Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2F46039087BE11EBAE6A4E30F8AEA228.roa
File: 2F46039087BE11EBAE6A4E30F8AEA228.roa (raw, json)
Hash identifier: K1DwWNdzDi41pYXQdP3E4plIYJqd4LifvUVQaCBJ0Vs=
Subject key identifier: FD:93:F4:65:E7:00:90:AE:3B:CA:A5:2C:31:6D:64:6C:37:BE:F6:46
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 04DF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2F46039087BE11EBAE6A4E30F8AEA228.roa
Signing time: Thu 18 Mar 2021 07:47:27 +0000
ROA not before: Thu 18 Mar 2021 07:47:23 +0000
ROA not after: Wed 12 Mar 2025 07:47:23 +0000
asID: 397423
IP address blocks: 154.16.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1247 (0x4df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 18 07:47:23 2021 GMT
Not After : Mar 12 07:47:23 2025 GMT
Subject: CN=6053058f-6326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:b2:e3:f6:1a:86:cd:16:2a:54:7d:78:92:
17:48:70:a1:cc:af:08:a1:23:2c:f3:45:58:be:9b:
06:ab:60:0b:77:0b:0c:a3:b9:95:15:22:3a:7a:f5:
07:01:01:a1:7b:45:6a:28:20:9a:8d:7e:af:8a:f3:
7c:e5:a2:4a:a7:30:06:ab:a0:12:2a:bd:76:ce:19:
70:92:e2:6c:42:30:d7:31:c9:b2:ef:76:6c:85:5b:
ac:77:28:cf:c1:70:41:f9:90:ba:35:85:c5:6f:70:
25:c6:9a:48:b4:5f:4f:cf:53:46:44:7b:50:e2:d7:
f9:5b:bf:71:25:f8:3d:e9:0d:30:70:6e:95:45:77:
93:fc:08:06:b2:fe:67:91:9e:5b:d6:ae:8e:9f:7c:
2d:89:1e:7a:f2:a8:c1:50:09:db:8e:82:bb:f0:f6:
5b:85:ff:79:66:d2:18:2e:c2:c5:65:60:32:d7:1d:
62:5c:77:62:4b:0d:cb:7f:43:8f:8f:6d:f6:9d:38:
8e:d9:00:6b:61:3a:d6:3f:f8:b7:24:de:a1:50:8c:
ac:fc:06:64:55:25:81:e4:bf:c3:62:99:98:ee:e0:
c8:bf:9f:f3:80:51:79:b5:3b:e3:c1:29:28:a8:fc:
c3:01:31:19:37:97:7f:78:db:2b:9e:31:88:f7:b0:
35:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:93:F4:65:E7:00:90:AE:3B:CA:A5:2C:31:6D:64:6C:37:BE:F6:46
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2F46039087BE11EBAE6A4E30F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.170.0/24
Signature Algorithm: sha256WithRSAEncryption
12:5f:d7:68:4c:f7:56:70:fd:59:ff:8f:68:d6:ad:ed:4e:62:
58:86:05:3d:9c:3b:0d:f7:4a:33:a3:36:d5:4d:47:42:38:61:
41:64:6e:28:da:42:7b:85:ab:2e:e5:41:d5:12:70:04:0c:e6:
91:17:89:cf:d8:8d:fa:8b:b7:04:d6:e4:d5:dc:c9:dd:24:b9:
62:cb:39:a7:59:c4:1e:92:57:c4:66:8b:e5:13:40:9d:7a:6d:
37:03:a5:e9:f5:39:02:c3:0f:fc:5f:8e:63:90:6e:30:22:51:
aa:59:83:e4:cd:8d:d7:db:af:54:82:0b:e3:c7:81:91:25:4e:
35:5c:ef:36:02:e8:83:26:ba:ae:2f:d9:82:a0:32:7d:af:28:
f7:13:06:61:d5:30:0b:75:2c:e8:60:22:31:4f:08:ae:ce:07:
2e:e2:29:76:1b:ff:d8:e3:f9:e0:67:1a:16:e6:df:1f:19:d9:
1b:d7:87:f3:4a:42:dc:b6:92:61:79:7d:b0:36:4f:7b:d1:a4:
95:0b:fd:18:b4:66:c5:bf:5b:43:c5:be:39:96:25:0e:47:10:
49:b4:2f:7c:7f:a6:d5:bd:35:ce:93:d0:f4:a4:9e:64:c8:59:
4d:7a:37:fc:37:16:5b:1f:3a:df:8b:1b:63:c2:cb:a6:15:05:
11:a3:e5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org