Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6416165A005211EE8798F9894AD9E6FC.roa
File: 6416165A005211EE8798F9894AD9E6FC.roa (raw, json)
Hash identifier: veNBcQS4fn0EtRkzATOtXRDtt0hjZWj5VgsREFEgmms=
Subject key identifier: 1B:0F:FC:D1:2A:1E:3E:53:81:40:AF:7E:0C:22:D3:42:D2:A9:A0:24
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E8C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6416165A005211EE8798F9894AD9E6FC.roa
Signing time: Thu 01 Jun 2023 08:00:36 +0000
ROA not before: Thu 01 Jun 2023 08:00:32 +0000
ROA not after: Sun 01 Jun 2025 08:00:32 +0000
asID: 834
IP address blocks: 154.16.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3724 (0xe8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 1 08:00:32 2023 GMT
Not After : Jun 1 08:00:32 2025 GMT
Subject: CN=64785024-ac9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:ff:c1:7b:26:6b:87:c8:cb:7f:7d:23:1c:
9c:00:13:82:08:ca:c7:f5:21:d8:91:41:dc:77:5b:
d0:4e:7a:19:27:ef:1e:fa:59:b4:30:8f:7b:bd:b4:
2d:d5:16:2c:2b:c8:d6:10:d7:1a:7c:59:58:13:57:
29:aa:ad:1f:2d:e5:96:d3:8c:09:e7:0c:ea:93:f8:
c4:1d:e8:08:53:2c:43:20:38:8a:8d:8d:cd:e9:d5:
c1:02:f3:a5:40:95:a6:e2:af:69:b8:2d:6c:58:04:
b2:0e:3b:2d:c2:31:39:f0:ef:63:da:bc:fa:2c:92:
2e:76:6f:c3:56:6b:00:b2:39:8a:e1:61:51:15:86:
04:27:23:ba:81:dc:4a:aa:9d:cb:c4:8c:4a:64:6c:
f1:55:1b:68:93:8c:12:be:20:b5:c4:d5:40:10:3a:
c3:a7:49:02:f2:f4:bb:0a:f9:3b:4d:d0:d6:03:f2:
6b:5d:c2:98:eb:df:79:98:0c:c0:f4:0f:d8:ad:6a:
85:59:79:2c:bf:41:af:b4:84:86:e2:17:6e:e5:48:
99:fe:c2:03:f5:7c:97:aa:98:5a:bf:d6:bd:76:26:
e5:6a:56:de:af:60:0a:95:1b:89:a4:ca:5f:1b:ce:
50:e1:5d:5a:1d:53:d0:5f:2d:e9:7f:63:9c:8f:20:
aa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0F:FC:D1:2A:1E:3E:53:81:40:AF:7E:0C:22:D3:42:D2:A9:A0:24
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6416165A005211EE8798F9894AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:51:8f:33:43:91:03:58:ff:e6:5f:ea:0d:9f:69:51:67:58:
5b:19:c1:eb:0f:32:02:e5:da:4d:f4:cf:90:a3:01:17:0b:25:
56:c4:ee:fc:d1:03:5d:ff:07:06:6a:5e:41:4b:b5:e6:7e:e5:
ba:6c:5a:02:a7:89:1f:47:c8:d0:3d:0c:4a:1f:26:bd:d0:b6:
6c:5b:00:3d:1a:86:be:68:02:ec:a3:e2:9f:c6:7c:ba:36:09:
4d:c4:c5:f7:54:f0:0d:0a:0f:cb:c1:3c:7d:ce:6e:57:e6:63:
14:27:33:63:70:f2:be:2b:64:98:c0:36:e8:ce:60:e2:2b:c9:
28:1f:0f:85:c4:86:81:b1:04:94:47:41:04:2c:91:45:e6:60:
f0:87:0e:a1:55:6f:ec:c5:e8:e4:0a:6d:90:0c:26:0e:96:44:
53:55:73:d0:e7:5c:bc:1e:9c:9b:86:74:67:f8:ea:86:e9:3b:
74:a9:1d:c7:f5:17:8e:16:2a:38:17:28:b0:1c:20:03:5a:eb:
25:05:13:0b:06:40:56:92:87:70:18:4e:ff:2b:83:f7:bf:8d:
77:f4:cf:e1:96:8b:a2:fb:a3:21:9e:c4:d2:64:e2:69:d9:04:
a4:e0:7a:9b:0b:c8:5e:d1:94:5a:db:42:29:39:2f:bc:ed:e8:
ba:7c:44:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org