Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D4B201D05BB611ED97E015A4F1222468.roa
File: D4B201D05BB611ED97E015A4F1222468.roa (raw, json)
Hash identifier: 7tPGspXbHTky7qR5L4DMLqcsFI67CMKdiSpgOWTOuJI=
Subject key identifier: 15:6D:6C:75:97:9B:0B:62:24:87:A6:2F:2B:C0:CE:E7:28:DA:4B:19
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0A98
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D4B201D05BB611ED97E015A4F1222468.roa
Signing time: Thu 03 Nov 2022 20:33:53 +0000
ROA not before: Thu 03 Nov 2022 20:33:47 +0000
ROA not after: Fri 03 Nov 2023 20:33:47 +0000
asID: 49581
IP address blocks: 154.16.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2712 (0xa98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 3 20:33:47 2022 GMT
Not After : Nov 3 20:33:47 2023 GMT
Subject: CN=636425b1-72f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:51:5c:69:c9:33:56:23:1c:7b:43:b6:45:
42:b1:dd:e5:85:4b:cd:09:7c:16:62:0a:7b:f6:8e:
1e:35:e7:17:22:9d:e6:3b:15:0e:fb:ab:81:40:d9:
bd:c1:6e:eb:90:e2:64:73:4f:e1:2e:b9:1a:55:e4:
be:ab:e4:23:f0:c6:23:49:7f:b6:e1:94:b6:9a:8e:
2b:7b:f2:db:74:ca:7b:c1:77:a3:b0:41:78:2f:90:
47:8f:50:03:48:ac:75:37:fa:61:7d:83:59:2d:fb:
b7:4a:27:98:7e:13:fd:2d:ce:c8:fb:a8:69:b5:8b:
d5:3b:5d:c4:6b:9d:a8:85:23:23:6c:46:f6:0f:4a:
1b:37:bb:e1:29:a2:cf:fd:1c:89:fa:4b:5e:f3:1e:
01:65:f0:4d:c1:ea:4f:b7:3c:30:30:22:1c:d2:4d:
76:db:3a:04:d5:ff:fa:d9:b7:39:8c:76:58:c5:90:
c7:23:e7:1b:bc:d0:c4:3a:f3:50:04:e0:68:92:ff:
14:c5:c1:c3:30:e7:6b:ab:58:3d:b0:4b:c0:ef:36:
7e:cb:f2:ce:5d:e3:68:b9:d2:56:55:53:69:1a:8b:
58:6e:2a:af:3d:68:79:ec:eb:a2:0c:63:ce:48:76:
9a:7e:60:22:98:86:f9:da:35:9c:c1:08:d5:f0:4b:
86:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6D:6C:75:97:9B:0B:62:24:87:A6:2F:2B:C0:CE:E7:28:DA:4B:19
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D4B201D05BB611ED97E015A4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.250.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:29:63:f7:2a:bc:47:f3:f8:02:81:65:58:f9:c8:4f:45:8b:
ff:35:11:2a:58:21:20:55:fb:27:a8:98:23:33:53:10:ab:ca:
13:e0:fb:e9:c8:0b:22:2b:70:ef:7b:86:79:78:62:b3:7a:ef:
85:9a:3e:18:53:22:17:24:d8:95:0c:93:9e:0f:b4:ce:47:7a:
86:8f:9d:53:ec:33:bd:86:71:d2:1c:5e:56:c2:b5:02:f7:1b:
7d:9b:91:c6:ae:f5:4f:a8:3f:03:0b:9d:ee:70:e6:5c:22:68:
48:fc:50:fd:df:6f:31:b6:9f:4b:0f:50:aa:4f:7f:18:e2:0b:
39:4a:cc:55:fd:bf:7a:27:f9:41:33:79:96:6a:27:04:7a:f8:
d3:6e:3f:13:a4:9d:62:28:fc:e3:4f:d7:53:93:b7:2b:b0:d6:
7c:08:dc:a8:9e:8a:c2:99:e2:f7:bb:97:8d:fa:f5:ae:a3:bf:
87:7e:b7:2e:da:39:65:ad:ca:99:fa:63:8d:7b:de:e6:77:ae:
45:8a:94:89:c0:50:5d:4d:15:07:68:2e:67:be:0e:f9:02:ec:
3a:06:ce:50:e4:56:43:ba:8b:fb:36:01:0c:72:2f:2e:b7:f0:
73:e2:03:52:b3:1c:c8:9b:db:5b:c8:d8:48:c5:b4:e3:23:94:
07:fb:f9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org