Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5DDB49F8046311EE8B82D86C4AD9E6FC.roa
File: 5DDB49F8046311EE8B82D86C4AD9E6FC.roa (raw, json)
Hash identifier: GY0BP/6KSjYycB6fmlsPfPFDAY2aE9IWcJzpMG551Fs=
Subject key identifier: 03:73:8D:34:47:E2:84:D7:7B:C7:CB:34:2A:4B:A7:1D:16:E3:CA:FB
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0ECF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5DDB49F8046311EE8B82D86C4AD9E6FC.roa
Signing time: Tue 06 Jun 2023 12:12:12 +0000
ROA not before: Tue 06 Jun 2023 12:12:08 +0000
ROA not after: Tue 10 Jun 2025 12:12:08 +0000
asID: 834
IP address blocks: 154.16.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3791 (0xecf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 6 12:12:08 2023 GMT
Not After : Jun 10 12:12:08 2025 GMT
Subject: CN=647f229c-541e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:0b:93:92:04:b2:51:46:9e:94:00:20:f0:
81:0b:06:c2:bb:3c:fd:35:20:42:01:53:62:36:12:
c6:4f:5d:b0:21:06:e5:52:c4:9c:1d:65:7a:4c:67:
73:52:6b:3f:27:05:be:eb:7f:cf:8a:49:42:71:e7:
16:37:c0:e6:25:c6:6c:5e:32:1e:df:b8:29:d5:94:
b1:f2:90:a7:a4:a9:3e:01:b3:7d:5b:72:1a:5c:12:
f9:65:99:2e:f4:3c:56:65:ba:b6:f1:4b:a3:36:c9:
ea:d7:63:d3:1b:56:8b:4d:da:17:c3:46:c3:30:a3:
32:55:ef:33:f9:a7:be:90:64:22:2e:e8:b5:c1:74:
28:94:26:51:4a:d6:58:cd:39:b2:b6:8a:8f:f3:9b:
83:92:c8:df:df:aa:0f:ad:f5:7b:0c:71:be:92:9d:
86:32:4c:2c:9f:5b:1b:53:09:88:04:9b:b1:4b:54:
01:fa:cb:cc:db:65:31:e4:48:d7:d3:4a:eb:dd:1f:
93:21:b9:59:8d:23:fc:7e:7e:01:d1:99:0b:42:31:
92:ef:d9:d5:f9:17:d3:40:6a:f6:db:c5:63:d9:1a:
95:85:3e:1c:16:aa:c5:31:8c:10:40:f7:c7:54:23:
3f:cd:90:36:f2:d0:a3:70:db:52:6d:56:5e:0f:81:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:73:8D:34:47:E2:84:D7:7B:C7:CB:34:2A:4B:A7:1D:16:E3:CA:FB
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5DDB49F8046311EE8B82D86C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.56.0/24
Signature Algorithm: sha256WithRSAEncryption
30:cf:05:0f:ae:1b:4d:15:3d:a8:1a:23:1e:2e:07:b4:3c:09:
83:95:c2:e4:81:fd:30:30:ff:e1:38:47:98:60:a8:70:00:3f:
24:38:59:d9:de:c8:b9:7b:d9:a0:f4:6b:73:38:33:c0:a8:7d:
27:1b:30:07:2f:4c:0c:91:67:13:13:97:a8:1d:bb:d6:9b:dd:
a4:47:00:8b:ef:74:f6:c7:0e:82:3d:b6:98:2c:53:8d:7c:4f:
17:1b:9a:fd:a5:b0:8a:f5:c7:df:8a:ef:2f:d8:ea:75:4f:2c:
25:ae:f7:32:c9:ae:40:92:27:b5:a9:19:a2:14:d1:16:a5:72:
8d:e4:96:8c:f2:ea:ea:9b:86:db:89:c0:4f:e1:b2:a0:7a:b1:
21:0d:90:f2:a2:ff:84:ff:65:ab:c9:3e:8a:c2:e0:0c:cf:8a:
65:41:d4:b9:28:83:f6:05:19:e6:f4:c0:1b:cd:dd:cf:b2:8f:
27:b3:24:07:78:0f:67:62:72:b5:47:fe:97:56:a1:27:2e:63:
23:c8:16:a4:95:15:0c:fa:69:3e:79:47:d4:c4:fb:b8:68:74:
c1:45:01:20:97:05:06:ec:7a:c9:bc:e6:71:13:98:b6:d4:59:
e1:af:ca:a3:ed:67:81:d0:69:83:b2:cb:61:ef:ea:fa:9f:67:
e9:91:dc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org