Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/43A5CF300F8611EE922A24144AD9E6FC.roa
File: 43A5CF300F8611EE922A24144AD9E6FC.roa (raw, json)
Hash identifier: 5hZ4UXpr/Pt82jXLm6TNmuCUpdjq12hNFVgbT/YuC+Y=
Subject key identifier: 41:AF:07:60:8F:2E:1D:09:20:87:46:13:AF:67:CE:68:6C:39:E4:1C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0FC3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/43A5CF300F8611EE922A24144AD9E6FC.roa
Signing time: Tue 20 Jun 2023 16:19:43 +0000
ROA not before: Tue 20 Jun 2023 16:19:39 +0000
ROA not after: Thu 19 Jun 2025 16:19:39 +0000
asID: 834
IP address blocks: 154.16.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4035 (0xfc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 20 16:19:39 2023 GMT
Not After : Jun 19 16:19:39 2025 GMT
Subject: CN=6491d19f-f311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1f:d5:8d:b3:c0:c7:5f:96:36:a7:45:6d:64:
f7:1a:c3:2d:42:31:c6:50:1d:9f:a0:57:2a:86:e4:
3f:68:04:29:08:e6:cb:33:f4:c4:1f:c6:4b:d8:ca:
17:f5:93:e9:73:8d:6e:4b:45:b0:1d:aa:bf:0c:7d:
35:c6:69:a4:43:02:11:03:62:c9:22:8c:4e:f1:83:
c2:b6:c8:fe:4c:56:72:c7:52:64:78:f8:05:d1:96:
8e:50:35:7b:03:92:cd:18:d4:d7:8c:fb:64:c4:32:
77:fc:86:49:e5:e0:dd:3c:a0:50:46:0f:24:04:7a:
0a:fb:6b:1d:80:ef:c3:ef:c6:98:f4:71:a5:13:68:
6a:96:e0:d3:00:a3:55:04:54:2a:fc:3c:9c:32:0e:
40:fa:7c:81:27:cf:fa:7c:a4:f3:90:f6:53:c4:cd:
20:91:a3:59:d5:ce:b6:9e:c8:20:6c:a4:af:ff:06:
05:8a:61:6c:3d:62:e3:d6:fb:a0:8a:0c:d7:ac:10:
a9:b9:70:8c:e6:21:68:3d:54:cb:fd:23:47:b9:e6:
58:83:72:10:3f:60:02:8d:42:7f:28:c8:dd:8b:6f:
57:72:04:04:52:95:f5:db:50:3d:76:13:be:a8:48:
f3:b8:bc:c9:ef:c5:25:5c:72:b3:a6:c7:74:40:89:
ad:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AF:07:60:8F:2E:1D:09:20:87:46:13:AF:67:CE:68:6C:39:E4:1C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/43A5CF300F8611EE922A24144AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.123.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b3:88:1e:92:ed:48:8d:5b:53:1f:f4:d3:4e:91:f6:9d:85:
a8:ef:e1:85:93:53:01:17:5d:c1:99:72:d7:2c:71:38:38:89:
ae:c8:a4:ea:32:af:f7:ce:be:63:91:6a:53:40:0d:7d:31:dd:
4d:d3:55:dc:93:12:d5:e3:b2:c5:5f:1c:78:57:85:39:a0:a8:
06:b7:cc:ec:9e:e5:63:75:4d:35:a5:7f:24:e0:cb:48:c6:ff:
88:e5:9b:93:9e:4c:ac:18:d4:37:55:e7:b7:aa:fc:d5:53:34:
91:3d:0e:ba:57:30:5f:f9:a8:15:f3:bc:a9:24:89:bc:62:72:
2f:6e:89:a9:bf:5d:7e:c2:57:89:90:5b:ce:69:b4:68:8a:2b:
be:12:2b:28:a6:b7:8d:58:ca:5c:8c:b5:e9:37:a0:98:5d:46:
02:f1:b3:b2:16:04:57:56:41:d0:99:a3:85:02:a8:37:5e:1e:
a0:b2:66:51:e7:bc:d5:c1:51:c2:1c:35:05:d8:de:11:62:5e:
61:c5:e2:fc:ae:1c:53:de:dd:05:dd:57:07:68:7c:09:92:bb:
44:c4:55:98:82:29:19:8f:4b:c9:14:0c:c1:1f:2a:20:c9:09:
f8:06:08:f4:4c:c5:b3:d1:92:21:ea:1e:00:c2:3b:11:cd:a0:
f5:14:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 08:01:13 2023 by rpki-client on console-fra.rpki-client.org