Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/360BBC74F2EC11ED996F38554AD9E6FC.roa
File: 360BBC74F2EC11ED996F38554AD9E6FC.roa (raw, json)
Hash identifier: MpOChQiEAYYy1V7BctwHG+FZ+FUSf/PzXHNaH0k2vMk=
Subject key identifier: 08:6F:A3:82:E9:A0:94:D3:71:8B:81:87:FE:71:00:EA:48:51:9A:51
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0DB7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/360BBC74F2EC11ED996F38554AD9E6FC.roa
Signing time: Mon 15 May 2023 06:46:25 +0000
ROA not before: Mon 15 May 2023 06:46:21 +0000
ROA not after: Wed 14 May 2025 06:46:21 +0000
asID: 834
IP address blocks: 154.16.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3511 (0xdb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 15 06:46:21 2023 GMT
Not After : May 14 06:46:21 2025 GMT
Subject: CN=6461d541-2637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e3:76:29:5e:81:17:bd:3a:ac:25:40:ab:1b:
0c:7d:1d:13:70:49:e2:d7:74:39:fb:7a:44:90:14:
a1:71:16:65:e1:9f:e7:f3:ba:32:b5:00:b5:1b:c3:
31:31:db:8a:6c:84:92:5e:41:87:93:bc:f6:98:f6:
94:21:9f:00:6d:c0:41:81:6d:ea:bd:54:2c:71:80:
b6:0f:00:3b:ed:ae:23:d0:b3:ca:06:a2:17:2e:de:
5c:5d:84:fb:9e:68:e0:24:50:3a:41:37:47:c8:a1:
fc:26:c2:d9:a1:f3:f3:d7:93:0d:ff:49:7c:09:9e:
f1:b9:be:62:f9:68:5f:0b:58:6a:39:0b:b5:a3:77:
f0:3a:3e:fc:31:e8:06:03:4b:27:12:e5:95:c0:18:
4d:6b:ae:d8:ad:34:be:e2:0f:31:e1:2b:1d:02:89:
24:12:b9:9b:15:dc:54:25:91:9b:7e:37:68:7b:e6:
4d:58:9f:6c:6c:1f:d3:4c:34:1a:58:1b:1c:ab:4e:
8b:bf:8e:89:ab:9a:c5:e3:86:6c:7a:ee:ca:8e:14:
df:d0:b3:44:33:a7:66:13:53:ba:36:6e:55:96:bf:
c5:64:db:fc:5a:18:9e:f3:07:01:bf:8a:43:c2:87:
a8:e8:63:0b:0b:3b:32:dd:60:a7:ec:f6:63:43:77:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6F:A3:82:E9:A0:94:D3:71:8B:81:87:FE:71:00:EA:48:51:9A:51
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/360BBC74F2EC11ED996F38554AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.248.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:dc:39:c7:cf:7b:a5:ab:12:d5:76:34:d5:38:67:e8:e7:5c:
15:81:19:8e:56:d2:26:e4:ea:88:75:55:c2:54:29:86:83:ab:
85:79:67:0c:68:09:d1:e7:90:ff:df:46:fd:c6:c0:ad:57:48:
f9:79:9d:0b:8e:f3:b4:c3:d2:d1:d4:92:5a:9e:f4:63:ca:18:
6f:84:60:05:8c:09:91:78:7f:b6:88:b6:00:51:98:03:ba:3a:
28:ec:64:02:74:74:7c:d0:02:74:a2:79:15:fe:4b:56:92:20:
e8:02:49:98:60:0c:85:d0:52:db:a2:ef:69:33:17:ff:0e:74:
2c:88:cd:1c:18:e3:9c:bd:ad:20:bb:ec:10:58:0e:93:9d:2c:
73:22:12:06:84:f5:e7:4d:f5:7b:e1:91:b7:b7:9f:60:2b:b7:
2b:ee:b8:1b:8d:3d:dc:12:29:de:ee:de:c9:f8:a4:a5:a8:1c:
14:97:49:ce:b1:d4:7c:47:6b:7f:e2:7b:c4:a4:79:f6:66:7c:
c9:1b:d1:62:c3:f9:46:b3:a8:12:40:5d:94:bd:1c:9f:17:45:
f5:2a:f4:be:e7:32:b6:39:62:8f:5c:65:90:60:65:a0:9b:76:
c5:4d:8c:e1:27:c1:c2:f5:4b:74:6b:74:bb:f9:c2:4f:62:88:
2d:ec:ee:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org