Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E66FCDEB69311ED88DCBCBAF1222468.roa
File: 3E66FCDEB69311ED88DCBCBAF1222468.roa (raw, json)
Hash identifier: 4zTc3ccBg/yuy0Bl1VmtCQs7qS2//0a9d+cO1BU/aOw=
Subject key identifier: C0:52:2D:E0:CF:2B:36:62:69:F6:8E:19:5C:EB:21:55:A5:6E:AC:E9
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C58
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E66FCDEB69311ED88DCBCBAF1222468.roa
Signing time: Mon 27 Feb 2023 11:38:24 +0000
ROA not before: Mon 27 Feb 2023 11:38:20 +0000
ROA not after: Thu 27 Feb 2025 11:38:20 +0000
asID: 61317
IP address blocks: 154.16.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3160 (0xc58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 27 11:38:20 2023 GMT
Not After : Feb 27 11:38:20 2025 GMT
Subject: CN=63fc9630-c0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bb:66:71:f1:99:e1:c7:8c:b1:c4:8c:fd:de:
43:19:e1:98:6f:06:21:4f:04:a5:01:61:63:0b:87:
63:c8:f7:41:78:2e:24:17:84:d3:02:07:5c:97:e4:
52:65:ba:8b:4b:de:48:fa:63:89:8f:91:9e:ce:83:
5c:78:61:0c:e5:54:f6:f4:60:bd:ab:09:9c:68:24:
a3:a3:3f:1e:16:ba:2b:14:d0:fe:89:07:f0:96:d5:
7e:ac:eb:33:d8:2f:7d:21:3f:64:54:3b:ad:b0:22:
58:7c:fc:3e:9e:e1:f3:6f:ac:72:b2:ab:63:4d:9f:
47:6e:f1:bf:1e:da:bc:62:3d:a0:82:1f:f9:99:4c:
a3:74:3d:67:31:ae:00:cc:83:70:09:f2:13:bd:e5:
05:6e:49:31:98:a3:9b:ae:23:d2:c5:71:70:0d:9b:
d4:c9:b5:02:74:93:7a:e8:ff:6d:de:3a:86:26:16:
40:bb:d1:f3:11:7a:64:68:20:8a:43:e0:f6:51:f2:
a2:29:79:2f:53:87:59:0b:93:29:75:d4:c9:17:5a:
ea:c6:38:ba:7b:1c:c8:67:4c:e5:38:ee:6e:60:28:
66:f4:85:02:54:62:ae:93:7a:07:57:18:0c:af:08:
8b:9d:06:5a:20:fc:7e:09:0e:8d:d2:aa:8a:fd:11:
bf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:52:2D:E0:CF:2B:36:62:69:F6:8E:19:5C:EB:21:55:A5:6E:AC:E9
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E66FCDEB69311ED88DCBCBAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.100.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c5:56:11:96:2f:bf:27:bf:17:92:95:d2:1f:76:9b:be:12:
d2:3b:d6:ae:7b:39:9d:56:82:a3:5e:eb:b1:1b:d5:c7:7d:d4:
87:0b:9d:5d:13:9a:46:80:f5:d7:2a:fb:38:47:e4:18:6e:37:
da:97:72:3b:69:58:6f:9f:41:d9:38:60:f0:96:0a:0d:4d:5c:
41:ad:3c:e8:be:60:1b:ff:e6:e3:60:91:48:2b:5d:74:f1:02:
6b:6d:df:ca:7a:b0:61:bf:fe:cb:6c:89:13:09:ff:b4:16:fd:
58:c1:1c:9f:e1:67:00:b9:67:58:05:32:3b:d7:29:1e:86:96:
f2:68:46:e7:be:55:ca:27:05:ea:7b:f4:d1:e4:a5:d6:76:52:
1d:de:d5:70:27:89:72:6b:39:dc:6f:64:7b:33:d4:fa:40:17:
44:5f:cd:20:8f:c8:bf:b8:8e:d2:64:e9:91:62:03:ea:38:3a:
71:a7:68:16:0a:21:f2:22:91:64:74:15:7f:10:d0:8a:73:04:
2e:1b:be:0e:da:a3:69:eb:16:a3:a4:72:2d:04:36:e7:2f:c8:
05:e7:c8:a9:57:84:2a:68:ee:3d:a5:cf:f3:21:74:6d:dc:8d:
9f:78:b6:31:8b:08:77:58:ca:69:c5:b6:93:30:c3:75:36:3e:
c5:c1:65:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org