Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/15F1BF5CB44E11EC9999D2DF5A40D577.roa
File: 15F1BF5CB44E11EC9999D2DF5A40D577.roa (raw, json)
Hash identifier: 4Ji5EQXZZ9EcIESSOmqZPHMk7LaaeX9GvVkN1+Ithr8=
Subject key identifier: 8C:72:E2:D7:69:C8:6E:EA:2C:02:69:30:F0:E0:94:C2:A1:A6:D3:94
Certificate issuer: /CN=F369AFD9AF/serialNumber=2414B99AC0801DAC15B6CDCF8D3869A0C4FF1A1D
Certificate serial: 05
Authority key identifier: 24:14:B9:9A:C0:80:1D:AC:15:B6:CD:CF:8D:38:69:A0:C4:FF:1A:1D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/15F1BF5CB44E11EC9999D2DF5A40D577.roa
Signing time: Mon 04 Apr 2022 19:33:21 +0000
ROA not before: Mon 04 Apr 2022 19:33:18 +0000
ROA not after: Fri 30 Apr 2032 19:33:18 +0000
asID: 328093
IP address blocks: 196.216.222.0/23 maxlen: 24
196.216.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFD9AF/serialNumber=2414B99AC0801DAC15B6CDCF8D3869A0C4FF1A1D
Validity
Not Before: Apr 4 19:33:18 2022 GMT
Not After : Apr 30 19:33:18 2032 GMT
Subject: CN=624b4801-5c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:ef:ee:ed:b1:15:21:41:36:8f:d2:95:f0:
94:4d:1f:6f:dd:dd:9d:f0:1e:5e:5a:1a:45:37:20:
92:26:fd:40:e9:85:a0:0e:b0:c9:12:63:af:65:3c:
c3:e3:10:6a:5e:a7:39:f7:5d:d1:b9:6c:d7:f5:03:
75:bd:32:df:ef:27:79:39:5b:a8:ad:34:48:e5:22:
0a:52:79:77:17:57:69:da:bf:46:67:42:5f:d5:56:
01:f4:9f:86:c1:31:a2:0a:d2:62:a5:31:4f:2d:3b:
88:0d:bc:90:31:82:2b:26:16:f1:7d:5a:8c:bd:d0:
79:71:6e:e2:33:a2:00:4a:bd:72:21:dd:fe:81:6f:
d4:21:af:68:4e:a1:fd:f9:16:e1:06:8a:7a:dd:b8:
86:1a:b5:04:83:3c:41:79:2c:6e:ae:7c:a6:d3:db:
ba:f7:5d:28:98:8d:51:a3:94:71:3a:9b:9f:91:6e:
86:45:a7:61:fc:b8:5e:d3:d8:b6:f6:b1:32:ac:7c:
84:4e:ee:0d:98:eb:ac:a8:74:c1:88:51:57:95:c4:
eb:36:99:94:22:59:cb:78:9e:27:e6:72:82:ef:70:
ef:43:4e:0b:01:bc:86:b4:cc:c3:24:49:86:f2:48:
04:ce:86:90:59:9f:63:a5:21:8e:c9:8e:77:57:ac:
7b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:72:E2:D7:69:C8:6E:EA:2C:02:69:30:F0:E0:94:C2:A1:A6:D3:94
X509v3 Authority Key Identifier:
keyid:24:14:B9:9A:C0:80:1D:AC:15:B6:CD:CF:8D:38:69:A0:C4:FF:1A:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/15F1BF5CB44E11EC9999D2DF5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.216.222.0/23
Signature Algorithm: sha256WithRSAEncryption
43:ed:fb:5d:17:ac:8b:d0:3c:bb:80:32:90:63:35:d0:76:e4:
36:76:56:38:5f:7d:80:d1:67:aa:c2:42:43:bc:65:1f:99:a6:
e5:21:62:bc:2e:83:e0:b4:77:a2:c8:48:3f:d8:15:5e:e0:e0:
cf:7c:da:f0:b7:b6:97:42:47:3b:fd:28:e3:fe:ce:84:8d:3b:
76:26:4f:da:25:0c:ca:e2:82:7d:0e:ab:c9:00:ea:97:ce:a1:
65:fc:5a:c6:6c:13:51:ea:d9:f8:12:49:28:42:cd:8d:ae:90:
4f:ad:3b:94:b8:eb:2b:bc:9a:d0:d4:a3:1d:1c:d3:fc:45:42:
29:9b:bb:96:91:bc:a2:2e:f6:8a:04:fc:66:74:75:5d:36:39:
5a:28:66:32:46:6e:1c:0f:c9:78:a1:07:58:3f:1a:cb:44:06:
f9:0a:50:fc:23:42:b8:87:ec:94:60:d5:c8:33:d7:b5:e9:34:
a8:e1:e4:69:c3:f4:2c:84:99:e9:db:3d:9e:a6:22:d8:dd:69:
2e:66:28:4f:e9:62:44:6e:6e:99:02:ad:d2:73:cd:22:af:09:
e5:1b:5b:e0:f7:57:f8:4a:dd:0e:24:c1:1e:0f:a0:69:1e:4d:
70:aa:61:f7:6b:88:16:4b:eb:9f:58:d1:d1:b3:6d:6a:69:40:
b5:a0:e7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-fra.rpki-client.org