Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B4BF6E64E9C611ED8887EB5E4AD9E6FC.roa
File: B4BF6E64E9C611ED8887EB5E4AD9E6FC.roa (raw, json)
Hash identifier: 1hfXRz4zCM+dpWQu2meGNJbzuGOfhHtO+ndKa7yrXgE=
Subject key identifier: 6C:68:D0:78:FC:5E:A0:42:A0:14:78:40:BD:90:56:52:3B:8C:DE:94
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D8F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B4BF6E64E9C611ED8887EB5E4AD9E6FC.roa
Signing time: Wed 03 May 2023 15:25:16 +0000
ROA not before: Wed 03 May 2023 15:25:13 +0000
ROA not after: Wed 07 May 2025 15:25:13 +0000
asID: 204769
IP address blocks: 154.16.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3471 (0xd8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 3 15:25:13 2023 GMT
Not After : May 7 15:25:13 2025 GMT
Subject: CN=64527cdc-3a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:24:89:cf:e7:56:19:79:56:79:b6:59:96:
93:24:b9:74:cf:bb:ce:37:06:26:f7:0c:9a:94:e4:
9b:48:cd:a8:db:fb:a2:2f:54:dd:08:9f:fd:dc:d4:
7c:1a:6d:dd:c8:50:82:ab:c0:03:3d:a1:bd:1f:d8:
ca:42:5e:1c:e8:28:cb:f7:ef:a5:62:db:51:48:90:
2b:b0:cb:44:1d:68:c1:4e:e5:51:25:37:23:cb:a0:
67:48:4a:48:e8:12:6d:a5:25:27:41:1a:ae:09:2c:
92:c8:6b:ad:94:cd:ae:73:f9:17:59:b6:d0:82:63:
5b:e6:9a:13:98:05:9a:aa:9a:41:a9:11:f1:90:c1:
33:7e:78:00:0f:33:72:00:3d:ae:5c:82:76:4e:e6:
7c:cf:20:7b:a5:52:4b:12:d4:0a:f5:ec:55:f3:01:
15:2f:49:4a:a8:f0:ab:e5:f7:78:60:82:83:ed:6d:
43:c2:06:c5:55:7e:47:9f:73:5e:5d:d7:ce:04:4d:
4e:d9:2b:51:35:21:76:4c:a0:5c:f2:7b:a6:8d:bd:
3c:9b:17:fa:14:8c:ce:72:55:ba:1f:cd:71:7e:a4:
da:de:16:09:44:60:83:18:fd:da:18:99:a7:9a:9b:
f6:14:af:4d:96:3a:17:8a:7a:7b:4c:53:18:df:5a:
41:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:68:D0:78:FC:5E:A0:42:A0:14:78:40:BD:90:56:52:3B:8C:DE:94
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B4BF6E64E9C611ED8887EB5E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.106.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:57:53:eb:e0:b3:5f:3f:52:5b:a7:b4:63:63:e5:a4:b9:c1:
32:29:f7:6e:2f:3b:08:36:32:50:3f:b5:b2:1e:41:4d:33:1c:
ad:8e:f3:e4:1d:50:cf:a5:b3:3a:7f:29:c8:ae:a5:27:a0:22:
c3:15:1b:0d:66:8e:46:44:cf:9d:ab:9f:2d:b1:5d:75:3e:36:
56:bd:2d:71:88:89:05:d1:89:0b:7f:e7:6a:33:66:b5:e3:4a:
77:07:da:04:14:76:04:7a:ab:5b:6e:10:d4:f5:5f:b9:a8:ae:
e0:33:32:17:09:0d:6d:1b:9f:a3:4c:fd:7a:a4:7d:37:6b:1d:
a7:3d:8f:47:3c:fb:d1:27:ea:67:ac:e9:bf:d0:d8:a7:1b:b0:
5f:ec:cc:63:96:e0:66:01:08:56:90:db:84:1a:99:22:1a:2d:
af:75:0d:05:ac:03:69:6e:03:bc:60:b6:1c:5d:35:63:8f:21:
49:e8:af:12:22:59:36:e8:89:98:41:27:fb:ec:2d:cc:b0:8c:
8d:8a:11:9a:dd:44:42:c0:9a:ac:87:07:77:de:5b:6d:75:10:
40:18:61:60:5d:79:94:eb:7d:c8:cd:92:0a:2a:00:3c:b4:63:
2b:26:df:00:86:d3:28:85:f6:94:d8:06:07:1d:23:3d:7a:32:
76:f3:35:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 03:43:17 2023 by rpki-client on console-ams.rpki-client.org