Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32FD011CB69411ED8E66B9BDF1222468.roa
File: 32FD011CB69411ED8E66B9BDF1222468.roa (raw, json)
Hash identifier: key6dsjWBcq1Mnm4BcrX0l3IfykNfCLU8n9lh1Cjkto=
Subject key identifier: 97:0A:77:E6:6F:97:C9:07:37:A0:A6:50:99:58:B6:10:A4:B2:F8:3C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C5E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32FD011CB69411ED8E66B9BDF1222468.roa
Signing time: Mon 27 Feb 2023 11:45:15 +0000
ROA not before: Mon 27 Feb 2023 11:45:10 +0000
ROA not after: Thu 27 Feb 2025 11:45:10 +0000
asID: 61317
IP address blocks: 154.16.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3166 (0xc5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 27 11:45:10 2023 GMT
Not After : Feb 27 11:45:10 2025 GMT
Subject: CN=63fc97ca-6194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:51:9d:de:fc:04:30:15:0c:a1:bd:89:5f:
e0:ac:77:2e:eb:5d:f8:c8:9b:1e:14:c5:e8:38:03:
21:e2:2a:8e:d1:ec:ec:53:4d:e7:f1:a1:09:36:12:
a9:bd:ad:9c:66:8c:ea:65:0f:4a:5e:a4:13:13:af:
b7:35:a7:83:fa:ff:b5:cb:29:25:08:6e:ef:3d:50:
59:d2:a3:55:d3:33:6f:b7:d1:b8:fd:5b:3e:7b:54:
58:d6:a5:a8:0d:7d:53:b7:ff:ea:be:4f:12:3a:3e:
45:92:95:69:5a:20:a8:58:bb:c3:87:48:84:78:9a:
f4:ce:1a:12:20:e8:31:41:a2:cb:a0:a9:e5:33:38:
12:4b:59:23:b6:5f:81:42:c3:94:0c:be:dd:45:c0:
48:14:ec:54:6e:a1:77:5c:7e:a6:af:6e:4e:6a:38:
a8:57:89:c1:4e:b6:88:8b:64:da:04:fc:8d:4d:35:
73:02:2c:29:ae:bf:01:14:b0:b8:17:a8:d6:09:61:
69:36:72:85:2d:f7:8e:e3:d3:a8:3b:64:47:5f:2f:
90:a1:82:b3:3e:fb:84:16:ef:5e:04:2f:d1:cc:ff:
de:a6:b4:b2:85:88:73:be:b0:b3:19:db:09:2c:c6:
17:eb:f7:9f:a2:83:f9:f0:4a:2a:86:bb:c0:ae:dc:
14:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0A:77:E6:6F:97:C9:07:37:A0:A6:50:99:58:B6:10:A4:B2:F8:3C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/32FD011CB69411ED8E66B9BDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.103.0/24
Signature Algorithm: sha256WithRSAEncryption
49:aa:93:c2:ca:6a:fb:06:29:5c:58:9e:85:bc:a5:7b:fe:9a:
dc:a8:fa:ac:27:f8:66:b2:7b:39:90:6f:5e:28:6e:ae:30:c9:
04:0e:9c:eb:b3:9a:0e:c9:27:a7:de:19:48:e3:01:a9:21:39:
a5:28:ed:52:e8:71:10:72:2e:6d:05:86:67:38:47:d8:b8:ed:
50:91:02:5c:78:af:3e:b3:5a:01:40:1f:93:d3:28:9d:6a:ba:
0e:84:5e:d3:aa:ad:ff:f4:5d:10:51:62:df:46:e2:f3:a9:01:
22:91:91:3c:74:55:13:42:fb:0d:2d:eb:9e:03:5f:90:25:34:
02:73:36:7c:66:db:43:47:4f:99:0d:ac:17:54:f0:0a:d0:9b:
63:27:d6:b1:f0:4d:fe:dc:33:db:47:48:81:42:d7:d4:96:de:
e0:41:68:24:85:1d:0f:b9:6c:e8:49:da:9b:0d:7b:a3:4b:f7:
fc:1b:d4:19:21:dc:c4:35:e6:36:5c:16:d4:fd:cc:71:38:11:
b1:09:df:a6:b1:85:b6:47:a4:69:8e:2e:cb:83:2c:d5:06:fb:
0d:d6:3e:4f:35:64:29:ed:f8:e7:ca:04:7f:37:f1:a1:db:6c:
a8:22:b2:7d:d2:99:fb:92:5a:8c:35:52:93:7a:7d:da:2d:43:
49:9d:89:10
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDF4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAyMjcxMTQ1MTBaFw0yNTAyMjcxMTQ1MTBaMBgxFjAU
BgNVBAMMDTYzZmM5N2NhLTYxOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLflGd3vwEMBUMob2JX+Csdy7rXfjImx4Uxeg4AyHiKo7R7OxTTefxoQk2
Eqm9rZxmjOplD0pepBMTr7c1p4P6/7XLKSUIbu89UFnSo1XTM2+30bj9Wz57VFjW
pagNfVO3/+q+TxI6PkWSlWlaIKhYu8OHSIR4mvTOGhIg6DFBosugqeUzOBJLWSO2
X4FCw5QMvt1FwEgU7FRuoXdcfqavbk5qOKhXicFOtoiLZNoE/I1NNXMCLCmuvwEU
sLgXqNYJYWk2coUt947j06g7ZEdfL5ChgrM++4QW714EL9HM/96mtLKFiHO+sLMZ
2wksxhfr95+ig/nwSiqGu8Cu3BTBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUlwp3
5m+XyQc3oKZQmVi2EKSy+DwwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzMyRkQwMTFDQjY5NDExRUQ4RTY2QjlCREYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEGcwDQYJKoZIhvcNAQEL
BQADggEBAEmqk8LKavsGKVxYnoW8pXv+mtyo+qwn+GayezmQb14obq4wyQQOnOuz
mg7JJ6feGUjjAakhOaUo7VLocRByLm0Fhmc4R9i47VCRAlx4rz6zWgFAH5PTKJ1q
ug6EXtOqrf/0XRBRYt9G4vOpASKRkTx0VRNC+w0t654DX5AlNAJzNnxm20NHT5kN
rBdU8ArQm2Mn1rHwTf7cM9tHSIFC19SW3uBBaCSFHQ+5bOhJ2psNe6NL9/wb1Bkh
3MQ15jZcFtT9zHE4EbEJ36axhbZHpGmOLsuDLNUG+w3WPk81ZCnt+OfKBH838aHb
bKgisn3SmfuSWow1UpN6fdotQ0mdiRA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org