Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5B34B7A2967211EDAFE076E5F1222468.roa
File: 5B34B7A2967211EDAFE076E5F1222468.roa (raw, json)
Hash identifier: dEjarmxhEcLD9VVUJ+FBQHy5RkJf+v4K82lutqr+DP4=
Subject key identifier: 3A:5F:43:B3:7C:5F:9C:0D:BB:77:AB:F6:2C:6E:33:9C:17:90:B1:06
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0B7F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5B34B7A2967211EDAFE076E5F1222468.roa
Signing time: Tue 17 Jan 2023 14:22:22 +0000
ROA not before: Tue 17 Jan 2023 14:22:18 +0000
ROA not after: Wed 17 Jan 2024 14:22:18 +0000
asID: 204843
IP address blocks: 154.16.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2943 (0xb7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 17 14:22:18 2023 GMT
Not After : Jan 17 14:22:18 2024 GMT
Subject: CN=63c6af1e-daae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:f2:15:bc:86:52:bb:90:25:05:09:b4:5f:
a3:36:49:c9:96:e9:3b:d7:a4:88:f6:06:bb:21:78:
18:ed:fa:32:55:05:7c:1f:ed:49:18:ab:50:ff:7f:
41:06:0a:5b:2f:d0:de:1b:ac:22:47:89:a6:7f:8f:
23:c4:66:6e:82:6d:f1:6f:a2:fe:9c:3f:10:4b:75:
bb:89:9f:cd:98:7f:75:c4:b0:b2:43:90:58:e6:14:
8d:dd:c3:0a:e2:ae:3e:93:03:eb:f1:da:8f:16:8a:
45:16:20:fa:c1:cc:31:7e:9e:b3:36:02:4d:12:2a:
7d:4b:5f:fc:fe:3a:44:cb:16:83:97:4f:9d:a7:6a:
0e:74:8a:c1:56:a3:e5:dd:1e:8d:51:5e:c8:bb:12:
c9:7e:a2:7d:a6:1a:4d:25:a6:59:72:50:d7:f3:47:
7c:3b:8f:28:2a:e5:24:14:85:e6:24:56:9f:db:f0:
aa:45:3b:b8:89:db:eb:6c:4a:e7:ae:8a:9c:69:f0:
24:07:e4:2a:94:00:36:95:68:e1:a3:c0:5e:0f:74:
95:86:27:3e:63:ee:d2:13:ae:3b:cd:0a:d8:11:a3:
f4:27:bb:28:0a:11:b2:5e:63:73:9b:39:f8:09:97:
a9:95:7f:11:62:14:1e:ea:41:a4:98:3e:83:c9:42:
4e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5F:43:B3:7C:5F:9C:0D:BB:77:AB:F6:2C:6E:33:9C:17:90:B1:06
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5B34B7A2967211EDAFE076E5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.75.0/24
Signature Algorithm: sha256WithRSAEncryption
44:02:cf:1d:43:2c:29:30:9e:cc:78:83:14:2c:1b:96:bd:26:
af:ff:7c:54:c1:22:3b:79:18:6f:53:23:ef:28:49:7e:d4:86:
be:a6:2f:27:03:ac:e8:e8:28:96:b1:17:d2:d0:ca:9a:8e:75:
3b:d3:b0:53:b2:5d:b6:e1:9f:c0:8f:81:37:4c:bf:74:b0:ab:
74:5a:1d:a4:6d:91:8d:92:8b:b6:9a:07:d9:64:e7:0e:dd:eb:
bf:b3:35:4b:99:44:22:c2:61:08:65:39:ac:b4:0f:02:c3:02:
e5:32:21:18:01:3e:40:f7:10:ad:ef:bb:44:93:b0:59:6d:32:
71:14:2e:d2:5f:26:45:35:fe:99:09:5a:03:2e:25:63:e8:80:
0f:27:6f:40:ab:6c:68:fc:e1:0d:80:d7:4f:99:de:c5:06:9f:
25:09:28:b0:a7:02:d5:84:52:af:cc:ef:c8:9d:1d:92:eb:72:
71:4a:6c:da:da:56:ec:e5:7b:e3:29:29:5a:50:34:3c:84:d5:
51:ad:df:61:e5:34:d0:6a:cb:de:71:4d:73:ab:2f:7d:f7:4e:
6a:b7:ed:af:6b:bb:50:ab:e3:aa:6e:60:9c:61:77:4d:af:b9:
ee:6b:78:5b:9d:d2:28:51:88:6d:e4:fc:19:2b:36:b0:5f:be:
99:16:38:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org