Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B7CFCD60E7FB11EC8E346AD7F1222468.roa
File: B7CFCD60E7FB11EC8E346AD7F1222468.roa (raw, json)
Hash identifier: JqE0xmM9QjZjZzBRfZ6+ykNnftdp3na9ASdmyGe04zo=
Subject key identifier: 0E:07:12:CA:2D:BF:BC:69:49:EB:7F:2A:41:69:1B:4E:CE:7F:FB:6C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0887
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B7CFCD60E7FB11EC8E346AD7F1222468.roa
Signing time: Thu 09 Jun 2022 13:54:45 +0000
ROA not before: Thu 09 Jun 2022 13:54:40 +0000
ROA not after: Sun 09 Jun 2024 13:54:40 +0000
asID: 40676
IP address blocks: 154.16.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2183 (0x887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 9 13:54:40 2022 GMT
Not After : Jun 9 13:54:40 2024 GMT
Subject: CN=62a1fba5-3649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b9:81:b0:66:24:fd:df:fc:69:93:3c:83:c6:
bb:08:d6:69:58:00:23:bd:86:af:91:88:e2:ff:4e:
ba:cf:81:81:9f:44:8c:00:04:38:bb:70:55:ae:9b:
7a:2d:ff:8c:59:f7:29:e2:4d:87:76:5a:26:9d:0c:
67:d1:ed:ee:2f:fc:b2:68:a5:ba:75:a2:78:73:73:
d5:5d:9b:50:27:eb:a7:50:d1:c8:00:d5:b7:2d:6a:
83:e5:70:28:cc:b4:f4:00:8b:b7:fc:b6:a1:fe:14:
2b:85:0b:af:30:56:28:22:3e:30:33:5b:14:f3:32:
23:e1:6e:8b:28:a4:13:a7:ae:dc:a7:06:88:3b:f9:
2a:5d:b4:43:ba:ca:13:41:36:f6:2c:92:32:bf:49:
56:31:f5:45:d6:32:8f:8c:14:ba:d9:2f:73:c9:e5:
ce:f4:46:b7:9b:5a:ef:68:18:bd:b7:0c:27:6a:67:
1b:29:f2:35:b2:fd:e6:09:b7:7e:7d:8c:6b:a2:25:
5d:6b:09:5b:88:7c:57:8a:c7:4c:49:ba:a1:f8:88:
64:f0:f9:6e:f6:9d:99:ac:e5:d4:f9:16:08:1c:65:
a1:0b:e5:54:be:c2:ef:9f:60:16:65:f9:d8:5a:56:
ba:13:0a:2c:3a:94:5b:ed:e8:ec:d9:85:99:b8:1f:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:07:12:CA:2D:BF:BC:69:49:EB:7F:2A:41:69:1B:4E:CE:7F:FB:6C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B7CFCD60E7FB11EC8E346AD7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.211.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c3:47:3a:e0:9f:44:38:34:b8:17:e0:38:2b:01:94:19:e5:
c3:75:29:f0:35:b9:03:f9:af:d6:66:00:0e:18:56:c2:07:7e:
9c:f7:48:4b:72:c3:b2:e3:be:5f:69:98:f0:fd:b6:42:5e:2a:
01:db:23:ca:ae:4f:d1:89:bf:ed:64:1e:d3:33:f3:af:4f:72:
e7:9b:ac:a1:16:f3:a0:ad:2d:5d:83:1b:92:2a:99:24:94:a4:
33:22:10:c9:48:7c:ba:b4:4c:47:44:fc:96:d8:3b:83:da:0e:
11:35:b8:7a:30:9f:d6:c4:b0:cb:e7:b0:5e:07:27:29:bd:39:
4f:b8:cc:9b:e8:27:da:67:a9:bd:a1:3e:10:0a:58:f6:9d:64:
a9:a3:67:3e:94:f4:f8:55:15:54:1e:40:bd:1b:8b:d2:dc:e0:
03:fd:ae:72:0a:b4:9d:65:a4:f2:e8:42:31:1c:75:a0:6e:4f:
82:66:05:44:77:7c:ba:0e:14:60:ea:c3:13:13:5f:71:79:bd:
5d:17:6c:1c:2f:94:fc:73:86:2f:d1:d7:b6:8f:ff:7b:6a:f5:
e3:a0:c9:56:f1:71:5e:3f:64:11:97:e8:ed:a5:2c:15:15:6c:
81:b2:43:d6:e4:95:80:6b:23:c3:a4:fd:be:5c:2b:1f:96:7b:
6f:dc:5d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org