Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5225FABAEE4011ED89D89C7E4AD9E6FC.roa
File: 5225FABAEE4011ED89D89C7E4AD9E6FC.roa (raw, json)
Hash identifier: qUMB7Hc7C1vlIpQ/0C2UHsUW95mxCtQvQFFKKv28788=
Subject key identifier: B3:05:F3:0F:4C:9C:14:6E:EB:70:CE:5D:D5:9B:D7:BB:91:2B:6D:4D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D9F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5225FABAEE4011ED89D89C7E4AD9E6FC.roa
Signing time: Tue 09 May 2023 08:05:54 +0000
ROA not before: Tue 09 May 2023 08:05:50 +0000
ROA not after: Thu 08 May 2025 08:05:50 +0000
asID: 834
IP address blocks: 154.16.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3487 (0xd9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 9 08:05:50 2023 GMT
Not After : May 8 08:05:50 2025 GMT
Subject: CN=6459fee2-d473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:b6:fd:6a:0d:91:57:d6:56:45:e9:0c:e8:
d0:77:c4:da:d0:51:ca:de:f6:4b:ec:14:35:99:53:
91:5b:98:e2:53:15:0b:c9:39:b5:4b:0d:34:a2:ff:
09:1e:0d:71:5b:02:c2:51:7a:49:5a:10:a2:a8:4b:
27:e9:fa:1e:fb:df:dd:a8:f6:51:d4:a7:f5:b3:e2:
7f:ad:82:b6:83:3e:6e:05:f0:3a:dc:63:99:dd:b5:
94:f7:d4:f6:de:09:c8:ab:22:9a:ba:11:65:99:4a:
50:37:6d:a1:38:bb:c1:01:9c:cd:9c:a7:c5:8c:61:
7b:93:5b:39:d3:f4:b3:48:97:f5:02:4c:ca:a0:10:
f9:4f:72:d0:03:e0:6a:79:2f:0e:2f:b4:07:e7:1f:
49:fd:06:ee:b3:7f:8f:cf:12:a6:cb:20:1a:92:4f:
26:80:02:90:da:bd:76:4f:72:26:35:97:61:fd:0e:
d2:f2:69:cd:da:3d:b6:2c:f2:04:21:ae:ef:06:8a:
39:12:c4:32:76:40:8a:91:d3:a1:23:b5:db:c0:c1:
a9:b1:1a:8c:64:68:55:58:b5:15:ad:ab:18:e1:86:
39:f2:d3:3c:72:4d:48:f0:f1:85:43:e9:c8:0c:d6:
4b:e2:77:57:88:da:d9:54:75:ec:06:da:65:de:b2:
8b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:05:F3:0F:4C:9C:14:6E:EB:70:CE:5D:D5:9B:D7:BB:91:2B:6D:4D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5225FABAEE4011ED89D89C7E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.41.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c4:77:87:72:c9:33:64:d9:46:01:c6:82:eb:8d:62:ef:b9:
08:10:5c:c8:c4:03:22:7c:7d:3a:9a:eb:c9:c9:73:72:e5:6e:
a7:5d:a8:70:bb:0d:79:2d:8a:d1:e1:ed:d4:44:f0:c9:c1:e4:
18:ca:ce:4a:c3:43:5e:61:ec:03:5d:60:5a:94:95:0b:19:e9:
41:58:00:39:b7:dd:44:74:1e:39:3b:1e:cb:fa:32:d0:98:49:
c8:bc:06:71:de:82:00:c3:47:24:9a:d1:92:99:14:0d:71:5a:
21:20:70:8f:5c:b3:d3:90:08:f7:59:41:83:46:61:89:23:3d:
92:31:f8:78:dd:80:3c:d7:54:97:8a:d6:1d:6c:ae:b7:ec:3b:
5a:5e:17:fa:6e:8d:c5:29:cc:b2:b8:ec:65:09:7f:87:58:de:
ae:52:4f:08:87:df:f5:b8:a6:35:0d:00:18:f6:51:5b:ed:7a:
ce:81:fd:68:8e:bb:8c:0e:e0:92:cf:fa:ea:2a:bf:55:54:c2:
b7:c2:a6:5d:04:e7:41:32:e9:e2:a9:fc:99:b3:6e:e2:d2:fe:
aa:d5:20:a7:55:38:c8:a0:a5:a3:c6:83:9c:42:93:c1:f4:78:
8e:a7:3a:7e:93:d2:1f:7b:24:b4:54:68:9e:5f:fb:fb:cf:90:
37:89:a1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org