Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/852107408E9911EDB8B48890F1222468.roa
File: 852107408E9911EDB8B48890F1222468.roa (raw, json)
Hash identifier: MqqAKo4tseTsuOglgFbPi50KYMZu4nhh6yClK+00ysM=
Subject key identifier: AC:F6:D5:C3:6E:72:6E:18:EA:A7:CB:19:D8:2D:DE:0E:0C:95:55:50
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0B54
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/852107408E9911EDB8B48890F1222468.roa
Signing time: Sat 07 Jan 2023 14:42:33 +0000
ROA not before: Sat 07 Jan 2023 14:42:29 +0000
ROA not after: Tue 07 Jan 2025 14:42:29 +0000
asID: 207459
IP address blocks: 154.16.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2900 (0xb54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 7 14:42:29 2023 GMT
Not After : Jan 7 14:42:29 2025 GMT
Subject: CN=63b984d9-cc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:0e:bb:31:7b:3c:cb:05:ab:0e:5e:aa:a3:
02:a5:04:ad:17:82:f8:00:36:fb:1d:c4:cb:a9:cc:
e9:1b:d3:3f:29:2f:91:c6:2f:90:50:85:c2:c8:98:
b2:bd:99:ad:6f:8b:f5:8b:9b:f0:1b:b1:25:50:58:
71:0c:e2:5f:12:40:5c:81:5e:ba:fb:65:95:76:b4:
6f:73:85:25:ce:2c:14:25:14:a6:c5:93:7a:70:98:
e1:cc:ee:4e:49:bb:0a:9e:98:e9:48:f3:83:a2:8a:
24:07:89:63:7e:8f:85:dd:7e:39:e6:46:f0:7b:59:
3c:fb:c0:27:c5:32:6e:56:7b:e9:91:93:39:3a:b4:
e7:f3:16:21:ee:46:03:bb:65:a4:3b:f8:ca:ac:7f:
75:26:04:71:77:1d:21:1c:64:14:91:a8:db:36:1a:
50:b5:b0:47:f9:ca:63:5a:1e:31:31:48:88:32:b5:
b0:5c:5a:01:d4:28:f4:33:f2:cd:c9:86:50:82:df:
56:f2:32:b5:93:f4:1f:87:b2:d1:02:0e:d0:11:5a:
c7:a3:fa:b3:ba:83:b0:1e:29:9c:6b:85:1e:8a:01:
6f:79:99:eb:bc:ed:6b:c2:f8:bb:ad:ac:a9:ee:96:
52:f8:e4:61:a5:11:0b:48:a4:25:26:05:b4:68:8d:
6f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F6:D5:C3:6E:72:6E:18:EA:A7:CB:19:D8:2D:DE:0E:0C:95:55:50
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/852107408E9911EDB8B48890F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.207.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:29:61:9b:d0:e7:6b:65:cc:5c:8b:0b:4f:40:6e:1e:16:55:
4c:2d:ce:6c:61:16:c3:d6:c4:97:8e:21:ac:d4:9b:1e:02:b9:
f6:c8:13:30:9a:68:bd:2d:33:0f:32:06:81:ff:ff:58:4e:9b:
58:d5:20:68:f1:45:2b:af:6b:a4:07:21:65:44:46:c8:8e:d7:
19:49:4b:ee:be:11:48:cb:82:43:fd:56:77:f2:32:f4:d7:8e:
87:7f:1c:82:d5:27:68:8c:79:90:fd:7e:ee:77:3f:d5:77:ca:
22:a2:72:57:39:30:36:73:e6:a0:bb:48:8c:85:06:a0:95:b4:
73:f9:47:92:1c:72:6d:50:5d:0a:e5:39:dd:ef:d9:e8:a5:51:
b4:70:0b:5a:92:e4:9c:f5:3a:86:50:9d:83:86:46:d5:6c:fe:
91:b0:3d:d4:88:45:17:89:11:aa:be:e9:25:db:8f:d8:68:1d:
6f:ee:42:fb:c6:e7:75:cf:21:e4:05:60:f6:03:d5:1e:47:1b:
f0:b6:a0:26:ab:7c:cf:1c:b7:a1:fc:0c:a1:d1:dd:2b:97:a7:
ea:b9:b8:89:75:ba:a2:3b:2a:aa:08:78:7d:66:52:69:fe:1f:
86:27:10:e8:a9:85:ac:8e:6a:26:13:e5:cf:1e:d6:84:e1:a6:
95:78:8e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org