Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7D00F73C212911EEB7976E324AD9E6FC.roa
File: 7D00F73C212911EEB7976E324AD9E6FC.roa (raw, json)
Hash identifier: D4mpSpHxawR3NOpwDzWm66+XidDiQUs9cd9VTveCsnY=
Subject key identifier: 37:1E:14:C3:6C:4C:13:04:84:1A:7D:0A:29:88:F6:CB:02:CA:69:9D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 107D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7D00F73C212911EEB7976E324AD9E6FC.roa
Signing time: Thu 13 Jul 2023 03:00:57 +0000
ROA not before: Thu 13 Jul 2023 03:00:54 +0000
ROA not after: Sun 13 Jul 2025 03:00:54 +0000
asID: 834
IP address blocks: 154.16.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4221 (0x107d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 13 03:00:54 2023 GMT
Not After : Jul 13 03:00:54 2025 GMT
Subject: CN=64af68e9-efdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b8:43:f3:4d:f7:e8:26:c2:6a:78:c5:5f:f6:
c3:fd:82:b7:dc:c5:84:cc:6e:98:db:84:22:c5:e6:
50:97:d0:81:2d:61:90:ec:31:79:99:5b:2e:f6:37:
70:48:ce:7b:0f:0e:58:76:3d:8f:e7:1e:26:c5:f0:
03:38:95:7e:aa:42:ce:82:d8:53:b6:f3:51:78:2a:
0d:8e:8f:67:f7:77:8c:e4:8d:96:44:41:3d:75:e9:
17:63:b1:90:17:c9:f3:f1:76:14:82:33:12:1a:a3:
2c:fa:75:4e:25:40:c4:ef:16:cb:87:7b:3b:b4:75:
fe:0e:26:79:f8:0d:ef:11:ac:12:c4:cf:67:72:36:
71:a6:f5:2e:9d:8c:93:45:1e:56:74:6c:90:f2:e0:
d9:0e:a4:7a:61:f3:01:59:5b:b3:48:09:3b:f5:90:
98:dc:04:cd:43:01:13:7c:76:c3:09:41:ba:fb:66:
a4:63:a3:c6:ff:86:e0:45:90:fd:12:b3:f3:90:20:
2e:4e:be:c1:0b:75:5d:e6:30:52:df:55:63:aa:b2:
6b:7f:7f:a5:ca:f1:40:64:3c:e8:a2:f8:13:4c:51:
e2:9b:48:b2:f1:30:8a:44:71:b0:0d:ff:b1:91:c0:
d3:f4:5d:1c:2b:d0:58:39:ee:c6:d7:c8:32:d3:fc:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1E:14:C3:6C:4C:13:04:84:1A:7D:0A:29:88:F6:CB:02:CA:69:9D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7D00F73C212911EEB7976E324AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.232.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:49:87:66:b1:54:55:ab:f9:ce:f3:2f:a2:32:59:76:46:97:
b9:67:47:f1:90:23:13:bb:df:4d:23:e7:f0:62:a0:f0:15:4a:
e4:ad:6f:59:0f:86:e1:7d:89:b9:c5:2f:cc:f7:58:e5:a6:37:
92:33:0b:2d:6b:34:5f:1e:e0:b2:cc:8f:f1:28:d4:9c:5e:c6:
17:13:e8:db:90:36:63:a7:fd:07:91:5f:69:10:14:e3:08:bb:
22:17:b4:64:dd:70:51:cd:99:f9:e0:06:c1:5d:c6:91:a8:b7:
59:31:6e:e9:96:87:71:e4:83:be:c1:df:2e:20:98:13:fc:79:
67:b8:60:3c:17:c2:83:e5:7c:90:5e:83:ba:06:41:6e:e8:81:
12:08:c2:d7:e7:25:0a:8b:cc:d6:c2:2d:ef:73:82:2d:b7:a6:
cd:90:5d:fc:e8:94:a3:61:04:7a:3e:fe:c9:03:46:1f:7f:8f:
fe:b7:7c:29:90:67:bd:9a:01:ca:b1:e5:74:2f:6d:d1:1c:04:
ee:42:d5:f7:0a:1c:00:b8:b1:e5:87:ae:30:14:99:f4:96:02:
94:a9:4a:68:fb:bc:c8:2f:7e:d0:42:81:ce:f1:39:bd:20:9e:
fa:d8:7d:c8:cb:95:79:0b:bd:57:55:11:c0:ea:1a:70:59:1b:
d6:df:03:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 14:18:20 2023 by rpki-client on console-ams.rpki-client.org