Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AEB919425F7A11EDA7AA7F80F1222468.roa
File: AEB919425F7A11EDA7AA7F80F1222468.roa (raw, json)
Hash identifier: RiIJrXoQXoZbEdUhkfOx/hn64SNeQ0LLFxx4rcIX8FM=
Subject key identifier: D4:0F:2E:B2:20:84:E9:42:B6:F0:CA:68:46:BE:D5:4D:23:2B:A1:F8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0AA9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AEB919425F7A11EDA7AA7F80F1222468.roa
Signing time: Tue 08 Nov 2022 15:33:24 +0000
ROA not before: Tue 08 Nov 2022 15:33:19 +0000
ROA not after: Wed 08 Nov 2023 15:33:19 +0000
asID: 33387
IP address blocks: 154.16.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2729 (0xaa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 8 15:33:19 2022 GMT
Not After : Nov 8 15:33:19 2023 GMT
Subject: CN=636a76c4-e778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:29:3a:51:8e:04:29:24:1e:f5:29:0a:7e:
bf:22:87:86:81:ea:34:3f:28:9b:95:f3:c8:63:d6:
9c:f2:c9:ca:c5:b1:7d:9a:a5:58:d1:a4:c3:7c:1c:
a0:ca:f9:95:8b:fe:b6:7d:25:16:34:57:e9:5e:e8:
6f:06:f3:8c:10:2d:06:4f:51:ab:96:d3:47:89:f9:
5b:0e:cb:1c:ba:85:50:1f:f4:19:42:13:2d:f3:96:
c2:25:cd:bb:16:af:46:7c:60:38:76:f3:34:04:4a:
a5:ed:35:f3:6d:7f:c9:d9:3a:da:41:e5:93:1d:c2:
77:0c:72:c1:c1:5b:48:5d:de:91:e4:52:c0:0b:b4:
41:ba:46:a0:11:91:ec:ef:08:2d:f5:a6:a4:53:68:
2c:1c:48:a7:03:20:77:ec:1c:19:7d:2d:b3:f9:13:
df:67:93:86:d7:d9:66:77:c8:fe:6f:3f:10:8a:b1:
91:8d:9f:7c:86:48:96:d7:a2:a4:79:5c:11:8a:0b:
be:01:04:49:d1:2e:d8:97:bc:18:36:84:20:6a:fd:
1a:58:2c:a4:df:8f:3c:26:cc:72:18:bb:43:27:bc:
6c:93:fb:7a:ca:60:11:fb:4f:58:27:a0:11:d3:2c:
f1:a8:8e:98:25:79:97:8a:16:4f:7e:1e:a0:ab:44:
3b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0F:2E:B2:20:84:E9:42:B6:F0:CA:68:46:BE:D5:4D:23:2B:A1:F8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AEB919425F7A11EDA7AA7F80F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.52.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b4:db:53:0d:87:c6:1d:38:5c:7d:9f:a7:e8:9b:05:eb:cb:
90:7a:23:54:1e:2d:44:ca:d0:53:8a:fb:40:0f:2a:ca:48:fa:
ec:15:76:7b:36:24:ee:e6:fe:50:ff:09:b6:dd:58:6f:42:2b:
81:96:61:00:b4:58:56:49:30:6d:24:e6:71:da:4a:b8:cf:3e:
60:ec:89:b9:d4:12:0b:7f:4a:c6:ee:28:a7:1b:11:dc:e8:e1:
f0:55:b7:5a:37:b6:31:e1:06:6b:7c:ef:cc:3a:da:c2:b7:bd:
80:a2:64:17:f0:f7:80:fc:0f:33:31:5f:00:86:3d:bf:e7:2d:
c0:39:99:0f:5f:87:f1:31:6c:4e:91:01:63:dd:56:f2:41:2c:
29:7e:3a:c3:df:4c:2d:74:bd:2f:ec:a7:2d:c3:a6:ba:be:97:
c8:cb:4b:42:73:68:76:c0:62:46:98:cd:8a:77:9a:ef:b5:de:
07:16:34:5b:b9:8f:0e:0a:04:6c:33:03:64:7d:a6:89:4e:49:
ca:41:ad:12:24:2a:a9:c7:ea:cd:de:4c:53:18:ea:03:19:74:
de:78:5b:ee:47:44:13:8c:53:b4:b4:9e:b1:8f:ae:26:3e:82:
76:31:4b:4e:ac:f6:77:3b:47:cb:7c:36:7b:2a:c4:48:8c:e4:
e5:b8:50:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org