1b:4c:62:da:39:67:6a:29:88:4a:
f3:31:d8:1c:77:d4:84:17:8e:69:8e:f2:01:3c:18:61:b4:52:
2b:2e:99:2f:8f:36:e7:61:19:06:71:42:cc:95:de:bb:31:65:
b8:de:d9:a6:0f:18:49:6f:00:a1:64:c9:2c:ac:38:33:55:3c:
81:02:17:03:38:d5:ea:c8:ae:16:9e:85:28:62:e1:74:4f:b7:
f7:77:d1:03:2d:10:d0:ba:f6:ab:ba:8c:f1:59:f6:f9:75:2f:
3e:fe:57:62:a3:3d:12:6f:e6:19:30:ad:cd:6e:99:b9:87:f2:
24:08:00:21:63:e7:87:17:a8:be:fc:cf:05:ed:d1:04:af:49:
48:21:c7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org