Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BE8B58CAB43A11ED8B8EABA2F1222468.roa
File: BE8B58CAB43A11ED8B8EABA2F1222468.roa (raw, json)
Hash identifier: Fz2MquKluqfIXXSD5IEVUojTdC2l3cj0vjZH2K+SHxo=
Subject key identifier: D1:96:5A:C6:94:D7:05:0B:C4:BC:EE:54:34:29:3F:9E:92:22:12:69
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0BF9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BE8B58CAB43A11ED8B8EABA2F1222468.roa
Signing time: Fri 24 Feb 2023 11:59:52 +0000
ROA not before: Fri 24 Feb 2023 11:59:48 +0000
ROA not after: Sat 22 Feb 2025 11:59:48 +0000
asID: 61317
IP address blocks: 154.16.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3065 (0xbf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 24 11:59:48 2023 GMT
Not After : Feb 22 11:59:48 2025 GMT
Subject: CN=63f8a6b8-812e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:e7:bf:d7:01:6e:d1:59:2c:b8:0b:43:4f:
04:43:55:00:28:d7:8f:55:ea:cb:2b:e4:2d:b5:ac:
fe:ee:4d:e7:72:1c:9f:23:0e:ed:66:dc:a4:68:60:
22:da:69:7f:48:67:1e:7f:7c:1b:e8:45:82:5c:e6:
15:e6:30:46:3b:58:7a:e8:7e:9c:d6:36:9f:89:13:
2c:c2:ab:ae:46:2b:91:27:91:e4:73:46:0e:a4:69:
54:1d:95:5d:43:70:85:0b:f4:a6:94:97:ae:6c:9e:
45:6b:00:e5:5c:85:17:5f:49:16:f4:9b:5a:c0:47:
f8:62:54:94:81:c5:6d:ee:cf:fb:24:d6:82:c0:c0:
a0:98:92:7d:93:a4:2e:1e:71:9f:9b:ac:de:71:da:
ad:93:79:bd:a1:b8:ce:eb:94:5b:3d:71:b6:2d:e2:
64:a1:df:a4:d6:c5:57:1d:98:f7:b9:4c:27:e2:b7:
2a:2e:58:28:fe:02:b6:58:d6:89:71:69:67:9b:85:
7f:ca:b5:9c:e4:5e:b7:2e:d8:86:1a:b8:b6:5d:27:
0d:2d:6d:db:cd:d1:0e:66:11:15:ca:fa:2b:32:76:
ec:35:d1:f1:29:f1:c9:51:e3:26:dd:e6:f5:70:80:
ad:07:be:5f:00:87:2a:3b:a5:17:c6:41:8b:81:9a:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:96:5A:C6:94:D7:05:0B:C4:BC:EE:54:34:29:3F:9E:92:22:12:69
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BE8B58CAB43A11ED8B8EABA2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.27.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:cc:75:27:36:a0:0c:bc:fe:83:24:09:42:a7:fe:0d:d6:12:
eb:ff:ff:22:42:12:4e:7e:81:71:7f:a6:5f:0c:ba:44:70:09:
d9:da:2b:9e:1a:d2:50:9a:d1:9b:51:69:46:86:84:70:24:1b:
ad:c3:e4:0d:85:8a:19:47:26:5a:c5:c0:0e:5b:b0:7e:76:fd:
0d:dc:d8:c8:2d:7e:cc:8a:32:8a:ff:3e:ba:8a:e2:f3:43:e1:
ff:37:3b:14:c1:05:b7:15:13:de:de:9c:70:c4:60:c8:7c:b2:
b9:08:20:d4:ae:17:8f:ca:7a:d2:3b:11:9e:78:76:27:67:e8:
eb:9c:62:26:1b:63:01:2e:71:c2:d6:d7:e1:d4:ee:5b:1c:5d:
aa:7c:a6:89:33:39:0f:64:45:a9:16:91:11:84:ed:66:0d:11:
05:d8:c2:4c:08:34:38:e4:ef:bd:3d:33:ff:68:80:e0:5c:f9:
2f:f1:9d:71:9d:4b:1c:d0:60:1f:d0:28:9a:00:93:09:77:3e:
1f:4b:64:fc:ea:51:6f:6c:2c:5e:d9:14:24:c5:66:6b:11:82:
d1:3e:c4:1c:0d:a1:e7:aa:0e:71:ce:a7:de:7f:4c:aa:08:fb:
c6:08:4b:07:b8:be:52:c7:03:44:17:73:35:63:ac:41:a3:b8:
87:6b:21:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org