Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/20C99814B43911ED8F59B29DF1222468.roa
File: 20C99814B43911ED8F59B29DF1222468.roa (raw, json)
Hash identifier: iNPB71yBymgm3wIsejeJH/14E8K9kThE46UxhwWfhNo=
Subject key identifier: 56:D9:08:F9:B7:3F:8F:04:FA:89:CA:87:2C:64:81:1C:94:1A:0D:45
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0BEB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/20C99814B43911ED8F59B29DF1222468.roa
Signing time: Fri 24 Feb 2023 11:48:17 +0000
ROA not before: Fri 24 Feb 2023 11:48:14 +0000
ROA not after: Sat 22 Feb 2025 11:48:14 +0000
asID: 61317
IP address blocks: 154.16.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3051 (0xbeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 24 11:48:14 2023 GMT
Not After : Feb 22 11:48:14 2025 GMT
Subject: CN=63f8a401-a4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6b:47:35:a6:a3:28:40:e9:b0:a7:77:92:ba:
3a:6b:35:ba:81:de:f7:1f:b0:93:4a:37:5c:5a:2d:
f0:49:6f:d8:ec:53:65:8a:41:7a:38:95:01:d6:03:
98:38:b7:4c:b4:5d:ae:e9:05:b9:29:cf:15:a8:73:
d7:8b:f4:ac:a1:6e:43:22:28:82:9e:72:98:06:1a:
df:d3:d8:0a:83:e4:9e:ee:29:23:9a:1e:ec:de:01:
24:33:11:57:11:35:a2:07:98:43:33:b0:a1:90:c2:
28:2e:93:c8:c7:37:c0:f5:87:d6:02:a3:dc:91:77:
95:08:7b:52:4b:82:b9:2a:55:da:7f:8b:d7:4a:27:
68:a2:0c:ba:31:dd:f0:f6:fd:e7:fc:c5:85:79:27:
42:00:72:5f:27:f4:ff:f1:a7:69:94:a9:73:06:45:
08:4f:74:0e:cb:15:60:fc:e3:cb:f7:4a:6f:12:9c:
8f:85:eb:f1:68:a0:ec:60:57:b9:10:0d:e4:79:b7:
a9:a8:57:6a:85:09:c0:ac:31:4d:f6:93:37:81:49:
81:45:ab:46:a8:37:90:f0:b4:b8:2c:e3:c7:64:ea:
b8:cb:a2:52:81:e0:56:3c:19:33:53:6f:30:68:cf:
9d:f9:00:2e:31:a0:63:be:fa:88:22:c2:57:7c:b2:
df:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D9:08:F9:B7:3F:8F:04:FA:89:CA:87:2C:64:81:1C:94:1A:0D:45
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/20C99814B43911ED8F59B29DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.14.0/24
Signature Algorithm: sha256WithRSAEncryption
33:7c:18:7d:c1:a3:1e:df:c7:62:63:10:23:1b:30:54:2c:9b:
17:1c:f4:b4:72:93:d0:41:e2:a3:96:2a:52:60:ce:c3:a6:c4:
bf:5e:6b:67:8e:ab:19:cd:7e:1a:d1:57:3c:24:fc:2f:98:0a:
1b:c0:00:bd:2d:12:af:7d:e8:14:8e:e6:0e:e3:c9:2d:c2:dd:
82:93:01:48:65:21:c2:8f:6b:c4:09:fd:cc:af:f2:19:f7:37:
de:17:65:fc:ef:40:eb:e4:31:cb:ab:b1:5a:38:1b:3f:64:39:
ca:4e:82:d6:4f:51:de:f5:55:3e:92:42:5d:28:4b:09:38:dd:
28:0c:48:2e:d6:fc:94:79:93:2d:f9:93:a7:18:b2:1f:03:0d:
1d:c3:0e:03:33:95:da:61:29:ff:85:7e:e2:eb:fc:5a:5a:ea:
77:b8:c1:2f:8b:11:f2:39:80:29:4c:62:de:c0:fe:e1:22:88:
ab:71:be:12:d3:10:ed:45:07:fa:55:7f:c5:9c:2f:be:b5:6f:
3a:19:70:ac:46:5d:41:1f:8f:9e:7f:62:5f:89:1b:d7:6a:c4:
38:7b:bf:3c:b5:cb:86:02:29:51:e5:2c:bb:88:91:ff:fb:68:
28:95:65:90:05:3d:39:c2:8b:cd:bd:4f:6d:dc:70:5d:80:a9:
b9:a7:df:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org