Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/84F5BFF0FFE511ED8536F9384AD9E6FC.roa
File: 84F5BFF0FFE511ED8536F9384AD9E6FC.roa (raw, json)
Hash identifier: 5/Wm20fE1T9wz8a5xVSePKlmIpZeCmqi86oRmXSFW68=
Subject key identifier: EC:3C:41:21:0A:AE:07:27:85:90:5B:1E:D5:D2:71:13:21:43:A2:6F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E58
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/84F5BFF0FFE511ED8536F9384AD9E6FC.roa
Signing time: Wed 31 May 2023 19:01:16 +0000
ROA not before: Wed 31 May 2023 19:01:12 +0000
ROA not after: Sat 31 May 2025 19:01:12 +0000
asID: 834
IP address blocks: 154.16.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3672 (0xe58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 31 19:01:12 2023 GMT
Not After : May 31 19:01:12 2025 GMT
Subject: CN=6477997c-b36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:04:df:b1:a2:dc:69:c7:02:28:c5:68:25:
c3:14:46:36:02:75:11:ec:e5:b7:04:a7:30:67:26:
b2:18:5d:c6:be:58:3f:06:f9:a9:19:bd:11:14:69:
76:3f:0d:12:83:8c:fd:f0:f5:4b:e6:a9:2c:8d:c6:
f3:70:6d:ef:be:f6:11:5d:89:cf:93:8e:9b:5a:22:
53:5e:65:f8:e7:de:b1:f6:70:3e:b9:a3:33:ef:84:
07:d8:05:62:ce:3d:73:43:5c:b5:73:c4:cd:a0:7a:
e3:ca:b8:f3:d5:9c:5e:f9:0d:23:63:8d:2b:ca:ab:
1d:8f:d6:81:39:42:33:cd:9f:17:b3:dd:22:3d:9a:
cb:ae:54:74:7f:4d:43:92:f4:53:64:0c:96:f5:ed:
44:5e:33:e7:d3:2f:19:9f:0b:b5:6f:fe:07:7b:d9:
de:55:48:25:60:05:16:6f:f2:fa:2c:33:da:8a:88:
d7:86:19:33:cc:b9:cc:e7:13:59:3c:16:cf:53:fd:
03:0e:7a:20:92:79:b8:b8:61:2d:5d:7c:43:2b:ae:
86:ac:76:69:8c:de:2d:ef:17:d5:40:9c:e8:54:08:
77:f9:41:4c:b1:72:46:bb:a1:50:96:75:f0:57:54:
0c:02:ef:e5:97:82:db:73:15:eb:be:56:47:70:ee:
38:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3C:41:21:0A:AE:07:27:85:90:5B:1E:D5:D2:71:13:21:43:A2:6F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/84F5BFF0FFE511ED8536F9384AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.218.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:2c:90:28:3e:eb:6d:a3:22:bd:ad:7b:ef:8e:98:15:40:22:
0c:dd:d0:dd:e7:e3:fb:15:01:cf:2c:f0:dd:2f:25:b4:e6:e2:
bb:49:6e:40:5f:70:bf:ea:c9:27:1a:bc:cd:50:86:69:54:a2:
81:55:c6:07:fa:89:09:77:bb:41:f7:2d:cc:d5:54:bd:5b:e2:
af:3e:79:c1:d2:6d:1b:a8:5e:88:74:fe:f9:fc:e3:3e:7f:32:
0b:29:f9:37:5d:c7:09:a5:e8:48:fc:67:0f:63:f8:01:e8:a1:
93:7b:bf:45:ad:ef:92:4e:1e:83:b7:19:dd:4f:73:9b:7b:a7:
70:c5:8e:aa:26:76:b3:aa:9f:60:10:65:6a:0c:00:80:af:29:
c7:15:63:af:39:89:1c:90:38:15:be:ab:17:0b:5c:76:af:20:
df:cd:fd:a0:db:51:8d:6d:ad:b7:14:43:65:a9:81:c3:84:9f:
f8:12:de:c8:4c:55:45:1f:87:c3:0d:58:d6:1c:27:2c:b9:0f:
67:7d:56:4c:7a:56:63:e0:03:9e:be:c3:04:c4:23:0d:96:05:
52:7c:9a:d7:9b:84:e6:b2:e0:43:77:2b:e4:c7:64:4b:4e:ae:
3b:07:95:1e:75:21:ea:8b:8c:51:e7:15:bd:55:b4:a3:64:93:
e2:22:2f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org