Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/1545DB06B5BB11EC9D4192935A40D577.roa
File: 1545DB06B5BB11EC9D4192935A40D577.roa (raw, json)
Hash identifier: LKeses0+kq7GgzWn6N8EejEr/pZLcAAbh+NLlfFbQ30=
Subject key identifier: 41:D1:D7:5E:23:42:10:BB:0B:2C:4E:36:57:AB:0B:C9:02:7B:3B:44
Certificate issuer: /CN=F368B07FAR/serialNumber=AEFB349D234C6C66C424925BEE10299DAAF0B9BC
Certificate serial: 0687
Authority key identifier: AE:FB:34:9D:23:4C:6C:66:C4:24:92:5B:EE:10:29:9D:AA:F0:B9:BC
Authority info access: rsync://rpki.afrinic.net/repository/arin/rvs0nSNMbGbEJJJb7hApnarwubw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/1545DB06B5BB11EC9D4192935A40D577.roa
Signing time: Wed 06 Apr 2022 15:06:06 +0000
ROA not before: Wed 06 Apr 2022 15:06:02 +0000
ROA not after: Mon 26 Feb 2024 15:06:02 +0000
asID: 37314
IP address blocks: 165.16.128.0/19 maxlen: 19
165.16.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1671 (0x687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368B07FAR/serialNumber=AEFB349D234C6C66C424925BEE10299DAAF0B9BC
Validity
Not Before: Apr 6 15:06:02 2022 GMT
Not After : Feb 26 15:06:02 2024 GMT
Subject: CN=624dac5e-ae45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:9d:46:f5:77:a8:2e:60:24:f2:1b:ee:87:
aa:85:b9:8b:49:47:93:63:a5:80:72:02:83:d8:45:
70:05:0b:68:0b:ac:4d:f7:22:8d:f2:27:0b:f9:30:
ce:ea:32:5c:6b:ac:cc:f2:8a:b8:09:fc:04:f6:ca:
b9:9e:90:85:ec:cf:76:f3:de:32:01:b3:63:de:f1:
76:d7:4e:73:90:a2:64:33:ab:a6:12:f7:60:65:f6:
71:18:c8:b9:96:6a:4c:f6:c8:4e:da:d9:2c:93:da:
81:0c:09:aa:ac:35:76:af:20:54:5b:fd:69:78:59:
b4:16:61:72:7e:c4:da:b6:0e:af:b2:97:72:36:85:
96:0b:ef:0e:54:a1:30:c9:c4:95:74:a0:1d:a0:fb:
0f:c9:58:1c:15:01:61:9f:e2:0f:27:cc:41:06:7f:
e7:95:9d:52:9d:f8:ff:27:7c:ad:85:e9:52:11:66:
e7:91:3c:bf:63:7d:9b:61:d3:1c:bf:0e:02:f0:cf:
e5:f9:bc:f5:f0:ed:89:88:08:b1:a4:f7:92:31:eb:
5e:a8:f4:8b:ec:69:1b:06:53:b5:b3:c6:95:55:5a:
d7:31:66:60:43:b5:08:37:bc:99:8e:19:73:ba:43:
26:c9:56:e5:36:19:ce:69:7e:5c:07:a3:e2:86:ed:
51:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D1:D7:5E:23:42:10:BB:0B:2C:4E:36:57:AB:0B:C9:02:7B:3B:44
X509v3 Authority Key Identifier:
keyid:AE:FB:34:9D:23:4C:6C:66:C4:24:92:5B:EE:10:29:9D:AA:F0:B9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/rvs0nSNMbGbEJJJb7hApnarwubw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rvs0nSNMbGbEJJJb7hApnarwubw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/AA8ADE84B9C411E79806DE61F8AEA228/1545DB06B5BB11EC9D4192935A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.16.128.0/19
Signature Algorithm: sha256WithRSAEncryption
89:6a:a2:73:da:e1:1b:09:83:2e:0a:ca:62:74:7c:7a:1f:f7:
d7:00:5f:88:9c:1f:57:fb:87:1d:76:e4:e0:fc:6b:10:4a:c4:
dd:55:04:53:e6:93:e9:1a:95:ed:0d:21:38:d2:75:ee:48:a5:
25:a8:c2:ae:77:8b:da:72:98:b9:c3:d1:b2:65:0f:9d:e2:85:
da:9a:de:84:fe:96:ca:b8:18:01:8c:68:f6:b6:df:2b:3d:9e:
a4:b9:7c:70:41:9b:85:93:35:34:be:13:43:a5:9d:9b:77:28:
8e:0e:e9:f8:19:a9:6b:21:2c:21:17:4c:c1:86:fc:e7:dd:9b:
b4:ce:53:63:93:74:45:71:55:21:bf:85:74:da:7b:58:b4:4f:
5a:1b:63:3e:72:df:d7:7a:4f:34:9b:f0:9f:6f:ef:83:1f:29:
73:55:d5:68:8f:c8:00:6b:97:29:e4:60:d7:4c:c9:66:70:70:
73:79:a0:0a:b1:96:18:6b:2e:bf:fe:c9:e8:63:a6:b4:86:f7:
97:01:5c:a7:b9:4b:a6:5c:69:30:37:fe:e5:4f:19:60:ff:fe:
ee:8f:36:a3:67:ae:11:34:dd:a6:ed:fa:9c:f3:6d:5d:7d:25:
53:6f:e6:ed:14:20:79:a7:46:fd:21:39:de:bf:7a:8c:7e:99:
c6:a1:ff:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:03 2023 by rpki-client on console-fra.rpki-client.org