Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0269A2E4B69411ED9789DCBCF1222468.roa
File: 0269A2E4B69411ED9789DCBCF1222468.roa (raw, json)
Hash identifier: pvVm7zD35KFXb+4EqRm4mvMoeBjwGvr+OcqzpVoCqmk=
Subject key identifier: B4:32:FC:7F:9F:0A:AC:3D:67:21:0A:AC:BA:82:F2:41:5F:B8:38:F8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C5A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0269A2E4B69411ED9789DCBCF1222468.roa
Signing time: Mon 27 Feb 2023 11:43:53 +0000
ROA not before: Mon 27 Feb 2023 11:43:49 +0000
ROA not after: Thu 27 Feb 2025 11:43:49 +0000
asID: 61317
IP address blocks: 154.16.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3162 (0xc5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 27 11:43:49 2023 GMT
Not After : Feb 27 11:43:49 2025 GMT
Subject: CN=63fc9779-0597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:64:6d:f1:6b:84:a7:3e:d6:a9:9d:a8:35:
ad:55:e8:83:cd:f5:a0:73:39:dc:59:fc:36:f2:b0:
ff:34:9e:f2:37:9d:79:0a:fe:21:77:ee:e2:d1:36:
15:7c:47:fe:22:fb:40:95:17:7e:ab:dd:e3:ec:7c:
9a:da:eb:a8:76:9e:55:cc:cc:7f:a8:1d:7c:01:90:
43:9c:c6:da:b3:fb:58:93:61:37:86:a0:bd:98:f3:
db:04:a7:31:0f:8e:69:6b:a3:31:66:d7:4c:1a:be:
69:98:25:3e:ff:3d:06:dc:51:e3:18:be:f6:7d:9a:
5e:7e:db:18:4b:70:16:10:44:a4:d3:16:cd:51:be:
ea:db:ee:d2:8e:c2:1f:8b:2e:60:1f:80:fb:84:98:
e3:93:d9:17:82:03:35:e7:e6:e6:d6:bb:1f:2a:dd:
0e:06:bc:ec:10:17:7a:a4:c1:5b:c6:9d:d5:bd:f9:
94:0b:c9:be:cd:2a:82:60:a4:26:14:b0:b4:8c:ec:
b2:b3:29:b1:e3:8b:59:d9:fc:88:de:2e:fd:39:02:
63:b7:3d:f6:49:33:7d:aa:e3:e2:3a:57:17:3e:56:
1f:9e:b2:df:0a:4c:16:fc:15:0f:6d:f2:b8:57:2a:
4c:e6:48:29:4d:23:5b:ab:90:1f:84:d9:ce:91:05:
40:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:32:FC:7F:9F:0A:AC:3D:67:21:0A:AC:BA:82:F2:41:5F:B8:38:F8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0269A2E4B69411ED9789DCBCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.101.0/24
Signature Algorithm: sha256WithRSAEncryption
13:87:29:e3:4d:ca:2d:43:fb:db:5d:c2:aa:da:9d:e8:18:94:
b5:52:e0:b2:90:94:34:98:1e:71:1c:03:a8:c1:fd:54:0d:43:
b5:c4:ad:fc:10:7d:a6:20:5b:d6:b8:74:39:b5:7b:82:fc:05:
11:96:2c:dd:f9:65:3f:9e:a2:4d:c5:ea:9e:cb:a3:07:6d:1c:
27:d6:ac:21:49:4a:7a:26:a0:29:ef:b9:1b:7e:15:67:a7:27:
4c:66:24:8a:80:54:2a:88:76:22:91:89:e5:1b:0f:bf:1b:4b:
03:32:39:f8:ce:ec:b3:d0:85:58:2f:24:5f:24:29:e7:45:75:
aa:3b:70:6c:fa:d0:5d:b3:2a:bb:be:42:d8:3f:3f:19:08:f2:
c5:ae:7c:d4:43:5d:6a:50:02:14:dc:46:3a:3e:84:b9:fe:0e:
ef:9e:d0:f5:7a:82:31:0c:c4:04:b1:bf:9f:ee:ed:99:ea:60:
ab:41:d9:4c:0a:9c:32:6a:87:e8:42:95:87:ee:7b:78:56:94:
e8:4b:03:6c:8b:a9:34:d6:63:59:ce:18:a8:09:e6:03:e9:89:
b0:c4:c5:75:62:9f:24:28:42:9c:ad:79:ae:06:22:4e:90:50:
9c:3b:a4:9b:80:85:93:a3:47:30:35:ca:66:d8:21:0c:1a:fb:
6b:1f:ec:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org