Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/41807E38004C11EE808E96774AD9E6FC.roa
File: 41807E38004C11EE808E96774AD9E6FC.roa (raw, json)
Hash identifier: 5vz87NWXujvwWAmKM0mf6c4TCNmEkfcLmIfb9wTMQ+w=
Subject key identifier: EE:A2:01:0C:81:F7:63:45:11:7E:B0:2E:CB:52:90:16:0D:CD:29:CB
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E68
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/41807E38004C11EE808E96774AD9E6FC.roa
Signing time: Thu 01 Jun 2023 07:16:41 +0000
ROA not before: Thu 01 Jun 2023 07:16:37 +0000
ROA not after: Sun 01 Jun 2025 07:16:37 +0000
asID: 834
IP address blocks: 154.16.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3688 (0xe68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 1 07:16:37 2023 GMT
Not After : Jun 1 07:16:37 2025 GMT
Subject: CN=647845d9-a3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:08:a7:40:1e:7b:67:3c:b9:8b:60:0b:a6:fc:
9b:b4:0c:ee:21:76:32:d2:5b:dc:8c:71:96:2c:98:
a1:5e:97:88:c9:4d:5f:95:81:e8:ac:2f:b2:aa:87:
7f:1c:4f:20:89:77:ec:6e:5c:53:85:6f:d2:5a:ae:
4e:49:8b:f6:50:95:52:bd:5d:4c:52:03:e6:24:d8:
9d:2b:90:34:9f:8d:26:30:f2:90:24:44:11:7b:39:
fe:54:07:3a:10:fa:60:06:66:bd:bd:ef:c8:f6:58:
0c:62:89:5e:e0:de:73:fd:75:d3:f2:4e:27:1c:ea:
8f:d8:98:11:cb:7d:69:33:69:77:5e:f9:c0:b4:96:
bf:75:27:02:a6:b7:ae:7a:11:f8:e4:79:e7:be:86:
db:96:de:9a:41:95:65:20:5f:a9:94:6c:fb:0a:76:
4f:7b:ee:61:0c:97:b8:ab:bc:d6:18:7f:ba:06:57:
30:5b:06:72:f9:a4:ec:b1:94:28:6c:98:68:6d:bf:
dd:b0:99:15:e7:ef:f3:13:8b:ba:95:13:e1:a1:ed:
ad:0f:ef:f8:22:f3:9c:c6:0f:4c:fc:8d:20:f8:f1:
7d:78:46:1d:8e:df:b7:b9:d3:db:00:8c:28:ae:61:
d9:fd:f1:fe:01:98:63:b9:8f:bc:de:51:11:19:55:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A2:01:0C:81:F7:63:45:11:7E:B0:2E:CB:52:90:16:0D:CD:29:CB
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/41807E38004C11EE808E96774AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.101.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a9:e3:b6:ea:30:e1:b7:0d:b5:a8:ea:10:80:52:4d:b3:07:
86:de:7d:9a:e3:87:80:de:f8:c3:64:21:8d:56:e5:f8:d2:3a:
a5:9c:0f:1c:65:7c:77:c0:58:1c:a2:d1:e2:5a:fd:1f:14:2b:
12:d5:3f:0e:5d:2b:9e:8b:ea:78:49:6a:4f:56:ed:32:45:b9:
7d:53:d1:56:15:63:16:10:98:29:59:df:56:45:8b:e4:b7:23:
3e:36:f2:0a:f6:10:ca:c7:de:d4:01:ea:2f:cc:0f:78:64:e5:
30:26:1a:e0:38:5a:db:d5:bf:07:49:c9:1a:ac:e8:2d:35:75:
f4:e5:c4:aa:50:70:3d:c2:62:5a:78:65:a7:41:92:ea:5a:a3:
26:af:33:94:4b:7f:58:a3:d0:f7:88:3d:b1:30:47:12:61:8c:
d2:43:c4:84:59:a6:c5:d9:28:ad:48:f7:cb:2c:9c:7e:50:7c:
be:a8:47:0d:14:bc:e3:7d:bc:09:a9:e4:08:f3:e8:3f:29:0c:
9b:3e:ae:33:f6:98:72:0c:0b:00:64:2c:ef:b9:ba:4d:25:cf:
39:2c:e2:d0:64:86:95:89:4d:39:4b:7d:92:c0:73:e5:b1:79:
de:4c:1f:e2:0c:3e:c6:25:25:24:77:46:cc:f7:4b:b8:54:7f:
b5:d6:e8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org