Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2C5EED020B6711EEA328FE184AD9E6FC.roa
File: 2C5EED020B6711EEA328FE184AD9E6FC.roa (raw, json)
Hash identifier: Tj/s9EtJmeGljJk7C7txfoRljMn+d1Xbvvp/v8ZrquM=
Subject key identifier: E1:9A:55:8B:D4:AA:42:69:07:BF:74:CD:D2:A4:B8:BE:7A:C8:89:EF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F75
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2C5EED020B6711EEA328FE184AD9E6FC.roa
Signing time: Thu 15 Jun 2023 10:27:05 +0000
ROA not before: Thu 15 Jun 2023 10:27:01 +0000
ROA not after: Sat 14 Jun 2025 10:27:01 +0000
asID: 146943
IP address blocks: 154.16.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3957 (0xf75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 15 10:27:01 2023 GMT
Not After : Jun 14 10:27:01 2025 GMT
Subject: CN=648ae779-7b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:91:0a:5f:dc:e1:33:ee:a0:49:73:0d:9e:
dc:a2:65:93:74:c2:60:06:5f:d2:fd:12:9d:a2:14:
2d:bf:a0:92:8c:f2:1d:9f:65:e8:38:e4:c8:9f:a0:
5e:73:d7:70:29:f0:63:f5:b9:1c:60:d8:70:4b:0e:
1e:eb:6f:84:8f:7c:76:0d:37:99:bb:aa:03:b6:57:
60:0d:47:89:a1:c9:c6:bc:d3:2a:44:af:66:95:ef:
47:54:e5:42:0a:53:33:ec:6a:6c:da:92:5c:5c:25:
1d:b2:5a:07:0d:1c:a6:40:b4:ff:65:e6:fb:2b:f4:
fb:38:b0:2b:c9:8f:96:28:c5:d4:22:3f:11:b1:8d:
28:4a:81:39:af:5e:a3:c9:5c:b8:ba:85:ed:21:af:
4c:33:73:9e:ed:b1:2c:dc:38:49:7b:50:d5:82:4e:
57:99:17:71:3e:90:72:a4:68:6f:be:1a:ce:ba:76:
06:39:0c:0a:2c:6c:59:9a:7f:72:44:01:11:b8:bf:
f6:e2:77:8e:10:5f:64:db:14:6f:ce:18:27:28:96:
f8:2b:09:fb:17:49:aa:9f:b5:ec:1c:08:11:69:73:
86:0a:c3:d7:a2:61:e0:1e:a4:9d:fb:d1:5f:7f:41:
9b:cf:9e:34:0d:8a:0f:df:ed:78:7a:36:88:a3:fa:
e0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9A:55:8B:D4:AA:42:69:07:BF:74:CD:D2:A4:B8:BE:7A:C8:89:EF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2C5EED020B6711EEA328FE184AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.240.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:78:eb:40:c5:fd:0a:eb:47:8e:f0:b4:b6:48:72:8f:c7:47:
32:27:c4:1b:36:02:cc:65:ee:17:04:b3:cc:d9:6f:fb:63:fe:
88:64:5f:5d:3b:11:a5:59:6d:03:60:27:80:50:26:fe:2c:9c:
2c:5c:d5:58:14:0c:6b:9d:ca:85:1c:ce:3d:0b:e7:8e:d3:0c:
bb:fd:ae:ea:29:bd:a9:9c:39:2f:1a:17:d0:8d:83:f6:63:76:
5e:ef:a3:b3:4c:5d:3f:b0:76:6b:ca:08:87:5f:e3:88:af:54:
59:c6:8c:98:32:68:b6:d1:cf:9b:83:93:97:70:6b:3a:c3:ca:
63:db:bb:b5:24:48:fd:0f:97:cd:96:86:19:ac:ef:20:71:50:
ac:a6:72:84:f9:9c:23:e5:44:b7:b7:17:88:d7:04:b4:12:5f:
50:0e:9b:a5:78:c2:29:34:08:41:50:f2:d7:78:20:20:22:8e:
31:6b:dd:5d:fa:c7:9d:f2:39:4f:03:3d:31:ba:2d:cd:09:ed:
c1:bc:14:16:19:14:36:89:fd:35:b0:75:27:e4:24:69:7e:70:
2a:51:89:48:32:1a:4e:9f:91:59:e2:05:19:0f:fa:67:3f:89:
46:35:ae:53:ab:6e:24:ad:e0:0b:b9:ad:61:dd:98:7b:f9:a3:
f1:ca:39:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 15:15:46 2023 by rpki-client on console-ams.rpki-client.org