Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/48F7FD3EB69211ED982DE3B7F1222468.roa
File: 48F7FD3EB69211ED982DE3B7F1222468.roa (raw, json)
Hash identifier: wT6mZvGNautEALeKn6iRhFJ/z6WQOLXWb3MDj5ckDqU=
Subject key identifier: 2A:FE:0C:32:70:4B:40:CF:18:01:79:C0:F7:F0:BC:00:FC:53:79:0F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C48
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/48F7FD3EB69211ED982DE3B7F1222468.roa
Signing time: Mon 27 Feb 2023 11:31:32 +0000
ROA not before: Mon 27 Feb 2023 11:31:29 +0000
ROA not after: Thu 27 Feb 2025 11:31:29 +0000
asID: 61317
IP address blocks: 154.16.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3144 (0xc48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 27 11:31:29 2023 GMT
Not After : Feb 27 11:31:29 2025 GMT
Subject: CN=63fc9494-6847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:01:8e:86:44:ec:c8:b7:70:f7:5a:04:7f:
6c:b5:07:1a:41:b5:6c:cf:60:61:21:5c:6f:75:6c:
f7:80:70:c7:46:d4:17:61:2c:81:8e:ea:4e:43:77:
e3:4c:2e:4d:1c:66:96:9c:92:98:e2:d0:ff:f2:c1:
e5:1f:f7:84:be:c8:4b:33:2c:3a:a5:bf:0b:74:d3:
ff:ca:7c:65:f8:f8:39:c6:86:0d:89:af:bd:8b:57:
fa:24:30:46:a3:68:41:9f:f4:22:7b:19:e4:6f:fa:
38:72:ff:ac:07:5d:5c:8b:6f:4e:60:ae:a5:8d:ef:
75:8c:a8:f0:f6:90:7c:12:ab:0c:ba:2c:25:ea:55:
d5:d5:53:6a:a8:74:ee:93:39:16:2e:f2:7b:0c:97:
04:ff:77:42:5d:e5:10:3d:7c:1c:10:d0:62:be:a1:
17:63:bc:0a:f6:79:e6:15:09:de:82:ee:c0:4a:5d:
79:17:5c:cc:93:b2:ad:c7:a9:fc:c1:c0:25:92:3e:
30:c4:40:ac:66:68:5c:86:54:8d:7a:f6:59:d1:ce:
d7:a6:4d:48:92:95:49:4a:15:9b:89:c7:52:73:6a:
77:99:8c:2e:1f:ae:d5:b6:ad:8f:f7:a9:82:a0:19:
ac:fa:9f:35:0c:25:68:5d:cf:e2:e5:71:84:73:7d:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FE:0C:32:70:4B:40:CF:18:01:79:C0:F7:F0:BC:00:FC:53:79:0F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/48F7FD3EB69211ED982DE3B7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.85.0/24
Signature Algorithm: sha256WithRSAEncryption
79:3a:36:54:d8:95:38:a2:35:f2:a1:65:55:60:af:00:6d:1c:
89:f8:57:eb:15:65:d1:fd:ec:c2:3f:69:60:33:17:0b:39:f2:
d0:5c:f1:c5:93:e6:5b:3e:a1:bd:e3:de:f3:02:70:08:49:4f:
38:a5:cc:dc:a1:91:bb:4f:0d:6b:1a:25:cb:dd:12:91:cf:0c:
d5:c4:2d:33:a8:cf:d4:61:7c:96:c9:2d:c3:5d:b7:6d:c2:a5:
ea:86:5a:1d:34:44:73:48:c1:5d:ac:a1:69:4e:ac:28:72:7f:
e0:5f:94:db:b9:96:3d:ab:f0:5e:8a:15:55:bb:3e:34:a9:9e:
a1:73:24:fb:0d:34:5a:c8:1c:05:52:a0:37:a5:fb:8e:01:61:
9c:1a:ca:46:8c:dc:c4:a1:ba:bc:32:f4:b9:80:41:f6:77:d5:
fb:07:00:03:ed:da:ce:06:d1:e2:a6:81:e4:b2:3c:61:de:fd:
8e:96:26:60:70:16:ea:e3:cd:6f:9d:3b:62:9e:9a:0b:b0:15:
6b:ce:89:1b:a2:7c:07:5f:a6:64:af:c6:65:e0:8c:19:91:63:
1a:f3:3a:9e:21:6a:cb:a8:99:c3:82:8a:ef:80:49:94:d5:96:
a3:b6:dc:96:4b:fa:6a:9e:ef:ec:36:b6:14:b1:c8:96:4c:97:
56:47:a6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org