Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/8CF2F590FFDC11EEA903EB3B017001B1.roa
File: 8CF2F590FFDC11EEA903EB3B017001B1.roa (raw, json)
Hash identifier: QSqYo/Wfv9cR4KK3jC4xNgfElAFEUPGlHi9CXVH4aMc=
Subject key identifier: D4:B0:60:60:80:80:61:63:11:3D:E6:D4:D3:DA:45:4B:1D:A9:3D:E0
Certificate issuer: /CN=F366C302AF/serialNumber=A1EDAB1ACD430CFE4A51F31DB1850D95A884B144
Certificate serial: 03
Authority key identifier: A1:ED:AB:1A:CD:43:0C:FE:4A:51:F3:1D:B1:85:0D:95:A8:84:B1:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/8CF2F590FFDC11EEA903EB3B017001B1.roa
Signing time: Sun 21 Apr 2024 12:42:02 +0000
ROA not before: Sun 21 Apr 2024 12:41:57 +0000
ROA not after: Wed 23 Apr 2025 12:41:57 +0000
asID: 37628
IP address blocks: 154.65.12.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 21 Apr 2024 15:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366C302AF/serialNumber=A1EDAB1ACD430CFE4A51F31DB1850D95A884B144
Validity
Not Before: Apr 21 12:41:57 2024 GMT
Not After : Apr 23 12:41:57 2025 GMT
Subject: CN=6625099a-1048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:ec:12:4d:12:c8:4f:91:07:57:83:6e:91:
4c:d6:90:b3:74:e0:50:81:40:9c:8f:bf:d3:8e:c2:
f5:f4:89:42:e6:64:8d:4d:cc:30:6e:d7:57:f0:ad:
41:e5:f5:ee:1a:e0:13:dd:07:58:a5:8d:01:48:8a:
b3:05:ac:7c:b2:c1:c5:11:72:dd:e7:6c:72:de:0e:
f5:9c:79:4b:8e:57:5a:bc:22:1e:92:73:12:aa:e8:
2a:42:1f:f5:f0:8a:2e:e4:16:dc:b1:91:44:75:5a:
d7:35:1f:df:c2:3b:7c:0c:ae:86:e3:20:f4:d4:7e:
f8:ce:bc:7e:af:1c:13:ff:5a:4d:1e:c3:f6:64:8d:
f4:3c:b9:4f:dd:89:be:89:d6:23:d3:a7:4d:4c:44:
4b:f3:25:94:46:6d:cb:c5:11:87:51:a9:68:fb:19:
37:75:c5:d4:7a:98:63:6a:f8:df:ec:13:ec:08:98:
f0:29:78:35:26:ed:55:f6:81:e6:b8:b3:03:bc:14:
34:4c:11:68:90:9a:f9:99:bd:57:dd:c4:48:ad:bb:
fe:c5:ec:55:d2:df:fb:23:45:e9:7e:65:a5:b7:58:
8c:c1:d3:b5:ec:e8:b8:88:6b:69:3c:b0:14:0b:1c:
fa:4c:19:b5:69:9e:40:07:fd:85:76:a2:f9:c3:59:
7c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B0:60:60:80:80:61:63:11:3D:E6:D4:D3:DA:45:4B:1D:A9:3D:E0
X509v3 Authority Key Identifier:
keyid:A1:ED:AB:1A:CD:43:0C:FE:4A:51:F3:1D:B1:85:0D:95:A8:84:B1:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oe2rGs1DDP5KUfMdsYUNlaiEsUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/763D829EFEE611EE904BCF6B017001B1/8CF2F590FFDC11EEA903EB3B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.65.12.0/22
Signature Algorithm: sha256WithRSAEncryption
11:81:50:cc:ff:a0:3d:df:a4:98:96:3d:80:64:67:c7:4b:64:
71:da:03:5e:a2:44:37:6b:72:93:7b:05:91:95:7d:a2:63:74:
6f:3b:4c:b6:d7:be:79:6a:3d:2a:b0:0e:a0:7d:1d:ad:c3:10:
66:a2:a8:b5:d7:f4:8e:76:1d:13:8c:d4:b8:0a:36:1d:55:18:
2c:51:78:5a:14:e0:f0:29:99:c0:fe:fe:6c:d9:23:5e:47:93:
d0:5c:e6:b4:25:5f:32:2c:aa:25:1a:27:60:2e:62:8a:7f:73:
85:cd:68:ac:64:18:a7:bf:24:f5:f9:1d:40:c2:79:43:60:16:
0e:bd:21:fa:9a:7f:48:b0:1e:27:45:1b:9b:2d:3d:10:30:57:
d0:cf:99:cf:74:26:3a:40:bc:10:96:b2:38:56:79:99:71:4a:
b0:55:6c:88:ea:57:99:d1:8a:2b:14:dd:51:2c:4a:36:6d:a2:
14:2f:0a:a0:d1:75:bc:56:90:88:64:cf:db:07:9b:a3:c4:b1:
9b:41:cf:53:2e:2f:8f:27:8b:82:46:e8:fe:42:7a:f4:16:d1:
61:8e:1d:48:50:b6:d9:8b:12:d3:06:23:fc:59:61:20:0f:6f:
90:9c:98:27:ed:d0:0f:2e:93:63:6b:9d:c5:e2:6d:ec:b5:0b:
51:98:44:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 19:48:16 2024 by rpki-client on console.sobornost.net