Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1D9973B0FFBD11ED82ECD1404AD9E6FC.roa
File: 1D9973B0FFBD11ED82ECD1404AD9E6FC.roa (raw, json)
Hash identifier: S69zce7XK6ojNtVn0AdyBNnA2B0+OKKJ45Mdf1Vb4n0=
Subject key identifier: A5:BE:68:75:B7:F5:B5:3D:3F:16:CB:D9:6F:10:DA:BE:87:0A:50:66
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E1E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1D9973B0FFBD11ED82ECD1404AD9E6FC.roa
Signing time: Wed 31 May 2023 14:12:03 +0000
ROA not before: Wed 31 May 2023 14:12:00 +0000
ROA not after: Fri 30 May 2025 14:12:00 +0000
asID: 834
IP address blocks: 154.16.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3614 (0xe1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 31 14:12:00 2023 GMT
Not After : May 30 14:12:00 2025 GMT
Subject: CN=647755b3-7936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:2f:a7:43:f7:48:ec:46:37:12:d7:a8:56:
11:d2:39:43:07:bc:75:c7:4d:3f:00:79:4c:99:12:
f9:cd:0d:5e:52:7f:0f:43:6a:e7:d0:b2:0f:9b:c7:
4a:de:03:61:ff:b4:c8:30:75:01:fb:a7:c7:8d:e0:
41:8b:ac:ad:c8:2f:8f:08:cd:df:b7:14:34:5f:bc:
84:12:7e:17:20:46:93:f8:37:56:59:61:49:03:b9:
2e:a6:87:7e:9f:f4:45:79:87:6f:85:b2:e1:a5:b8:
68:55:45:5d:92:4f:16:7a:a4:48:68:51:f6:da:ff:
bb:be:e2:de:7d:4d:a4:51:e7:51:14:68:d7:5d:15:
1e:8e:48:50:cf:74:f1:8f:1d:4a:73:2d:7c:50:ca:
c2:d0:be:4c:16:b9:de:3e:c7:28:8b:2b:f7:a5:08:
f2:0d:e9:48:59:b7:5a:c7:c7:d3:6d:99:72:09:37:
86:3f:d9:5b:d6:2a:6d:fa:03:9e:1d:0a:e9:da:aa:
48:a2:e2:bb:07:82:3c:a1:0e:99:d4:9c:85:bd:5c:
68:d7:a3:e1:54:d2:8c:7b:06:b2:d6:15:89:f4:68:
a0:70:83:08:ea:d7:54:d9:c4:bb:a1:01:5a:0f:47:
4a:68:d0:46:3c:16:ef:41:ad:73:b9:e7:06:d4:bb:
f0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BE:68:75:B7:F5:B5:3D:3F:16:CB:D9:6F:10:DA:BE:87:0A:50:66
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1D9973B0FFBD11ED82ECD1404AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.214.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:9c:64:7d:53:5e:84:83:c1:eb:0e:1f:76:6d:2f:9b:e1:1d:
60:ba:24:e1:89:1f:61:1a:79:a7:11:ef:a1:ec:06:c5:ac:fb:
ff:2a:d2:f6:94:ed:a7:54:4b:45:6f:e0:fe:96:db:c8:4f:98:
59:40:87:16:f2:65:82:43:6a:c4:40:ce:47:c2:a3:b9:1c:b3:
24:85:4d:88:b5:bb:ab:fc:f5:15:24:69:62:6a:ab:d0:41:f0:
3e:ca:15:e5:46:38:50:82:a6:5b:1d:72:96:cb:4a:56:66:dd:
6c:5e:3d:50:64:26:80:c6:6e:7a:a2:ad:60:20:78:d8:7e:2e:
cd:c5:eb:a6:f4:7b:6a:8d:79:fc:a5:ca:cc:d9:99:fc:b0:84:
90:d4:74:27:2a:e4:72:c8:44:d0:67:5d:d4:61:92:91:0a:ed:
74:68:2f:be:22:eb:ba:37:b3:b5:8b:8b:e3:bb:87:9e:15:81:
14:45:a0:06:b5:b5:61:1a:5b:f6:fb:9d:96:89:60:f1:5d:99:
85:a7:f2:20:7f:51:e7:71:8c:15:64:bb:ee:03:8a:4c:d9:de:
78:c9:0c:51:98:6d:3c:82:d2:6c:c9:45:bb:56:6d:6f:54:71:
55:13:cc:7e:97:3e:37:9f:5d:dd:d0:db:71:ad:e7:bf:3a:3c:
bb:d6:81:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org