Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0FB6DCF2587211EEA2C5C5404AD9E6FC.roa
File: 0FB6DCF2587211EEA2C5C5404AD9E6FC.roa (raw, json)
Hash identifier: QL8S1uvxh/2ZheVxowSidSJzS3hFp7H8lIpGPJ57yzs=
Subject key identifier: 3E:C9:DF:62:B6:C7:E6:A6:15:68:F3:65:7B:4A:13:DE:79:8B:92:E3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 125E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0FB6DCF2587211EEA2C5C5404AD9E6FC.roa
Signing time: Thu 21 Sep 2023 11:29:01 +0000
ROA not before: Thu 21 Sep 2023 11:28:57 +0000
ROA not after: Tue 24 Sep 2024 11:28:57 +0000
asID: 213060
IP address blocks: 154.16.100.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4702 (0x125e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 21 11:28:57 2023 GMT
Not After : Sep 24 11:28:57 2024 GMT
Subject: CN=650c28fd-10c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bd:85:a7:53:f2:ba:f7:72:2c:49:89:7e:d8:
9c:8c:a7:d0:24:8e:96:c2:68:f3:bb:24:e1:20:0f:
9d:eb:a4:69:c8:39:d9:ae:61:3f:b4:d0:b0:5c:98:
16:4b:84:4d:4b:db:df:95:54:15:51:ef:08:b2:27:
20:a3:f0:da:3b:ff:26:af:cc:f2:93:38:f9:f8:4e:
72:61:e0:9b:8a:1b:04:a9:97:4d:3f:68:48:12:a3:
58:d8:c7:2c:6e:71:b5:4a:06:9f:b8:9f:d4:37:b7:
c2:d5:63:60:89:1e:31:84:74:9e:8e:e9:d3:51:e6:
30:52:cd:45:1e:2e:d0:9b:85:d3:e8:b6:bc:ec:45:
2c:e9:a3:cc:89:a7:2d:8e:45:df:43:3d:a6:ba:15:
42:59:41:16:ec:c5:70:c3:b5:1e:dd:34:fd:23:42:
73:19:28:cd:b3:b9:35:14:5a:59:a4:d1:da:90:c0:
c5:f8:d1:17:00:0f:b0:77:35:72:08:5e:7b:cb:33:
a2:16:dd:f6:7a:0d:be:36:59:34:f9:f1:23:85:78:
e9:ee:f6:d8:a8:d1:21:e0:40:97:ab:49:a9:ec:ec:
c6:98:a1:9b:ce:98:cd:a2:84:28:11:fb:55:e6:30:
59:0f:11:91:1b:2c:f5:66:0f:5a:a6:3d:aa:8d:c5:
20:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C9:DF:62:B6:C7:E6:A6:15:68:F3:65:7B:4A:13:DE:79:8B:92:E3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0FB6DCF2587211EEA2C5C5404AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.100.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:1c:40:91:cc:76:31:96:ed:92:24:57:c4:f9:4e:23:89:01:
49:76:a0:4c:fb:d2:c2:4f:1c:c6:f7:70:f3:24:bc:f0:32:c2:
97:93:5b:64:ff:27:f1:4b:52:15:a5:c0:34:51:95:5d:20:0e:
86:0b:b4:a5:90:63:72:18:2b:f6:6f:fe:4f:38:9a:bb:b6:34:
7b:ec:68:b9:a9:0b:87:0e:f1:d5:df:46:eb:97:f6:82:42:6a:
c7:60:0c:12:e3:c5:e8:5d:de:98:a5:08:8a:44:c1:f8:d4:4e:
2a:e2:cc:0a:7b:bb:44:1f:5d:a6:1a:ea:e9:69:dd:a2:41:7c:
dc:02:d2:22:8c:10:f1:03:d5:75:7e:9c:6e:4c:e9:3e:b6:00:
0f:31:8a:eb:38:62:d0:77:c6:e4:e3:f4:f7:7b:62:12:77:54:
cd:d4:15:f1:68:79:7b:84:40:d6:db:44:8c:f7:30:5c:28:cc:
35:9f:c1:22:dc:4f:10:78:18:79:75:33:8e:06:71:85:ad:1d:
3e:f6:14:aa:d3:44:23:c8:e7:8b:b1:cd:3d:23:d3:63:39:a2:
30:a6:80:3d:67:6a:b7:d8:b5:aa:77:b5:e5:47:cd:a2:08:f4:
df:89:b1:09:7d:8e:0d:9d:46:fc:dd:cd:ec:f6:16:0f:70:f4:
f5:80:f2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 12:15:51 2023 by rpki-client on console-fra.rpki-client.org