Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/275EBD9C34FB11EEB744258B4AD9E6FC.roa
File: 275EBD9C34FB11EEB744258B4AD9E6FC.roa (raw, json)
Hash identifier: 8ry3ncUQXvnJjzD+biu3N5RkZbnkaKf4VVtE5l/26VQ=
Subject key identifier: 0A:05:48:C0:22:61:E8:C4:4E:A2:55:3C:0F:C5:FE:7B:94:43:71:DE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 110A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/275EBD9C34FB11EEB744258B4AD9E6FC.roa
Signing time: Mon 07 Aug 2023 08:19:40 +0000
ROA not before: Mon 07 Aug 2023 08:19:36 +0000
ROA not after: Thu 08 Aug 2024 08:19:36 +0000
asID: 834
IP address blocks: 154.16.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4362 (0x110a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 7 08:19:36 2023 GMT
Not After : Aug 8 08:19:36 2024 GMT
Subject: CN=64d0a91c-6f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:29:77:49:fe:46:da:ab:9f:78:37:91:1a:df:
13:0b:dc:ea:3e:b5:ee:c1:cc:7a:c8:8c:56:9c:bf:
02:ed:f0:cb:a3:0a:44:99:d2:fa:6c:35:9c:8b:f0:
4f:3b:8e:bb:92:89:8b:9a:bf:53:99:8c:35:c1:eb:
fe:6b:da:0e:66:fe:3a:82:24:88:d9:35:cf:50:8e:
0d:f3:b3:b5:91:76:68:f1:99:d1:12:47:b2:3d:85:
7a:bd:30:30:96:68:ac:73:ed:04:97:88:1a:c3:f9:
6b:8e:cc:cc:92:f9:f4:b4:55:f7:5c:dd:63:ff:4b:
70:bf:ca:3d:e0:af:d8:c0:4c:dd:47:57:83:d0:27:
2c:2b:53:c6:2c:3a:3a:2d:5c:a1:09:9b:18:4f:47:
68:41:19:46:be:e3:e9:a9:19:5e:b0:4d:19:81:2e:
99:43:02:14:4d:9c:f9:f0:ad:62:35:c7:c6:52:cd:
c1:bc:f2:84:e1:fe:c0:cb:33:d7:40:f9:30:d9:35:
d8:37:a2:fe:7f:c3:65:ba:44:53:a4:5c:33:5c:64:
69:16:13:ef:af:b6:bc:69:45:83:0e:42:0c:ba:af:
49:d3:0a:35:da:f0:59:f9:83:8a:6b:d6:82:a6:a1:
06:0a:d2:6f:25:6b:7c:7d:83:b5:eb:7b:09:d0:38:
cb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:05:48:C0:22:61:E8:C4:4E:A2:55:3C:0F:C5:FE:7B:94:43:71:DE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/275EBD9C34FB11EEB744258B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.30.0/24
Signature Algorithm: sha256WithRSAEncryption
21:18:1d:8a:44:76:96:bd:be:45:a4:9a:bb:17:78:36:b2:3b:
b6:74:e5:3d:bf:02:51:82:73:9f:32:07:19:18:b8:dd:cf:36:
24:db:65:e9:e2:a7:2d:c2:a2:5b:a3:dc:91:b5:43:2b:8a:cb:
32:80:99:32:d1:17:3e:b6:7b:e9:c9:4a:10:fa:e7:ff:d9:0b:
c8:0c:12:34:c8:f1:90:99:4b:5f:d8:14:39:90:64:0d:0a:5e:
17:cf:d7:9c:5d:92:e6:77:bf:19:06:a4:bf:4b:4a:3c:75:4e:
d7:df:6b:52:45:8b:d5:5b:25:1a:a1:28:d8:fd:93:29:d8:25:
4a:05:08:79:98:85:d9:ee:9d:4a:26:7c:0b:c7:f1:27:a7:24:
f4:fb:4a:f8:f7:51:d4:2f:e7:60:30:ab:3c:11:ea:e8:8c:c1:
8f:bb:1c:9f:45:2a:e9:ba:3b:81:08:db:c6:bb:f3:20:9d:c3:
8d:89:71:7a:03:b1:ef:a0:42:85:06:d0:40:78:86:5a:48:04:
2c:f9:ed:f6:46:90:ca:94:3c:d2:51:f0:00:8f:1e:50:d0:44:
ff:fb:9d:7b:fb:6d:df:3c:9f:89:d2:26:67:d1:e8:06:e0:59:
44:a4:33:48:1c:04:27:27:ad:27:43:fc:b3:32:3a:5e:98:fb:
7d:f5:98:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 25 11:37:52 2023 by rpki-client on console-fra.rpki-client.org