Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7396B7E2EB3511EDBD68C83E4AD9E6FC.roa
File: 7396B7E2EB3511EDBD68C83E4AD9E6FC.roa (raw, json)
Hash identifier: /0JnSLMLxigKAoWtF+Groo+0ER+qwFj53UaxwYyLJco=
Subject key identifier: F8:8E:07:0B:DC:8A:C8:C0:65:9F:A3:55:B0:3E:BB:9D:2E:96:D3:B2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D94
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7396B7E2EB3511EDBD68C83E4AD9E6FC.roa
Signing time: Fri 05 May 2023 11:10:32 +0000
ROA not before: Fri 05 May 2023 11:10:29 +0000
ROA not after: Sun 04 May 2025 11:10:29 +0000
asID: 834
IP address blocks: 154.16.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3476 (0xd94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 5 11:10:29 2023 GMT
Not After : May 4 11:10:29 2025 GMT
Subject: CN=6454e428-8840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f0:80:89:8b:cc:52:4b:75:e7:14:cb:84:82:
96:cc:b3:1f:67:d0:3b:d2:e3:9a:e1:8a:aa:03:98:
36:3d:28:90:19:c0:25:a5:f6:4e:c4:12:1a:05:d6:
98:25:0a:7f:1d:80:f2:ec:81:1d:a3:00:62:21:4b:
fc:5b:91:aa:be:16:1a:65:42:ad:7f:3b:6b:be:fe:
53:60:9c:55:bb:c8:29:b3:55:82:71:b1:69:0e:47:
a0:ad:54:73:f3:27:e1:63:69:91:ba:41:0f:b1:11:
0c:eb:f4:b0:7c:91:ea:0d:79:7d:02:bf:d1:64:ee:
6f:16:82:bd:c2:de:b7:62:c5:14:f8:ea:21:74:8e:
20:2b:21:6d:e3:71:9d:5e:17:89:a1:a9:a8:a9:98:
aa:21:ef:d4:03:20:25:f2:4b:b4:90:fc:bc:ed:dc:
9d:03:6a:a2:e3:60:56:e2:8a:37:3b:c7:f1:40:60:
ca:53:e6:e3:14:54:2e:f4:1f:af:ad:9c:98:58:18:
b0:32:46:39:74:68:ec:6d:ce:cb:5b:64:86:32:9d:
ed:e0:51:5c:10:71:b7:e4:cc:87:2f:cf:27:ca:ca:
7a:8e:c9:95:2c:c9:36:6b:d5:25:86:dc:cb:f3:1a:
76:58:b2:f2:be:59:2b:7a:15:0e:66:5a:29:b4:82:
55:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8E:07:0B:DC:8A:C8:C0:65:9F:A3:55:B0:3E:BB:9D:2E:96:D3:B2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7396B7E2EB3511EDBD68C83E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.116.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:fb:16:a3:10:d5:4a:55:ee:7f:39:59:96:39:fe:0a:aa:f9:
86:3f:26:94:f6:36:e0:6d:8a:4d:8d:7a:e3:35:f0:a2:96:94:
4a:96:0e:c6:fd:46:24:66:dd:02:f6:77:3c:30:ea:6f:e3:8b:
46:66:9d:c3:b8:50:81:ee:36:89:b2:8e:c7:fe:75:49:b9:98:
77:f4:1c:44:6a:17:9d:5e:a8:7c:9e:a6:df:f4:fe:bc:e7:c0:
0d:f1:71:0c:21:89:04:78:f5:28:38:dd:d0:06:64:c7:43:95:
2c:55:8e:f1:25:fd:96:40:42:78:97:49:2e:09:a2:08:91:00:
f1:9e:9e:ae:d4:01:2a:14:f2:28:9c:75:4e:51:3e:53:46:9d:
9a:09:d2:6e:9b:1e:aa:c2:61:89:39:81:42:83:95:b1:8a:09:
a3:43:b8:63:25:f6:e3:d0:ec:bd:22:f9:1f:c5:ca:b1:8a:0d:
65:38:e8:59:f9:b4:a8:a6:7e:eb:57:66:a2:af:fa:f0:30:9f:
35:3c:f4:2b:3f:7d:c1:0b:b5:ab:70:40:b7:0b:1b:6f:80:28:
50:76:05:f4:28:47:b7:c4:67:87:0c:93:07:0c:7d:c3:7a:0c:
77:12:1a:9f:50:0f:01:56:d7:8d:85:f7:d3:80:8e:dd:4f:c0:
99:d5:1f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org