Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/B3B7960AE70011ECB1835DBBF1222468.roa
File: B3B7960AE70011ECB1835DBBF1222468.roa (raw, json)
Hash identifier: wyqcpgM4VwfAK3/CIREQzFMb5R+Gy0tN7tbR+5B1jWw=
Subject key identifier: 83:50:EC:14:A6:4D:23:2A:8C:CF:E7:93:CD:10:16:6F:33:10:1A:4B
Certificate issuer: /CN=F36F7F21AF/serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
Certificate serial: 02
Authority key identifier: 52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/B3B7960AE70011ECB1835DBBF1222468.roa
Signing time: Wed 08 Jun 2022 07:57:54 +0000
ROA not before: Wed 08 Jun 2022 07:57:51 +0000
ROA not after: Sun 08 Jun 2025 07:57:51 +0000
asID: 328155
IP address blocks: 154.65.80.0/21 maxlen: 21
2c0f:f610::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F7F21AF/serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
Validity
Not Before: Jun 8 07:57:51 2022 GMT
Not After : Jun 8 07:57:51 2025 GMT
Subject: CN=62a05682-d7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:96:f1:10:dc:ba:83:c4:af:f2:3e:8f:50:55:
d5:42:9b:2d:42:e9:c6:a7:80:ff:c7:f0:51:fe:76:
53:94:f9:4b:78:74:7d:9a:8e:f1:4a:55:cf:8d:eb:
d9:8a:22:2b:b0:7d:44:fa:22:4d:ba:dd:3b:f4:3d:
ed:71:ef:11:72:03:ca:e3:23:8d:91:27:9d:de:88:
0e:98:d7:b6:0d:02:92:cd:4b:c1:2c:d2:c2:a0:b9:
19:dc:8e:6e:ef:a7:f1:55:2c:bc:fd:e7:29:35:d2:
2e:f1:35:f2:d9:1f:cd:41:07:dd:7a:8b:1d:10:5d:
c0:da:77:0c:e5:76:ed:fa:ca:41:08:d4:3b:76:b1:
69:f2:7a:25:63:cc:67:e9:c1:f7:6a:25:2b:ef:85:
51:35:e0:0d:59:24:7b:41:8a:40:99:d0:3f:7e:fe:
11:cf:66:e9:b7:79:81:aa:dd:8e:bd:08:7f:9b:5b:
bb:72:d3:98:34:ae:02:7e:01:f9:f0:8a:ea:ff:94:
48:0b:78:df:99:2b:79:ad:0a:ea:bb:32:67:41:10:
43:dd:92:fc:7a:5e:d2:38:5b:13:36:87:fa:7c:be:
37:ef:95:09:5c:85:dc:42:3e:6c:41:64:6d:2d:27:
f8:99:ce:bd:e2:12:68:4d:cc:c3:7c:aa:55:05:6a:
1b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:50:EC:14:A6:4D:23:2A:8C:CF:E7:93:CD:10:16:6F:33:10:1A:4B
X509v3 Authority Key Identifier:
keyid:52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/B3B7960AE70011ECB1835DBBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.65.80.0/21
IPv6:
2c0f:f610::/32
Signature Algorithm: sha256WithRSAEncryption
06:5f:6a:6b:52:d8:ce:85:6b:6c:ef:22:f7:26:da:7d:9e:39:
d2:e1:3e:42:e2:54:10:f4:23:ac:86:f5:c1:a2:eb:7a:6e:49:
8c:7b:27:bb:13:76:cd:2c:8e:94:9a:ee:09:33:20:cc:d8:4a:
a1:a0:78:93:95:93:dc:b6:d7:a1:63:8b:c5:4e:0e:ee:fe:17:
79:de:c7:5e:82:a3:cb:9e:03:93:de:d3:6e:c8:66:1e:d8:af:
59:40:f3:7a:05:a7:99:b8:d3:d8:c8:df:f5:0b:f0:1e:de:c4:
23:eb:ad:e6:33:91:b0:00:3c:1b:14:17:83:94:99:7e:85:2b:
11:b3:ea:c0:b0:bc:6b:10:e5:49:a2:31:02:2b:af:cc:89:8d:
8b:b6:26:57:98:f3:04:e2:3a:3d:17:e9:19:4a:ef:f2:9a:35:
29:76:2e:5c:73:74:03:df:55:bf:65:a2:8d:12:2d:23:bf:76:
cb:84:17:9f:3f:7c:d5:70:25:c1:8f:86:74:36:f7:62:4e:c1:
ff:8d:db:f8:eb:24:a8:69:d8:e6:d5:bc:24:eb:ea:63:26:31:
b6:30:8d:6b:3e:80:5b:8b:84:0f:42:c4:8c:a6:72:57:58:60:
cd:06:77:b9:e7:99:96:78:0c:b3:51:5c:1c:c6:49:3b:37:75:
f6:96:73:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org