Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/409BF462A54B11EE89710A3CD25BE465.roa
File: 409BF462A54B11EE89710A3CD25BE465.roa (raw, json)
Hash identifier: Yrb3nrEpzaoxGgeB6kO7qJxjYLYyCEZNZNxQIksLcfQ=
Subject key identifier: BF:3D:CD:E8:F6:EC:DE:D4:D0:D4:2A:3C:4F:25:B7:B8:75:D5:C7:A7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 140B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/409BF462A54B11EE89710A3CD25BE465.roa
Signing time: Thu 28 Dec 2023 06:35:12 +0000
ROA not before: Thu 28 Dec 2023 06:35:09 +0000
ROA not after: Sun 28 Dec 2025 06:35:09 +0000
asID: 3320
IP address blocks: 154.16.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5131 (0x140b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 28 06:35:09 2023 GMT
Not After : Dec 28 06:35:09 2025 GMT
Subject: CN=658d1720-7401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:7c:4c:ed:cd:2f:b3:4f:24:25:10:74:5f:
f6:7e:be:40:cc:07:7e:54:a8:88:b0:9f:33:b8:1a:
32:d9:89:1f:57:76:0b:dd:49:dd:57:25:ba:f2:49:
d1:52:17:19:ea:71:6a:28:06:17:69:b0:4e:95:8a:
d6:25:e4:8f:0a:2a:34:db:d5:fd:ed:3d:ed:a6:d3:
23:9d:94:2d:76:3e:7b:ca:ae:34:8d:4b:81:cb:68:
54:6b:dc:74:16:bc:8a:af:29:c3:2d:7b:2b:df:7b:
50:51:0c:55:46:64:87:65:3b:f1:55:9a:a6:0d:63:
43:c0:eb:62:cf:ba:7b:04:58:0c:00:77:7a:3a:46:
5d:41:f7:d0:bd:32:e2:72:b9:e5:92:d9:be:b4:a7:
af:d9:54:e9:ea:0e:d7:73:c2:55:ff:c1:fa:58:2f:
87:57:28:08:66:06:1c:67:72:78:d8:23:70:44:9d:
8d:6e:09:fb:fc:27:6e:3a:0e:6c:c4:27:35:f1:6e:
1a:53:0e:de:43:5a:d7:e8:ab:66:b2:eb:bc:a3:a9:
97:0c:f4:f6:3c:1e:73:15:98:44:e3:9a:43:d7:60:
0e:f3:b2:e8:67:00:db:1c:86:13:03:31:2f:ef:fe:
90:fa:51:a3:32:22:4b:65:df:5e:ff:3d:28:52:c6:
cc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3D:CD:E8:F6:EC:DE:D4:D0:D4:2A:3C:4F:25:B7:B8:75:D5:C7:A7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/409BF462A54B11EE89710A3CD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.230.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e3:85:cf:5b:2e:96:a9:2a:02:45:d7:f2:b0:25:36:a4:43:
8f:69:8d:30:d3:93:bf:37:64:e8:ee:cc:a7:39:f3:7d:c6:d4:
6f:95:9b:c3:5a:40:bd:bf:6b:13:a9:88:c3:e8:34:7f:a7:36:
99:b1:d0:73:9b:34:55:31:60:b4:f7:1f:ea:90:0e:6e:60:2a:
8a:61:dd:8a:7c:41:a2:57:d4:89:e0:fa:df:81:31:70:1d:08:
43:c2:1a:67:50:51:99:ac:a0:fd:49:c5:8a:c6:97:37:2d:57:
1c:31:33:db:74:5f:88:6a:e0:fe:54:4c:3c:03:bd:e1:a4:21:
db:35:cf:85:af:8b:d5:d7:0a:03:53:bc:55:b7:ed:74:b3:7a:
7a:86:a8:d2:78:f1:b8:c6:21:fd:22:7b:e2:01:4c:69:f3:5a:
9c:69:9d:37:6d:5d:00:9e:4a:9e:48:06:14:e6:a9:e4:49:2d:
de:5b:70:f1:3d:3a:88:a4:bc:c7:1e:bc:69:58:45:8f:4d:6c:
29:39:34:b8:a1:1c:2f:f8:3f:45:66:a8:67:f4:3b:c4:a5:c6:
b6:4e:f8:4d:38:c4:5a:f5:c9:5a:7d:7f:ca:82:09:60:34:46:
ed:00:97:64:80:69:16:d7:f4:6a:19:e0:4c:48:6c:0a:e4:fa:
3d:08:fb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 08:55:15 2023 by rpki-client on console-ams.rpki-client.org