Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FDF13F26521811EEBB1E56804AD9E6FC.roa
File: FDF13F26521811EEBB1E56804AD9E6FC.roa (raw, json)
Hash identifier: ZwbOPgo1yWVOY86AmdzRvyf5/bRpQidoh3VxaqsICA4=
Subject key identifier: F5:07:1B:93:07:5E:97:1B:D4:25:8E:0F:BB:5A:6B:B5:22:92:5D:76
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 121D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FDF13F26521811EEBB1E56804AD9E6FC.roa
Signing time: Wed 13 Sep 2023 09:36:19 +0000
ROA not before: Wed 13 Sep 2023 09:36:15 +0000
ROA not after: Sat 13 Sep 2025 09:36:15 +0000
asID: 213060
IP address blocks: 154.16.100.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4637 (0x121d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 13 09:36:15 2023 GMT
Not After : Sep 13 09:36:15 2025 GMT
Subject: CN=65018293-d1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:77:19:2a:21:b6:ce:4c:75:54:8b:cd:de:10:
7c:8d:b7:1f:a5:43:d8:d0:e0:86:5f:48:4c:83:62:
07:bb:4f:e4:39:31:ce:c3:dd:68:41:12:74:03:db:
78:07:e3:8f:ff:c9:59:80:45:54:f3:65:bf:c4:83:
ae:5e:a3:75:2c:69:f8:3f:05:af:7e:90:54:10:94:
45:6b:bf:97:8e:3a:b2:20:94:29:bc:f2:78:d7:4c:
08:fe:a0:84:00:dd:f8:43:d5:60:7c:ba:4a:2e:5a:
05:66:be:5f:0b:22:7a:c4:b6:78:ec:3a:b8:a3:13:
f4:c4:d7:b5:cf:26:40:ee:15:bd:06:5d:3e:92:6d:
6d:5c:06:d4:28:5b:e3:2d:96:2c:03:a5:f0:bb:47:
d5:ce:44:42:f9:17:55:4a:64:5d:a5:c3:aa:8e:0d:
7f:1a:a1:1f:d5:87:e6:fd:fc:fe:b8:2c:ee:1c:4a:
96:7b:6a:f1:ff:6e:b4:80:05:51:22:9b:e1:c4:2f:
5c:a7:d9:7d:70:b6:15:8a:f8:f1:c2:09:bb:bd:d5:
9f:62:f0:69:d3:95:b0:01:a1:be:ed:b4:a6:47:fa:
d0:b1:c8:65:5f:7e:c4:4f:b8:b7:57:9c:5f:cc:91:
17:9d:2d:2a:8a:cb:73:84:da:b6:03:82:04:1e:e4:
fa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:07:1B:93:07:5E:97:1B:D4:25:8E:0F:BB:5A:6B:B5:22:92:5D:76
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FDF13F26521811EEBB1E56804AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.100.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:94:86:e6:42:c1:74:7e:b9:cd:e9:1a:63:53:d5:6e:a8:95:
21:ab:eb:76:f8:fd:a5:84:aa:0e:11:1a:d1:25:30:d6:92:2a:
d8:aa:99:1e:2c:9e:1c:cd:d5:ad:f9:ad:33:4a:77:4c:8b:11:
c9:0b:f6:42:fa:ac:d9:f6:50:0e:a1:bb:20:3f:96:04:b1:b9:
de:d0:8b:4e:b6:c3:42:9d:92:40:78:74:0e:df:de:69:d3:17:
ea:29:56:8e:38:36:c7:1b:1f:3a:35:b0:2a:7d:b2:ad:1f:43:
03:be:75:b5:8d:95:05:ee:14:4b:a1:42:38:db:dc:f9:f6:a7:
ca:f5:81:52:d8:e0:d3:cb:75:44:6e:94:b1:18:30:9c:d1:f1:
52:dd:1d:be:6c:6c:ef:07:f3:df:d2:db:58:33:ce:bf:d3:ed:
6a:83:b5:de:4e:89:b5:a4:b0:7f:b3:37:35:7a:b5:b7:d7:72:
4e:70:29:5e:ee:fa:04:64:9d:ca:90:ea:7f:bf:da:c0:01:3c:
9d:63:c6:ac:12:7c:57:a0:62:0e:14:3c:fa:7b:e6:ab:2d:86:
fe:63:72:a5:24:4a:de:a0:28:2c:6c:3c:49:40:73:fd:cb:ef:
7c:0c:65:89:bb:00:b2:14:e8:c4:7d:b1:0e:52:ff:78:0f:7d:
cb:9d:33:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 13:01:26 2023 by rpki-client on console-ams.rpki-client.org