Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B4CCECA6B43D11EDA5DD7AABF1222468.roa
File: B4CCECA6B43D11EDA5DD7AABF1222468.roa (raw, json)
Hash identifier: OBcOdaHjtbLp3QHJ39cpNmwsnQeen/BCPBAGtETHxsU=
Subject key identifier: 61:FE:B5:84:AD:0E:7F:36:77:A7:76:5F:74:64:0A:68:91:F2:5F:F7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C13
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B4CCECA6B43D11EDA5DD7AABF1222468.roa
Signing time: Fri 24 Feb 2023 12:21:04 +0000
ROA not before: Fri 24 Feb 2023 12:21:00 +0000
ROA not after: Sat 22 Feb 2025 12:21:00 +0000
asID: 61317
IP address blocks: 154.16.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3091 (0xc13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 24 12:21:00 2023 GMT
Not After : Feb 22 12:21:00 2025 GMT
Subject: CN=63f8abb0-63a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:47:a2:01:10:2c:31:f5:41:6d:0b:53:9b:21:
a0:6b:8e:91:d9:ce:5f:27:e2:ec:7a:2e:97:2a:64:
fd:4c:a7:eb:e4:b4:9a:95:f2:bc:ca:17:3e:3c:7e:
6f:b3:62:cc:5a:8f:13:32:91:32:52:b9:ef:5f:bc:
44:94:12:e3:68:0b:de:a7:56:b9:1a:de:16:9d:47:
15:0b:59:9c:02:f2:de:de:44:db:07:01:82:6d:6f:
2b:a8:62:c3:d3:de:7d:67:fe:1c:99:d5:98:a8:00:
7c:b9:9f:d4:09:66:75:d8:bb:96:b2:0b:87:c8:97:
23:98:08:b9:0a:07:c6:ef:b1:d9:70:8e:1b:67:89:
45:01:56:43:eb:40:3d:d7:65:cf:40:a2:f4:27:bb:
06:c3:35:22:ca:b3:53:18:76:24:93:e0:cb:7c:bc:
a4:8f:dc:58:ff:59:ab:33:80:0c:34:a0:b1:c8:92:
00:45:33:47:0f:c8:21:49:9e:c7:5e:56:70:a9:65:
fa:cd:31:df:4b:30:f8:54:34:3d:a3:03:1e:b0:d7:
81:bd:76:a0:e7:ab:f7:ac:be:04:73:2f:cb:25:ea:
12:09:bc:be:f3:7e:da:46:53:8c:be:48:e1:7a:c7:
cc:dd:4f:5f:00:78:6c:a6:c2:ef:cd:f3:59:eb:fa:
e0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FE:B5:84:AD:0E:7F:36:77:A7:76:5F:74:64:0A:68:91:F2:5F:F7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B4CCECA6B43D11EDA5DD7AABF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.47.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:48:05:0a:a5:e4:cb:7c:55:4f:48:5b:60:a7:be:33:19:36:
7b:6c:32:bb:00:47:9f:44:60:4f:a8:0f:0a:58:57:4d:36:e6:
0e:1e:d0:f2:62:3b:13:fa:57:73:70:4d:1e:c3:b7:f2:0a:a3:
59:77:78:8f:d6:2d:1e:6e:de:11:34:8f:bb:73:e0:e1:ea:08:
d5:79:f7:65:8d:02:2f:c8:4e:73:c8:a9:02:ca:99:0e:31:e1:
23:ed:e6:26:8c:18:00:e3:bf:e9:d3:1f:78:06:a9:af:79:5b:
b1:3e:f3:be:e2:ee:f8:05:a5:57:e1:cb:61:63:3c:62:6c:d6:
a6:c1:8a:f4:10:f8:e4:29:b4:39:94:70:44:88:54:e8:e2:1b:
8a:4a:5e:32:5b:37:67:43:f0:76:3e:7e:c7:ca:74:7f:06:df:
ac:51:42:be:43:5b:4f:9b:95:09:1a:0b:f2:5b:44:5c:a7:5a:
98:08:85:5f:5f:40:8f:fd:2b:61:3b:7d:da:c5:7c:01:2d:38:
f6:32:f2:21:b6:1a:b4:29:de:21:40:8d:2d:b5:4f:a4:50:c4:
50:97:58:cb:49:a2:93:37:80:53:14:66:82:55:85:bb:d4:27:
99:ca:2e:5a:69:e2:86:64:d4:e6:0b:14:8c:88:ff:f6:0f:05:
04:d4:37:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org