Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/08715F3E3CAD11EEADD28D544AD9E6FC.roa
File: 08715F3E3CAD11EEADD28D544AD9E6FC.roa (raw, json)
Hash identifier: a7LexTGyFM/BZeGex9RBthoeU/tMK34CdxSrUudi0A0=
Subject key identifier: E9:F5:5A:AC:05:98:FC:EF:7D:AC:26:D7:30:2E:97:24:51:C8:DF:9B
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1173
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/08715F3E3CAD11EEADD28D544AD9E6FC.roa
Signing time: Thu 17 Aug 2023 03:20:36 +0000
ROA not before: Thu 17 Aug 2023 03:20:32 +0000
ROA not after: Sun 17 Aug 2025 03:20:32 +0000
asID: 6939
IP address blocks: 154.16.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4467 (0x1173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 17 03:20:32 2023 GMT
Not After : Aug 17 03:20:32 2025 GMT
Subject: CN=64dd9204-9154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:97:0a:45:7c:e1:df:3a:8a:d6:e3:49:c9:1a:
79:95:1a:b8:30:35:fc:fd:0a:56:35:74:73:fa:12:
ed:51:06:71:06:21:51:1b:f1:03:67:c1:51:b6:3f:
6c:fb:8e:2d:64:f7:18:b7:4e:6a:4e:9b:34:bb:3b:
07:77:08:69:01:2e:5a:50:0d:ae:6b:6c:b5:cc:8f:
e5:b8:07:42:97:4b:8b:9f:f0:b0:59:97:02:fd:be:
29:d1:6b:bc:ff:0b:b7:8b:29:53:42:35:e8:a7:aa:
8c:9e:63:8a:a3:ec:8b:28:9e:75:9f:f3:44:73:68:
80:17:46:cb:6c:79:97:bf:03:c6:3d:54:26:5c:60:
2b:95:e3:9f:8f:6b:6f:d9:7c:97:4f:65:a6:5c:33:
b6:0b:28:07:a7:e9:56:80:37:ed:18:48:b8:52:09:
0e:59:36:66:64:66:80:a0:56:80:10:cc:7c:be:84:
04:a6:19:61:f3:3d:62:51:81:2e:ce:02:4f:f6:35:
5e:bc:e4:92:69:16:a4:d9:81:9b:fe:cc:0e:46:53:
04:3c:fd:6a:bb:cf:d8:9f:38:50:66:e1:d5:14:32:
47:f7:a1:66:b4:cb:07:85:a1:2e:4e:0a:ef:df:f2:
10:21:52:02:6d:66:a9:23:9c:9b:55:ae:ad:ab:8c:
72:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F5:5A:AC:05:98:FC:EF:7D:AC:26:D7:30:2E:97:24:51:C8:DF:9B
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/08715F3E3CAD11EEADD28D544AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.9.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:f3:b4:54:2a:99:9f:5d:bb:7b:15:f2:b4:8a:8a:e5:bf:a3:
f8:ab:45:cf:a6:27:e9:85:df:51:2b:5e:cf:1b:ea:cb:a3:85:
cb:2c:a0:77:cc:0e:5b:93:41:df:f7:5e:83:32:d6:86:30:fc:
fa:6d:9a:d8:47:26:0e:fa:26:84:5e:ae:34:3a:9b:30:b8:1a:
fa:7a:10:6d:d2:f8:a6:ee:85:d5:1b:0a:cc:bd:bf:ce:8e:e2:
78:40:37:94:4f:c3:6b:c7:39:9b:07:71:11:0a:4b:77:fd:8e:
3e:8e:f5:da:ed:b4:d2:df:87:00:f2:6b:d2:f1:82:b8:98:f1:
1d:d4:22:d5:f3:78:da:2e:a8:8a:cc:a7:02:7b:af:a0:0b:db:
06:69:ba:27:d0:61:aa:89:da:e0:9e:6c:42:60:2a:0e:7a:68:
2d:a3:36:a2:af:e0:67:83:a0:1a:f4:2a:31:58:79:04:8b:40:
de:20:1e:71:8c:b1:aa:96:31:fa:29:6d:ce:99:a3:25:4b:dc:
6a:14:47:47:78:a7:f0:2c:0e:02:91:96:43:17:23:7e:03:92:
f5:b0:69:42:5c:51:29:2a:4d:e5:13:8f:b9:8a:ab:8c:ac:76:
4a:a3:c3:d3:58:ac:47:03:0d:a7:63:06:f8:ca:19:1d:8e:4e:
57:23:71:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 06:53:00 2023 by rpki-client on console-ams.rpki-client.org