Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BFFA057CB43911EDA43F8A9FF1222468.roa
File: BFFA057CB43911EDA43F8A9FF1222468.roa (raw, json)
Hash identifier: Po5KxNFK8zkkgWx+0jqgDvv+azkiMHeua5LST3ftmAY=
Subject key identifier: 17:BB:B5:10:8A:2C:A6:FB:E1:ED:53:7B:99:E8:3C:E1:10:15:49:A7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0BF3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BFFA057CB43911EDA43F8A9FF1222468.roa
Signing time: Fri 24 Feb 2023 11:52:45 +0000
ROA not before: Fri 24 Feb 2023 11:52:41 +0000
ROA not after: Sat 22 Feb 2025 11:52:41 +0000
asID: 61317
IP address blocks: 154.16.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3059 (0xbf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 24 11:52:41 2023 GMT
Not After : Feb 22 11:52:41 2025 GMT
Subject: CN=63f8a50c-2f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d4:9c:54:20:04:b0:c2:37:90:d4:5d:06:48:
52:a0:32:7b:f5:3f:b6:6c:64:9c:69:bb:fd:ca:b7:
50:22:5b:fd:b5:57:88:5e:41:d1:9a:bb:de:df:a8:
54:b5:70:dc:22:15:de:d5:6b:3e:71:a4:73:47:88:
88:b4:42:09:98:16:00:e3:7a:74:c7:0e:79:ff:78:
ef:4e:5c:70:c3:d0:e9:24:59:e2:6d:f0:b2:b0:16:
65:ae:84:69:2b:72:f0:6f:08:ff:10:32:ed:f6:b2:
58:50:86:63:63:08:16:3e:c3:45:3d:59:95:10:72:
2b:e8:ba:02:5a:d9:a8:1e:0c:71:be:1a:7c:d0:70:
07:89:cc:06:5c:2c:03:9c:8a:db:e9:00:20:43:d4:
e8:6c:7d:48:53:5a:85:8b:b5:5e:99:d0:c9:ae:cf:
68:a8:af:73:d8:be:ad:22:66:8b:1e:36:f9:aa:90:
18:5c:58:fe:cc:f4:c6:72:22:68:ea:93:4a:11:ee:
77:31:38:df:00:07:c0:89:fe:dc:e0:90:ad:67:d5:
07:f3:ef:de:7d:ab:10:ec:54:25:99:cc:c9:2b:ce:
b5:c8:17:89:4b:38:75:5f:e7:8c:55:3b:fd:97:ef:
bb:43:fb:4e:3a:ce:ad:32:d0:17:77:ce:29:c3:c4:
e7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BB:B5:10:8A:2C:A6:FB:E1:ED:53:7B:99:E8:3C:E1:10:15:49:A7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BFFA057CB43911EDA43F8A9FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.22.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a6:30:03:86:07:d8:c7:17:86:7f:44:da:4e:c4:ce:2c:48:
35:86:65:87:17:06:5a:0b:bb:fd:4d:bd:35:e6:29:f6:13:da:
14:d6:37:ff:ed:75:5d:4f:8e:40:7f:e1:5d:4e:1b:ba:25:07:
e8:f3:24:34:81:61:3e:8e:bb:a3:7b:84:e5:f7:53:67:72:e7:
08:c2:21:f1:1e:4e:ed:47:06:d5:bb:fb:90:41:3b:5e:82:b8:
ed:d9:d7:70:38:a1:de:52:79:b9:4a:81:42:c7:df:e5:79:0a:
71:5e:40:05:b8:ae:4e:93:39:09:a5:f5:9e:27:e5:43:fd:09:
0d:b6:c4:b4:bd:39:60:11:b4:0a:57:bc:d2:c4:6f:c5:8a:96:
b1:06:ca:33:92:8f:c2:37:9e:67:91:4a:a1:05:0d:56:3a:af:
84:77:f3:f9:75:52:92:90:fd:0f:d7:23:9a:ad:5c:bc:42:73:
58:ce:0c:32:b6:66:4e:60:8c:c2:c7:93:c7:e8:92:2c:de:db:
87:8e:79:af:6a:16:5b:9b:7b:73:b1:8b:c1:93:aa:3d:62:90:
4e:b1:a9:d1:0c:62:3c:a4:a3:95:c1:bf:76:93:34:f8:ad:aa:
1a:15:8e:9e:5f:2c:4f:fb:f4:80:5b:50:32:1b:62:9a:b2:90:
bf:53:01:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org