Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/64DE899EB74D11ED8402CCECF1222468.roa
File: 64DE899EB74D11ED8402CCECF1222468.roa (raw, json)
Hash identifier: WCeA8CowIjdTwfduH2Yx17v0q7kEm/K/BhrJPqb+qcs=
Subject key identifier: F5:13:F9:C2:1D:4E:F6:43:80:EB:53:FE:82:4C:71:18:81:FC:6F:FD
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C8A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/64DE899EB74D11ED8402CCECF1222468.roa
Signing time: Tue 28 Feb 2023 09:50:55 +0000
ROA not before: Tue 28 Feb 2023 09:50:52 +0000
ROA not after: Fri 28 Feb 2025 09:50:52 +0000
asID: 61317
IP address blocks: 154.16.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3210 (0xc8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 28 09:50:52 2023 GMT
Not After : Feb 28 09:50:52 2025 GMT
Subject: CN=63fdce7f-09bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:c1:0f:6e:1e:a6:05:f4:0a:1a:06:92:e7:
1f:ba:fc:3d:f4:a3:fc:73:e3:36:18:dd:fd:fc:b5:
30:b6:8a:ab:81:2b:ef:4e:ec:fe:aa:b1:73:2e:ac:
ac:f1:9d:17:bf:3c:d5:84:9f:3a:2b:fa:3a:63:18:
b8:a5:6b:ac:97:7c:12:7d:14:1a:56:f6:6c:3c:3f:
27:b3:03:a9:6d:37:8b:b9:7d:0d:1b:14:36:38:20:
51:cf:22:c5:24:13:5f:96:a0:9f:12:94:3a:48:63:
58:15:d4:70:a2:47:2b:85:30:06:dd:1a:b6:b0:1e:
0c:3b:f4:c3:bb:c3:49:c1:40:40:94:02:64:2e:5f:
2a:59:bd:dd:b1:07:83:fe:15:2d:fb:bd:d5:6e:98:
f1:86:13:91:a7:bd:1c:9b:e4:f9:2b:b6:93:e5:a1:
4f:8c:1b:8d:04:2b:38:54:74:cc:bf:71:b0:09:7e:
5b:ea:77:fd:e2:85:ac:ef:26:ce:8c:ce:0c:f8:a4:
a8:62:d6:2f:50:e7:c2:52:df:91:b6:0a:41:0b:89:
ca:65:08:f4:04:a2:a3:1e:94:e0:ff:1f:9a:d1:c1:
57:06:b5:14:57:23:ef:f0:f6:d5:2a:f5:37:a7:d2:
d6:8e:3e:8e:b1:3b:d2:9f:03:f4:df:8d:98:bb:3c:
6c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:13:F9:C2:1D:4E:F6:43:80:EB:53:FE:82:4C:71:18:81:FC:6F:FD
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/64DE899EB74D11ED8402CCECF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.203.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:21:2d:34:fc:38:d9:ad:86:8e:a9:3a:14:d8:fd:12:63:de:
27:e2:e8:ed:66:db:e5:27:58:1a:da:df:28:88:13:61:cd:90:
29:1f:6e:18:d3:a7:03:b7:35:dc:e0:89:77:27:88:b2:c5:d1:
5f:fe:10:b6:d3:c4:ea:ed:1f:10:13:80:a1:5c:62:50:0b:4c:
7a:bf:bc:ec:3d:aa:27:18:ad:37:e3:d2:11:5e:5b:78:f0:3f:
52:52:a5:16:46:91:fa:ba:61:65:da:2d:d1:55:07:22:96:93:
13:18:52:b0:4a:b4:89:19:0e:71:02:8c:76:c8:86:7f:8c:67:
e5:70:17:63:a5:4e:f0:25:25:93:51:a4:f6:3b:73:54:af:18:
72:16:23:7a:fc:9c:9f:d6:ba:d5:68:31:15:00:ce:33:bc:a0:
7f:8b:48:1d:f9:ec:c0:ca:98:10:c2:17:ff:99:4a:8a:71:db:
b4:fe:5c:49:6b:20:f5:31:ce:17:65:50:d0:97:46:07:62:9d:
7f:7d:6e:73:d0:25:54:ce:d1:c9:94:c2:31:99:31:7e:d5:08:
48:64:0c:c5:ea:6f:d8:31:ce:62:d0:d6:2d:b5:88:c5:ad:3a:
fc:32:de:34:16:9f:b6:08:ba:5d:0d:6c:82:c8:c7:6c:ab:0e:
67:3f:e5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org