Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/02AE22DE0A1811EEB12716164AD9E6FC.roa
File: 02AE22DE0A1811EEB12716164AD9E6FC.roa (raw, json)
Hash identifier: 81vP4RWH1YSNn04ymZdl7U2eEngppxodApzsUvJBx7w=
Subject key identifier: 25:CB:4C:52:28:EF:60:13:DE:23:D6:CA:88:B6:F1:24:16:04:3C:5A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F55
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/02AE22DE0A1811EEB12716164AD9E6FC.roa
Signing time: Tue 13 Jun 2023 18:27:54 +0000
ROA not before: Tue 13 Jun 2023 18:27:50 +0000
ROA not after: Sat 14 Jun 2025 18:27:50 +0000
asID: 55154
IP address blocks: 154.16.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3925 (0xf55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 13 18:27:50 2023 GMT
Not After : Jun 14 18:27:50 2025 GMT
Subject: CN=6488b529-fb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:9b:f2:80:ba:bf:18:c1:d8:0e:9f:d6:54:
fe:69:ab:5b:83:8d:3b:a1:f4:a0:2d:b9:bc:a6:39:
e2:c2:b9:77:5f:49:48:f5:3e:95:0f:3c:c7:a5:af:
77:03:2a:68:4f:b4:6f:0a:9a:77:ed:14:7c:59:37:
80:4d:8d:49:ad:b0:0c:b8:85:c2:9f:4a:ea:2a:0e:
0b:37:5c:3e:1a:72:f4:cf:19:1b:51:f9:99:5b:f0:
83:37:dd:38:62:65:fd:e0:7a:33:e0:19:0c:37:e0:
53:25:ef:b1:38:65:ed:74:da:a3:96:cd:6b:af:50:
13:3c:5e:6d:fc:b8:ed:fc:e6:f6:c2:12:ab:88:21:
17:dd:e6:a2:19:0b:0b:06:2e:cf:42:66:25:bf:81:
4f:52:7b:ab:8b:e4:fb:92:84:32:50:5b:e6:f6:72:
21:63:8a:08:4a:92:ad:74:a2:5b:8e:c2:f9:44:d0:
93:01:e4:c2:59:38:8e:4f:b1:39:83:26:9a:39:5f:
a2:8c:c4:ba:a0:84:92:53:f6:4e:d9:cf:ce:d7:0b:
cb:76:73:2c:09:fd:6a:4a:bb:93:68:8f:72:c0:e2:
e8:0d:51:4c:2b:8f:ec:3a:9a:0b:44:e0:d2:6d:6f:
06:ed:82:70:37:e1:5e:96:46:0e:8b:01:0d:78:3e:
ef:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CB:4C:52:28:EF:60:13:DE:23:D6:CA:88:B6:F1:24:16:04:3C:5A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/02AE22DE0A1811EEB12716164AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.90.0/24
Signature Algorithm: sha256WithRSAEncryption
80:42:1c:0e:50:35:19:1c:50:bb:aa:bd:20:a2:cc:cf:e8:2c:
6a:20:c7:9a:bd:35:e5:4b:0e:5e:13:07:a5:08:11:69:eb:84:
21:aa:c7:76:44:b9:9a:92:0d:43:da:a8:ac:f3:1f:b2:00:f4:
55:ff:b9:1a:5b:37:0f:57:47:3e:6b:6c:2a:51:50:fb:06:1b:
49:27:4e:ea:f2:60:cf:55:2d:8b:68:36:3b:0f:2e:2a:f2:b4:
35:61:10:e6:64:1a:0f:35:79:2f:72:01:9e:81:2a:76:e1:92:
d8:c2:88:4a:17:56:c5:41:39:02:d2:eb:63:5d:30:cf:5e:30:
ce:09:b3:3d:8e:f4:76:a5:c9:f8:65:eb:cb:a8:cf:b8:14:e5:
f5:6c:51:43:78:c5:4e:f1:80:7e:45:fb:69:6c:d5:b1:1e:da:
97:18:01:cc:17:7f:81:38:52:06:5c:45:8e:98:b7:01:1c:df:
6a:6f:3b:4a:d1:c4:00:af:6f:7d:e4:ce:37:57:24:20:49:c3:
96:e2:87:93:5e:9c:41:33:87:3d:dc:62:da:4a:56:6e:49:5f:
21:87:09:4f:b4:6b:d6:60:4b:a3:62:de:db:33:c1:28:68:07:
56:d5:83:20:4e:63:f7:7d:90:8a:e1:ca:e7:78:4e:ad:a4:59:
09:f9:c3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 13 07:46:07 2023 by rpki-client on console-ams.rpki-client.org