Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3D06450A50C411ED8B2EF79CF1222468.roa
File: 3D06450A50C411ED8B2EF79CF1222468.roa (raw, json)
Hash identifier: b5OjXTn0xUTXMzdMRxjWGBBzcsBdmbFd9aaiNS/t48A=
Subject key identifier: 4B:4B:3C:DB:1E:98:25:11:B4:3A:DA:FD:47:E7:B4:BC:7A:69:34:B7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0A17
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3D06450A50C411ED8B2EF79CF1222468.roa
Signing time: Thu 20 Oct 2022 22:12:09 +0000
ROA not before: Fri 21 Oct 2022 22:12:05 +0000
ROA not after: Sun 20 Oct 2024 22:12:05 +0000
asID: 133973
IP address blocks: 154.16.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2583 (0xa17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 21 22:12:05 2022 GMT
Not After : Oct 20 22:12:05 2024 GMT
Subject: CN=6351c7b8-a585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:db:c2:75:66:f1:6a:88:c6:66:e9:2e:ca:5e:
a9:8f:08:2d:2e:7c:5a:2f:33:f6:14:7d:3c:31:1a:
ed:7a:39:bf:a0:83:0f:52:ca:68:04:32:b4:54:1a:
dc:71:2d:bd:d6:7e:2d:f2:4a:2d:9c:e2:d4:79:9c:
6d:f6:e9:ae:0e:fd:84:9d:a5:69:a3:d9:b1:d7:c3:
d1:df:73:2c:43:4a:ff:4a:4e:d7:02:e1:8e:0b:63:
ec:8a:f9:91:60:e8:f5:67:f9:15:6d:e2:46:62:11:
5f:3b:a4:2f:e8:1f:ed:e6:fb:63:ea:86:58:46:72:
79:eb:36:ee:3d:c8:80:66:33:89:4c:9c:d9:76:a1:
b0:d4:8e:c8:05:6d:de:11:8d:96:cf:52:6b:23:43:
de:e9:13:cf:d8:43:50:fb:fb:27:7f:08:0f:57:3b:
2d:c2:c2:10:3f:f7:13:e9:5a:b4:2b:5f:a3:09:f4:
f2:8c:6f:b1:40:4a:a1:a3:1a:b0:56:ab:c8:51:a4:
37:77:72:97:5b:f6:fe:41:a4:9c:19:69:d6:f3:e5:
23:8e:3e:25:57:c4:a4:45:d1:74:a8:13:fe:97:bb:
e2:3a:ca:7c:10:25:0d:68:35:57:c8:4b:91:f6:51:
45:ef:24:05:d5:68:c1:1b:52:f6:28:97:c1:fc:35:
c7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4B:3C:DB:1E:98:25:11:B4:3A:DA:FD:47:E7:B4:BC:7A:69:34:B7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3D06450A50C411ED8B2EF79CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.123.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ec:9e:88:5f:dc:a3:9c:ad:4a:92:27:a5:ec:2c:4b:d0:94:
0d:ac:6e:46:b0:5f:c6:91:a1:43:20:8d:95:e9:e2:70:64:b4:
76:aa:79:5b:2c:b4:57:a4:d1:d9:6a:8c:1e:ba:3d:c1:2e:f8:
ab:43:72:a3:dc:c7:0d:26:fa:6d:50:7d:62:42:88:cb:cd:9d:
1d:d7:8d:40:d2:b5:82:fe:8f:9d:34:a9:c1:37:5b:cd:a7:95:
3e:64:8d:64:03:60:1f:84:d2:73:13:6b:36:a2:b4:14:39:19:
04:b5:7f:1a:00:b5:69:e0:c6:57:7d:9d:ba:e1:c9:d1:d1:80:
2f:e5:42:44:0e:78:c5:e4:47:26:0f:39:76:03:e9:8e:bc:b1:
62:e6:69:1d:37:55:17:1b:2f:a1:88:86:ec:64:e4:58:d2:ef:
33:42:fd:92:2b:5d:45:47:67:19:03:7e:67:aa:f7:37:bc:bc:
c1:47:89:8a:db:cc:7f:b6:7c:8c:ff:71:5e:0a:4e:44:96:a1:
32:2d:9d:16:bd:82:42:84:da:1d:34:15:87:51:cc:26:9b:a0:
d8:aa:05:67:87:a9:08:75:2a:78:3b:d6:e2:77:06:30:22:a1:
3c:af:41:0a:b2:41:98:c3:5e:0d:88:4f:40:b1:bc:d5:68:36:
f6:71:da:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org