Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F9631520E7FB11ECBB3532D8F1222468.roa
File: F9631520E7FB11ECBB3532D8F1222468.roa (raw, json)
Hash identifier: i9Fm9xgR2o6XY/X2IUAnIkkR7/BvmcmhM4puPDtWZn8=
Subject key identifier: 59:E2:12:3A:E7:E6:F3:65:5D:EC:E2:01:31:C4:79:34:FC:58:66:77
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 088C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F9631520E7FB11ECBB3532D8F1222468.roa
Signing time: Thu 09 Jun 2022 13:56:35 +0000
ROA not before: Thu 09 Jun 2022 13:56:31 +0000
ROA not after: Sun 09 Jun 2024 13:56:31 +0000
asID: 40676
IP address blocks: 154.16.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2188 (0x88c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 9 13:56:31 2022 GMT
Not After : Jun 9 13:56:31 2024 GMT
Subject: CN=62a1fc13-093b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:17:11:b6:64:2e:63:e4:58:8b:b0:06:0f:
ce:b9:07:ef:0c:6b:0e:ec:3d:a8:2a:59:c1:02:d9:
66:0d:a0:52:e4:b3:13:21:51:0a:0e:6f:b0:27:8e:
1d:4b:16:cc:8d:dd:2e:42:4c:d4:55:75:b7:14:11:
c5:c8:87:b3:bb:c2:d8:c5:a9:b9:0a:87:9f:52:f9:
35:e9:7d:76:b9:b4:2f:ba:18:89:b7:66:13:ca:75:
b2:eb:c3:8b:71:a1:31:b5:4b:79:38:86:a5:37:52:
c7:fc:fa:c3:46:c6:fd:aa:a6:49:0c:90:1a:f6:97:
22:28:62:4e:9c:c6:a4:83:61:72:b5:d2:b1:e8:33:
21:63:29:94:64:b8:99:85:6d:a2:55:0b:0f:59:94:
fe:5a:b6:82:a2:6a:d3:ce:ff:87:69:64:d9:06:42:
38:96:1f:6f:19:f7:e1:7e:98:b3:9d:92:fc:62:56:
a3:17:5c:f5:c3:84:33:5a:63:d0:e0:94:cf:80:25:
b8:45:a8:ac:28:a2:d9:d6:75:0f:9e:1a:6b:3e:2d:
2d:fd:62:b1:bd:7c:d8:53:d8:41:44:5f:6c:cc:89:
96:28:95:21:50:d2:44:ae:ac:76:63:90:6b:4b:77:
b9:b5:2a:44:c8:d5:31:c7:09:33:e5:88:19:71:a5:
4a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E2:12:3A:E7:E6:F3:65:5D:EC:E2:01:31:C4:79:34:FC:58:66:77
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F9631520E7FB11ECBB3532D8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.152.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a8:b1:0a:9d:d8:c3:e0:3c:f8:1c:9d:62:10:b3:53:da:05:
45:92:52:d1:8b:2a:8a:66:38:0d:7a:27:fd:a6:4c:9a:a7:32:
27:f3:f3:86:9f:20:d7:17:8b:db:62:71:f8:a2:8e:dc:9c:d8:
1b:0e:53:03:ab:eb:96:ce:45:5c:1c:a1:6a:1c:c9:d3:1b:3e:
80:29:d7:4f:7d:bc:4e:6d:22:0a:85:5c:5c:67:47:4c:b3:22:
01:d1:37:cf:17:e1:e5:d4:c8:25:33:64:38:0f:96:14:99:5f:
95:58:19:51:c8:de:f7:13:74:ed:82:72:57:37:dd:78:13:05:
0a:e2:9f:a5:31:f6:58:29:f6:9b:f2:cf:58:20:d3:38:7e:2e:
e0:33:08:82:72:c6:5d:28:d0:5e:cd:b6:68:59:da:11:95:ec:
79:6d:85:83:bc:ef:84:bf:64:13:0b:9d:e4:a5:f2:13:27:27:
b5:e3:e1:86:5a:33:44:b3:86:d8:35:72:5e:4a:1f:13:38:a5:
f7:e9:c9:8a:29:a2:c6:7c:49:9c:d2:c1:aa:35:f5:03:c0:d8:
58:de:29:16:77:be:00:d6:a3:08:c6:2a:42:59:b9:8c:0f:b0:
8a:80:70:61:68:9f:27:7c:72:26:e5:05:3a:02:d3:46:6f:08:
18:f3:0e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 2 08:00:49 2023 by rpki-client on console-fra.rpki-client.org