Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2680EF3217F911EDAD5171D7F1222468.roa
File: 2680EF3217F911EDAD5171D7F1222468.roa (raw, json)
Hash identifier: Qh1fBqJbvPjcG+2MtxrXl13Smgqr2qx5ZilsLmqTgck=
Subject key identifier: 41:E0:64:66:BF:F7:01:DD:85:64:2F:A7:25:AB:42:B1:0C:BD:2D:3A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0927
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2680EF3217F911EDAD5171D7F1222468.roa
Signing time: Tue 09 Aug 2022 15:37:18 +0000
ROA not before: Tue 09 Aug 2022 15:37:13 +0000
ROA not after: Fri 09 Aug 2024 15:37:13 +0000
asID: 49999
IP address blocks: 154.16.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2343 (0x927)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 9 15:37:13 2022 GMT
Not After : Aug 9 15:37:13 2024 GMT
Subject: CN=62f27f2e-bea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:39:a5:26:9a:84:40:4c:95:21:bf:cf:67:
b6:ba:4f:fe:63:5b:58:c1:8d:4d:31:9b:51:dc:80:
b9:50:70:84:0c:29:6f:a3:5e:1b:c8:d9:11:b8:6e:
2f:55:76:9a:ce:db:41:43:46:55:ac:5e:69:0a:49:
38:65:fe:38:9a:37:01:a9:5d:c3:df:a6:e8:e6:73:
75:21:28:b9:50:92:93:99:00:74:f4:1f:86:21:4b:
ac:b7:9d:fd:73:86:23:fd:de:83:d2:cd:c0:df:00:
53:ae:a0:48:aa:05:cd:dc:47:b1:9c:3a:71:be:45:
dd:23:a6:5a:ac:62:88:d9:18:e0:c8:1c:28:bb:80:
54:28:49:9a:e6:d1:a8:3d:73:b3:5d:14:17:c9:99:
22:f3:fc:4e:da:9f:43:c3:b8:20:c6:0b:12:e9:9f:
65:9f:5e:e2:d7:7d:ee:9c:8c:d8:b4:6a:39:3e:2b:
4f:d1:11:b8:04:77:ae:ab:d6:ab:87:ca:e3:d2:85:
05:55:dd:45:b4:cf:b5:78:4b:d3:18:fa:8e:1d:f7:
8d:67:9d:21:6f:0a:67:e5:8e:5b:16:11:bf:ea:50:
eb:0d:97:77:9d:d5:6f:8c:8a:b0:03:1b:d3:56:9b:
93:a8:a3:93:9a:7b:10:cc:cf:ba:c6:a2:60:28:b1:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E0:64:66:BF:F7:01:DD:85:64:2F:A7:25:AB:42:B1:0C:BD:2D:3A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2680EF3217F911EDAD5171D7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.183.0/24
Signature Algorithm: sha256WithRSAEncryption
33:9e:c4:a5:cb:d1:16:ad:cc:62:2e:0a:57:dc:d8:2d:32:51:
c1:e7:3d:bb:fc:54:50:c5:b1:01:52:d2:45:b8:07:0c:a9:40:
9f:41:86:4d:07:1e:a0:d3:87:40:0f:f7:e5:b0:79:3e:79:be:
b6:11:29:82:56:12:15:eb:16:80:b3:9f:4a:33:3c:7c:75:04:
12:f1:da:df:21:f7:b7:32:24:0c:a7:8a:77:b2:9d:f0:f2:1b:
17:78:d1:68:31:99:cc:0e:be:1f:3b:f7:38:56:4c:82:c3:76:
64:e5:2c:79:af:0a:78:1f:43:b5:f4:73:9a:8f:26:68:74:5b:
8e:d3:db:5c:7c:cb:fa:5f:ed:a1:50:ef:ca:ed:f6:01:d0:67:
43:7c:56:08:53:30:7a:99:26:e6:8b:ca:b9:24:8a:51:2d:13:
39:a6:0e:3a:10:4f:02:69:5f:d1:9f:ad:39:28:87:4c:c7:a7:
0d:0f:85:c6:e0:76:b6:10:82:db:1f:03:86:b6:e5:d6:68:8d:
1a:cb:70:fa:a6:2e:84:12:62:cc:ed:bd:8d:f6:0a:e8:a8:66:
bd:1b:8a:c3:50:33:de:4e:21:ec:4b:86:e8:01:fc:c4:e7:b6:
32:8e:0e:93:fa:1b:07:b0:35:3b:1a:4a:0e:14:49:4c:51:9c:
61:f5:e0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org