Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0E47EC664DFC11EDB75BC47CF1222468.roa
File: 0E47EC664DFC11EDB75BC47CF1222468.roa (raw, json)
Hash identifier: dPmYFSNLiJkHHZ5vZsNG3MTwUhXu4bVyAxA/yFVndco=
Subject key identifier: 0E:13:F5:A9:7B:30:70:DA:02:FD:4A:10:CB:A8:56:BB:EE:80:A9:03
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0A0D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0E47EC664DFC11EDB75BC47CF1222468.roa
Signing time: Mon 17 Oct 2022 09:14:08 +0000
ROA not before: Mon 17 Oct 2022 09:14:03 +0000
ROA not after: Thu 17 Oct 2024 09:14:03 +0000
asID: 212238
IP address blocks: 154.16.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2573 (0xa0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 17 09:14:03 2022 GMT
Not After : Oct 17 09:14:03 2024 GMT
Subject: CN=634d1ce0-8c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c8:43:65:3d:8a:3d:d0:23:69:35:bf:98:0d:
f9:4e:a0:28:bd:77:f4:eb:22:1c:9f:d6:f2:49:21:
d3:7b:18:c7:32:3e:84:16:aa:72:2c:65:a8:90:a3:
31:c8:2d:1b:b2:2d:31:03:d2:31:e7:4d:49:be:35:
b3:b4:46:fd:49:f6:be:38:54:7d:db:67:b6:2c:70:
10:7b:38:03:d4:05:aa:30:12:5a:3c:da:66:77:ee:
a7:8f:3c:ca:2b:a7:59:42:6f:9d:1d:1f:09:dc:6d:
ba:a6:5e:9e:92:dd:29:b0:af:dc:e7:69:13:87:75:
55:67:d8:4c:ea:5b:f8:a2:18:a7:45:5d:04:72:ae:
c9:e9:81:25:63:9e:83:26:41:c8:f5:c8:f4:d3:f8:
a5:71:ed:c1:ac:3e:79:7c:8c:5f:8a:a7:fa:cd:11:
c0:94:d8:c7:16:c8:d4:5f:bc:14:a3:a0:bb:95:74:
f4:b8:3f:ea:db:9e:23:74:4f:48:0a:73:57:ec:b6:
44:52:ad:31:b0:f2:31:33:8f:35:5f:22:15:e0:2b:
65:2d:5a:52:85:3d:fb:36:8d:e1:45:2e:35:7b:dc:
2c:6e:4b:63:ca:1b:58:77:9d:95:66:09:22:17:78:
5c:96:4d:f8:f3:c6:54:7f:35:b2:93:5e:0a:ae:93:
ff:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:13:F5:A9:7B:30:70:DA:02:FD:4A:10:CB:A8:56:BB:EE:80:A9:03
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0E47EC664DFC11EDB75BC47CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.230.0/24
Signature Algorithm: sha256WithRSAEncryption
86:57:6d:02:c2:e6:eb:3d:49:5b:b5:46:9d:02:2b:2f:35:74:
7b:5f:8e:17:ff:50:4f:62:0e:c2:d1:f2:1e:26:a7:54:70:34:
e6:b5:29:62:eb:69:96:28:af:01:74:18:aa:97:68:3b:0b:67:
75:03:45:19:92:54:92:e6:98:f7:f6:3d:95:a0:25:94:44:fe:
e4:80:8f:b6:45:e8:53:9c:f0:e7:88:f8:04:26:88:cd:cd:37:
47:c0:db:66:b9:32:d8:a9:00:4e:eb:e4:3f:0a:42:d7:56:03:
68:2b:e5:1b:a1:e3:08:39:4b:88:95:bf:d5:2c:d0:ea:f6:11:
49:64:4e:25:3f:a6:4d:1c:cb:83:09:28:86:de:98:e6:5d:e0:
8f:3f:d9:90:3a:79:a2:5b:d0:01:99:1d:95:0a:f4:08:b3:5b:
69:38:7e:7e:62:53:3a:34:e3:72:a4:ae:95:dd:a0:d6:99:1a:
00:4c:ce:8f:ff:d9:c0:8a:1b:95:6c:89:a9:04:6b:70:63:eb:
d0:fb:61:92:ef:8d:2b:75:ec:a8:a1:f0:e8:90:ef:0d:a0:52:
cc:14:63:64:8a:43:ae:70:34:c4:8b:fc:ef:aa:26:10:94:31:
b3:8c:2c:8f:02:0f:12:5b:f7:0e:f5:c4:3b:ed:1d:8f:4e:ff:
f5:bd:df:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 07:54:12 2023 by rpki-client on console-ams.rpki-client.org