Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/08B4AE6E60C611E9AD855F38F8AEA228.roa
File: 08B4AE6E60C611E9AD855F38F8AEA228.roa (raw, json)
Hash identifier: 0eLlZ3YDXHY6MkN2T8eOEIfFIRsjfF4bg4vtycZ7sy8=
Subject key identifier: 84:B9:B8:E3:B0:CC:5D:3B:E4:FE:C5:29:BF:EA:12:CE:BA:DC:2D:3F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: CF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/08B4AE6E60C611E9AD855F38F8AEA228.roa
Signing time: Wed 17 Apr 2019 04:05:28 +0000
ROA not before: Wed 17 Apr 2019 04:05:22 +0000
ROA not after: Wed 10 Apr 2024 04:05:22 +0000
asID: 36352
IP address blocks: 154.16.112.0/24 maxlen: 24
154.16.114.0/23 maxlen: 24
154.16.116.0/22 maxlen: 24
154.16.144.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 17 04:05:22 2019 GMT
Not After : Apr 10 04:05:22 2024 GMT
Subject: CN=5cb6a608-68af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fc:bb:55:9d:47:f9:7d:82:9c:16:9d:40:d0:
62:b8:1d:9e:d0:d9:8b:a2:e8:3b:a8:20:f1:94:2c:
85:a2:67:80:88:a7:29:28:2f:fd:52:83:99:76:1a:
e2:d7:80:97:fc:76:1f:2e:ca:75:53:70:2c:2a:4b:
ae:f2:cc:9a:a7:0f:08:b2:e0:79:6f:b2:3b:64:7f:
de:ce:0c:1d:c3:6f:a0:34:3d:be:3d:dc:84:89:c5:
a4:a8:2b:52:26:e1:62:57:eb:4e:21:9d:3e:e5:f0:
a4:c6:ee:27:96:21:1f:ee:43:23:8c:be:36:d5:8a:
2b:91:0e:82:c9:50:f9:0c:7d:27:0c:c6:1c:40:61:
e7:b0:93:1f:45:b7:aa:9e:73:54:1a:a2:35:f0:20:
ef:2f:d4:82:fb:39:18:45:a1:86:e6:05:05:d8:b0:
74:a8:cd:c6:2d:53:df:5f:21:a6:e2:3a:11:22:a6:
13:1f:dc:1a:12:f5:16:43:17:b8:a0:42:0c:60:22:
9c:80:8e:f6:88:24:ac:9b:62:04:ac:36:a3:f3:f1:
cf:9f:b7:a9:a7:85:b0:5f:a2:c8:34:f9:10:3c:38:
38:d5:e1:c4:df:9f:50:3d:5d:20:41:83:5a:19:67:
a0:30:84:ad:2f:a3:a3:c5:52:a2:28:71:f3:05:87:
68:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B9:B8:E3:B0:CC:5D:3B:E4:FE:C5:29:BF:EA:12:CE:BA:DC:2D:3F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/08B4AE6E60C611E9AD855F38F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
154.16.112.0/24
154.16.114.0-154.16.119.255
154.16.144.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:e1:5e:f4:0b:f6:6f:ae:b2:59:8e:e6:8c:8a:18:f0:57:ec:
47:22:3a:e8:b8:3c:8e:14:f8:e1:f3:c2:ea:d6:25:ca:6d:39:
33:a2:98:c6:1b:42:2b:96:07:24:b6:fd:a3:c5:94:a0:ab:d3:
94:01:82:82:46:4d:67:b0:83:50:1f:45:a4:a0:d2:ef:82:58:
e8:1f:a2:27:89:20:5b:cc:5c:77:c3:52:55:16:08:31:3f:c4:
23:d6:01:0e:5d:e1:06:de:31:36:63:e4:1e:f8:2e:8f:8b:2b:
9d:7e:7b:48:d3:39:f4:1f:64:da:a3:a4:76:cb:7b:b4:b4:f0:
48:20:11:dc:93:eb:84:17:a6:04:3e:62:22:56:b8:6f:11:87:
b4:5b:7d:76:3f:b1:9f:b4:06:f2:bf:d7:af:f2:a1:ac:16:1c:
46:b1:95:8e:bd:d6:79:02:da:e9:9d:88:3b:e7:a2:a5:2a:09:
4e:29:79:38:09:6a:85:b8:65:d2:58:b5:b6:a6:94:40:c2:97:
3b:e7:15:39:5d:0b:8f:d2:c2:f0:19:de:09:08:c0:4d:e2:3c:
a0:20:56:d5:01:e6:c7:72:41:46:22:14:1a:d1:ad:b8:92:dd:
73:bd:d2:30:5c:b7:0b:f1:61:48:cf:f3:38:64:8b:1c:b1:97:
11:f4:ba:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org