Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B50BBA786AAD11ED99B98CBFF1222468.roa
File: B50BBA786AAD11ED99B98CBFF1222468.roa (raw, json)
Hash identifier: rKDWs9EDLmSKmBx8s3ZbH0tCR2qqhB3E/aEgUp9Kcq0=
Subject key identifier: 4B:02:D7:77:82:9D:BA:2B:3F:68:96:80:41:08:E0:E7:28:C1:52:04
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0AC0
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B50BBA786AAD11ED99B98CBFF1222468.roa
Signing time: Tue 22 Nov 2022 21:36:22 +0000
ROA not before: Tue 22 Nov 2022 21:36:18 +0000
ROA not after: Fri 22 Nov 2024 21:36:18 +0000
asID: 207459
IP address blocks: 154.16.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2752 (0xac0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 22 21:36:18 2022 GMT
Not After : Nov 22 21:36:18 2024 GMT
Subject: CN=637d40d6-cdd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5b:00:15:51:3c:c7:c1:3d:6e:72:23:35:e5:
33:7d:57:a9:55:31:ac:2f:0a:24:54:d6:66:2b:51:
5d:1c:ae:a9:55:b0:24:53:80:59:38:46:65:d8:5d:
7b:b6:83:3d:38:55:04:30:f6:dd:33:13:db:6f:9e:
9c:c9:7b:ed:cd:33:d2:ff:ab:81:5a:d6:1c:bc:d4:
ac:80:ce:48:d2:2c:6c:db:75:c3:46:b9:8e:07:46:
22:b1:c3:9d:61:86:01:ec:be:d4:a4:7f:57:39:68:
d3:98:12:c7:36:ca:0c:b7:08:93:19:19:e5:f7:f6:
05:04:05:0b:c5:de:f3:25:c4:27:0b:ad:e8:d0:c2:
79:9a:93:f0:50:47:27:d5:72:ae:b9:c2:05:1b:60:
5d:e6:68:6d:c0:c1:f3:ad:c8:10:db:f3:b2:5a:e2:
6c:22:ad:7c:04:54:b9:98:27:b6:ad:54:bf:ba:46:
9f:1f:b9:4a:c1:f9:9c:36:51:d8:9a:f1:22:07:2c:
b6:fd:93:e2:08:ea:12:3c:9b:d7:73:63:62:c6:d2:
ca:52:a6:9c:bc:4c:81:68:a5:02:bf:9b:7a:c2:3f:
ac:b2:80:ac:ae:50:82:4e:f2:23:58:6a:0c:ea:65:
8f:24:a1:54:3a:d8:b2:ae:c8:46:a6:53:23:07:68:
b9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:02:D7:77:82:9D:BA:2B:3F:68:96:80:41:08:E0:E7:28:C1:52:04
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B50BBA786AAD11ED99B98CBFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.9.0/24
Signature Algorithm: sha256WithRSAEncryption
66:a2:34:3b:3f:c2:26:65:cf:5b:22:07:10:54:db:2e:b3:fb:
79:5c:40:69:7a:06:20:7f:cc:f2:6c:f5:ce:17:77:17:56:ab:
56:83:cc:13:11:98:6c:b4:d4:07:57:4a:20:f8:03:45:0f:6e:
44:96:e0:ed:29:e0:58:3b:af:87:80:b5:5c:f5:09:be:9b:24:
10:19:a8:f7:99:06:00:78:00:32:c9:04:59:c3:1e:77:86:94:
1e:60:b2:5c:cf:0d:ff:88:c9:da:08:f5:b5:7a:34:33:62:dc:
9f:c7:b7:da:50:33:9e:c9:82:47:64:7e:75:e9:4b:6e:8c:19:
c4:27:23:2a:a0:37:06:82:1d:f6:cd:e5:fb:e7:33:4b:79:01:
b6:85:17:64:c1:ca:be:67:cb:d2:57:3b:08:b9:d8:43:3c:26:
1d:a0:ce:05:e5:93:09:4c:21:26:00:62:19:f4:d5:79:fd:29:
65:18:6e:47:e1:d7:3b:a5:a5:bf:16:0c:cf:79:cb:a0:c6:22:
7d:f7:1f:56:ae:cd:82:14:4d:45:c9:17:85:0a:5c:fa:38:b1:
11:62:ad:cc:b4:a3:df:01:39:24:ba:86:ea:a3:f3:71:4a:3c:
76:47:cd:a9:37:c7:68:89:e1:0b:a1:74:0d:02:c4:a9:9f:a7:
fc:d1:d7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org