Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/80E2B514033F11EEBA1D91764AD9E6FC.roa
File: 80E2B514033F11EEBA1D91764AD9E6FC.roa (raw, json)
Hash identifier: a3fUyuz5Lz2uhLLkkXYggOHCpjDwZMWjxpXHgZSQeo8=
Subject key identifier: 31:5B:00:CE:15:E9:4D:A7:77:7F:8B:DC:E8:0B:0B:5B:EF:EF:83:D0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0EB8
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/80E2B514033F11EEBA1D91764AD9E6FC.roa
Signing time: Mon 05 Jun 2023 01:22:58 +0000
ROA not before: Mon 05 Jun 2023 01:22:53 +0000
ROA not after: Sat 07 Jun 2025 01:22:53 +0000
asID: 34773
IP address blocks: 154.16.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3768 (0xeb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 5 01:22:53 2023 GMT
Not After : Jun 7 01:22:53 2025 GMT
Subject: CN=647d38f1-46dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a5:e8:68:99:c4:78:e4:1b:b5:88:cf:d8:cf:
b0:1c:cc:5e:20:f8:ae:66:c1:70:c9:7c:7a:3a:5c:
c7:e6:b3:c5:3c:9c:af:57:99:5c:3f:aa:d1:d5:8d:
83:f0:c1:f7:51:5f:55:af:88:98:ba:39:23:34:3e:
74:89:eb:9b:37:9d:f3:a3:78:61:db:30:43:54:b2:
a8:bd:8b:05:aa:dd:13:25:96:54:4a:ae:54:20:13:
97:3a:83:ad:c7:45:c2:62:f9:d6:80:f8:bc:1d:24:
7b:ee:5c:b4:04:a4:51:34:c8:ce:c7:46:e8:6c:b0:
14:d5:09:01:2e:d0:a2:d1:00:e0:36:8a:dc:8c:66:
97:7d:81:c7:ce:26:66:4d:4b:9b:3c:29:47:c5:42:
51:0f:bc:14:e9:81:0b:e7:e2:d8:46:3d:9b:c6:b0:
09:37:fc:a3:c3:04:4d:9b:49:aa:30:58:65:07:be:
b3:46:44:06:e1:1a:05:15:bf:15:5d:5c:c8:d1:f0:
c3:3c:e6:e8:af:4d:37:97:75:55:28:68:3f:39:75:
0e:d5:f3:5a:08:16:94:62:76:18:36:94:9b:29:98:
26:6f:d8:d9:4e:e1:48:37:65:b8:c2:ca:b9:b7:f1:
99:e8:09:9b:76:ff:93:26:b0:b7:8e:05:2b:09:f2:
79:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5B:00:CE:15:E9:4D:A7:77:7F:8B:DC:E8:0B:0B:5B:EF:EF:83:D0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/80E2B514033F11EEBA1D91764AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.0.0/24
Signature Algorithm: sha256WithRSAEncryption
42:89:67:c3:38:5e:85:92:56:05:d5:8a:a9:60:ed:7c:a3:c0:
04:19:44:3e:55:7b:9e:8c:c4:e4:a9:f4:62:9f:a5:a7:59:df:
c0:f0:29:e7:e6:4e:f2:60:0f:6b:ed:53:bf:43:f3:45:85:b7:
70:d9:08:0f:3a:e7:0b:ca:0e:9f:fb:20:8c:bb:a9:6b:38:48:
31:ba:a1:4a:d3:ff:c6:aa:62:cd:53:02:a6:23:f6:cc:e9:67:
be:5d:a9:83:cd:eb:16:85:9e:85:a7:c6:96:df:78:a3:b1:14:
61:c8:5a:49:dc:e1:3e:10:2c:c3:96:05:1e:3f:28:b7:9d:cb:
3c:e5:fa:21:4c:08:39:23:c9:cc:91:fc:84:6e:d3:8a:fd:c7:
e4:36:a4:53:1f:a8:2b:26:95:d0:ec:1d:ab:75:44:be:34:3e:
70:85:d4:90:57:c3:95:34:57:80:ab:aa:bf:bf:4b:69:ba:a5:
c4:96:34:7c:19:6b:c6:55:32:83:07:6f:f6:77:0f:46:c6:a5:
10:22:e1:bb:00:da:06:3b:16:ff:39:57:39:aa:fd:8c:5f:78:
7c:41:d2:2f:b4:b9:7d:5d:65:45:30:43:53:fc:9b:cb:70:99:
62:bc:ad:4e:11:df:66:9d:9d:58:f2:26:da:22:cf:b0:ec:fa:
16:48:1a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org