Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/16ED954C40C611EEBA4BBC4C4AD9E6FC.roa
File: 16ED954C40C611EEBA4BBC4C4AD9E6FC.roa (raw, json)
Hash identifier: o9+IMuvzq2eZjKHb1aUl2l7s6baIYRES44RZQbr5Sg0=
Subject key identifier: 8A:A4:33:80:F5:DA:CA:DD:C2:B2:7F:92:30:7E:E3:CA:39:CC:1E:11
Certificate issuer: /CN=F36AC63AAP/serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
Certificate serial: 02
Authority key identifier: 53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96
Authority info access: rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/16ED954C40C611EEBA4BBC4C4AD9E6FC.roa
Signing time: Tue 22 Aug 2023 08:30:03 +0000
ROA not before: Tue 22 Aug 2023 08:29:59 +0000
ROA not after: Sat 22 Aug 2043 08:29:59 +0000
asID: 16800
IP address blocks: 163.199.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Aug 2023 09:08:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AC63AAP/serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
Validity
Not Before: Aug 22 08:29:59 2023 GMT
Not After : Aug 22 08:29:59 2043 GMT
Subject: CN=64e4720b-2802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c6:fd:88:de:f7:7a:4d:b7:f1:14:82:59:19:
7f:b3:bb:5f:ec:65:91:06:24:3d:8c:79:28:fd:7c:
37:38:2f:42:e9:46:62:96:ce:64:b2:df:02:1c:1f:
e6:6e:46:e6:9c:dc:fc:f3:f5:c0:ea:d0:59:1a:49:
88:07:3e:36:84:a3:65:cc:9c:f6:9c:f8:6f:f9:46:
fa:b5:36:f7:4f:1c:b1:b2:82:bf:1f:74:4d:57:a7:
60:db:2d:ea:a3:12:d1:21:17:7d:8d:88:74:45:35:
4d:66:fc:09:84:c6:24:64:fb:a8:37:6c:1a:89:cc:
8c:d1:1c:20:63:16:70:dc:26:80:74:b9:d4:1d:d3:
70:68:55:88:3c:ab:c1:01:96:ae:eb:ef:5b:67:d6:
82:1d:17:2f:f3:fb:3c:54:0c:1a:aa:5c:0e:2e:6d:
2a:5c:a9:31:08:14:de:85:f6:4e:c4:2a:c7:10:ef:
22:0a:53:1d:34:9c:1c:57:0e:a4:a4:27:e1:e5:3c:
bd:ae:81:5f:d7:c5:0f:b6:19:0b:69:bf:8c:1d:11:
05:8b:b8:ae:c8:be:de:23:4e:17:47:ff:28:06:e6:
bb:3a:06:89:18:34:ab:f4:77:0c:93:24:5e:5c:6b:
0d:58:13:8a:c9:bb:89:1a:a5:21:61:b5:56:4b:1c:
5c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A4:33:80:F5:DA:CA:DD:C2:B2:7F:92:30:7E:E3:CA:39:CC:1E:11
X509v3 Authority Key Identifier:
keyid:53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/16ED954C40C611EEBA4BBC4C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.199.0.0/16
Signature Algorithm: sha256WithRSAEncryption
35:6d:06:a3:98:dc:09:51:02:4a:ba:2a:3b:68:81:2b:0f:86:
76:51:d5:e1:0c:1c:dd:ba:5d:cd:cd:aa:98:85:b4:69:31:3d:
b7:85:6e:0e:de:67:a1:a6:c2:38:a1:d2:58:35:89:2c:8b:bc:
00:3a:fc:9d:00:ed:ab:8d:7c:16:18:e5:4d:e0:5b:45:2f:11:
8b:85:20:1c:0d:3f:4d:16:49:92:8f:9c:14:a9:83:c5:56:97:
1a:e9:6e:8f:54:1d:0d:63:3c:15:1b:c8:83:f0:03:a7:46:73:
6c:c5:96:79:4e:7b:3e:a9:82:50:45:5d:f2:45:19:91:da:a4:
ff:19:33:60:0c:b9:49:f9:27:f6:ac:1f:b8:98:25:6f:b9:d1:
f6:36:65:32:e4:14:28:f0:c9:52:8d:43:76:3d:45:88:59:b6:
14:5f:eb:d5:de:5c:8d:a0:8d:b3:61:b5:b3:22:23:03:a4:18:
3b:e2:dc:0b:36:e1:64:16:9f:3e:58:e6:81:68:0e:3a:98:c4:
c4:dc:82:2c:88:23:3c:4b:b4:8f:2c:a9:56:50:14:56:29:93:
38:b9:57:50:0b:1a:e6:6e:56:a6:db:4e:08:d2:b1:75:c7:20:
17:bc:b5:64:08:4f:22:e6:be:6c:af:87:db:28:f2:93:06:c6:
4a:48:28:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:50 2024 by rpki-client on console-fra.rpki-client.org