Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/07E48DC6B30411ED8832809EF1222468.roa
File: 07E48DC6B30411ED8832809EF1222468.roa (raw, json)
Hash identifier: RdMa4fr/wlZ5SrR50QZFXqmIMcy6GomEOoJQG9UkNLg=
Subject key identifier: 26:24:10:C4:CB:A0:A5:C5:B8:C5:C4:75:11:A4:FD:D8:77:BF:96:ED
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0BCE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/07E48DC6B30411ED8832809EF1222468.roa
Signing time: Wed 22 Feb 2023 22:55:41 +0000
ROA not before: Wed 22 Feb 2023 22:55:38 +0000
ROA not after: Tue 25 Feb 2025 22:55:38 +0000
asID: 207633
IP address blocks: 154.16.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3022 (0xbce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 22 22:55:38 2023 GMT
Not After : Feb 25 22:55:38 2025 GMT
Subject: CN=63f69d6d-7344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:4a:ce:b9:b9:1d:4c:e1:0a:d3:32:a6:82:
ba:f6:9c:4c:d3:b3:e4:bb:69:32:40:9c:e8:77:60:
a3:74:99:c9:89:b6:f1:ff:e3:81:6e:e4:df:2e:b1:
69:23:79:c2:b4:f6:01:5a:dd:f0:ad:90:4f:66:1b:
4b:d6:8e:80:b8:b8:01:9e:8f:0d:19:93:11:56:66:
a2:bf:a0:c3:4a:92:02:ea:45:04:8a:f9:ca:e4:d2:
24:aa:46:4b:4c:e1:b7:a9:d1:d1:af:66:d5:48:a6:
d5:8a:7c:4a:ee:c6:d2:8c:f1:d8:29:f9:ce:e8:47:
eb:cf:23:19:50:6f:22:a6:06:18:cf:57:e7:60:3c:
6c:7c:df:a1:55:12:05:74:ed:13:7d:d0:32:bb:45:
bb:26:a9:a8:19:7e:b7:d1:f3:29:cf:ac:0b:75:e7:
47:4c:d5:a0:07:07:ca:72:0a:0a:88:62:b7:33:c9:
01:bf:49:fc:96:e5:34:fa:e6:94:a8:71:ac:03:16:
7c:85:ab:ba:70:a0:44:c9:2b:c7:02:72:55:37:4c:
14:97:ee:b9:3b:b5:a4:3e:cb:90:cf:84:ab:33:80:
98:91:44:34:da:e8:2b:60:7a:39:37:c9:76:5b:99:
ca:fc:5f:24:9a:cb:f1:ee:3b:c6:8f:31:d8:1b:e5:
76:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:24:10:C4:CB:A0:A5:C5:B8:C5:C4:75:11:A4:FD:D8:77:BF:96:ED
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/07E48DC6B30411ED8832809EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:b8:8d:df:32:3f:62:c9:f2:25:4d:4b:b0:78:10:58:c1:ef:
00:f5:15:cb:1e:e9:ff:3f:25:0e:8b:c1:b4:4f:45:5b:8e:cc:
61:6d:d2:6d:a0:1c:74:4d:1e:b8:9c:ef:b1:b4:99:d6:e8:c2:
a7:ab:49:5c:1f:49:d1:69:05:14:89:0b:ba:13:37:1b:27:9e:
ae:cc:b2:9d:dc:44:7c:18:9b:3f:cc:09:7a:28:96:92:ea:72:
2d:7d:6c:16:ed:57:7e:5a:9a:79:ac:09:e2:dc:1f:ff:0b:a1:
2e:ae:19:78:6c:0a:f1:dc:83:c6:e8:25:13:e4:44:43:53:ce:
16:01:d4:ca:cd:fe:32:4e:d0:7d:ac:cb:4c:45:af:73:30:a0:
4d:da:a3:b3:7d:ce:0f:16:ff:08:a1:8d:c9:39:8a:cd:ee:cc:
b1:36:88:cf:cf:98:81:4a:91:01:41:61:2f:0e:48:9c:a9:44:
47:10:12:0b:54:0f:e3:e8:4a:49:60:2b:3f:d1:da:23:e4:06:
df:78:50:40:92:1c:eb:9d:be:6e:4d:f3:e0:a8:8b:d4:0f:2f:
63:38:0b:5f:7f:74:94:54:b4:d2:b4:e7:e6:a2:3f:03:77:57:
0f:a9:5b:c3:fc:d0:43:9e:ed:75:58:7b:f2:93:24:cc:75:79:
25:2b:67:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org