Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0FEFD06E0C2F11EE8C0877764AD9E6FC.roa
File: 0FEFD06E0C2F11EE8C0877764AD9E6FC.roa (raw, json)
Hash identifier: RoBz6f1BS/8srkKEQKbsE6gpmNPS8Ix3SiSOwSMZkA4=
Subject key identifier: 91:73:EA:6F:01:43:DA:C7:89:80:10:69:AD:54:28:CD:7B:3C:46:6E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F9B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0FEFD06E0C2F11EE8C0877764AD9E6FC.roa
Signing time: Fri 16 Jun 2023 10:17:57 +0000
ROA not before: Fri 16 Jun 2023 10:17:53 +0000
ROA not after: Sun 15 Jun 2025 10:17:53 +0000
asID: 200482
IP address blocks: 154.16.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3995 (0xf9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 16 10:17:53 2023 GMT
Not After : Jun 15 10:17:53 2025 GMT
Subject: CN=648c36d4-785e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:28:2b:e1:2e:9f:cb:f8:16:f9:0c:0a:81:
82:52:d8:53:d2:72:9e:f5:28:29:23:a4:9d:d2:1e:
1a:2b:a1:1b:df:9f:d0:8b:64:88:b2:84:08:27:8f:
46:db:a7:52:33:f5:38:dd:e7:56:97:1d:58:21:d7:
b4:e0:de:ed:df:5b:bf:0d:e3:6a:6c:61:af:e1:d3:
6f:9c:10:f5:78:aa:c4:2b:6b:af:ae:c8:65:61:f0:
ac:93:60:23:b7:fb:e1:19:ed:8e:80:78:5e:81:2b:
41:1e:37:ad:26:9f:88:2a:c8:ec:42:f3:d5:2b:6d:
5f:69:1b:11:af:f0:55:8e:c6:0d:6f:2c:a4:89:fb:
25:18:38:9f:13:99:f4:b1:cc:00:82:10:cc:e8:f1:
04:28:64:0e:13:a8:84:d7:2f:f0:a5:4c:00:fe:1c:
a4:0c:01:13:c0:eb:2b:ba:e3:33:06:8e:aa:fd:ec:
fd:af:47:b1:71:ed:82:3e:9d:f8:c0:12:76:84:e6:
ed:40:48:6c:1b:f1:16:23:8b:f6:83:99:9d:32:53:
cc:c1:68:b3:de:cf:98:79:2f:04:2f:00:87:d7:0d:
86:8f:fe:24:de:bc:2f:21:f7:19:63:07:d4:59:a6:
96:b8:64:ea:98:9b:fe:9c:b0:6b:bd:0b:b7:92:a5:
f2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:73:EA:6F:01:43:DA:C7:89:80:10:69:AD:54:28:CD:7B:3C:46:6E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0FEFD06E0C2F11EE8C0877764AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.186.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f2:08:cc:e6:ff:bc:c5:ab:d3:9a:08:7a:7b:b4:e0:12:6d:
d1:a0:2c:35:09:31:8d:1a:38:46:17:69:03:dc:dc:4d:80:87:
54:21:60:f1:69:13:3a:d2:42:90:6e:ec:d5:4f:c9:89:21:7c:
71:01:71:14:2d:b2:93:01:79:2a:cb:84:fb:8c:10:02:76:54:
b0:11:ec:a3:89:4c:30:aa:7c:8f:ab:19:ba:e2:25:79:7c:a9:
e4:16:54:db:27:0a:5d:7a:13:fb:11:24:71:ee:cb:80:5f:f1:
ee:71:cd:55:2f:52:3e:00:1d:c7:4b:23:eb:75:19:0c:cd:39:
71:18:e0:da:6e:a6:69:c7:af:b9:58:f6:78:e8:0b:26:63:38:
f1:78:d5:50:22:9e:a4:b4:b9:b9:54:a9:ad:d3:02:6f:3a:2b:
35:cf:75:da:e3:5a:77:e4:63:2d:6b:db:26:4f:2e:76:77:3c:
1e:64:35:0a:6a:fe:a4:84:a1:5d:1c:84:cf:de:7a:b9:58:df:
d1:e9:45:b1:97:49:ba:cf:64:66:e0:4c:91:c2:e0:56:02:3b:
d7:82:79:5b:4d:6c:c4:bb:82:47:79:ec:e2:52:b5:9a:45:c8:
3a:08:2f:11:2f:65:3f:9b:f7:53:5a:82:e4:38:d6:8e:99:f9:
ce:5c:db:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org