Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8C4F662627CB11EE81B02C6C4AD9E6FC.roa
File: 8C4F662627CB11EE81B02C6C4AD9E6FC.roa (raw, json)
Hash identifier: U6w2EF/C7pBGZ983NWixeJWSqCowzouX4IH6mME0mgU=
Subject key identifier: FA:40:DD:B4:84:1F:A8:A4:E4:B7:66:29:0E:33:97:64:37:F7:2E:44
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 10BD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8C4F662627CB11EE81B02C6C4AD9E6FC.roa
Signing time: Fri 21 Jul 2023 13:36:08 +0000
ROA not before: Fri 21 Jul 2023 13:36:05 +0000
ROA not after: Mon 21 Jul 2025 13:36:05 +0000
asID: 200482
IP address blocks: 154.16.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4285 (0x10bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 21 13:36:05 2023 GMT
Not After : Jul 21 13:36:05 2025 GMT
Subject: CN=64ba89c8-aa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:86:6a:01:c6:c4:bc:f5:1b:99:72:1c:5b:
82:33:9d:a5:28:18:24:59:46:f4:35:8a:5d:11:de:
8f:0f:7b:8a:bc:b2:66:ba:77:5e:c9:c7:0d:45:b8:
89:71:3e:1b:1e:68:c1:44:2e:db:c1:7e:12:a3:d8:
9f:41:19:6f:a1:01:db:1a:4f:80:8d:2e:83:b1:24:
10:9c:62:92:2b:9b:7d:42:64:95:d3:3c:51:fe:de:
52:75:5b:30:1d:2f:37:72:57:1b:7b:7c:b2:2f:c7:
85:92:06:45:94:54:d8:5d:db:26:2b:84:5a:92:de:
1d:5b:49:95:d6:0e:64:1a:82:98:12:7f:87:48:59:
20:cb:c6:00:e1:0a:2e:4e:52:b5:93:23:8c:a5:47:
9d:a5:31:8a:e6:aa:69:59:12:cc:27:b8:ed:10:a2:
63:7b:c1:bc:c0:12:df:22:66:6c:9e:b1:2c:76:d7:
16:3e:db:b8:69:ce:e0:dd:fd:60:dd:b1:61:05:05:
17:74:56:01:f2:cd:ac:a8:b1:6c:82:97:ca:d2:1f:
5f:f5:a5:5c:3f:35:85:12:6a:50:2e:76:73:67:d5:
30:36:4b:56:ab:20:75:28:f5:cd:cd:ae:67:24:f0:
ac:e5:a3:ce:88:c3:a3:9c:2a:84:78:92:e5:2b:9a:
cd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:40:DD:B4:84:1F:A8:A4:E4:B7:66:29:0E:33:97:64:37:F7:2E:44
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8C4F662627CB11EE81B02C6C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.100.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:8c:b3:49:5e:e6:7f:44:e4:2b:80:71:9e:bc:ab:d3:fc:3e:
31:7b:b7:15:c8:bb:95:9f:04:6e:74:f1:be:f8:f8:d1:bf:e8:
2f:a2:b3:31:0c:43:6b:5d:52:d1:f2:a6:2e:46:17:b3:fb:39:
c2:55:47:44:cb:97:7a:03:2c:a9:c1:a9:e3:f1:dd:26:19:e2:
f4:1f:30:e2:24:68:1c:fd:ac:14:3d:9c:dd:5f:64:48:d2:79:
f8:0a:b3:97:2d:d2:86:67:c5:65:4a:1e:74:5c:44:2d:c7:a0:
6b:43:68:1c:5d:69:9f:9d:5b:b4:5b:05:81:e6:c3:e2:fe:99:
b7:f2:11:1e:ff:f9:39:5e:13:6f:ef:07:82:ff:84:b1:0d:5a:
1b:b9:33:c3:d7:64:b1:89:cb:4b:2d:1f:73:9e:e1:58:51:00:
5f:c8:4b:10:63:b5:db:3b:81:63:64:20:70:df:76:11:c6:89:
fa:bd:3b:bf:75:a6:db:d2:f4:67:3c:8b:d2:a7:a6:d1:3c:82:
0d:a6:f7:0f:fa:b4:61:67:27:55:85:91:fe:de:0e:69:7a:64:
38:10:ad:70:c8:a6:c6:45:5a:ef:cc:ef:b7:38:c7:ca:0d:8c:
95:03:74:05:8f:5b:f2:2f:6c:39:12:4a:77:38:c6:d4:3e:22:
9d:1e:cb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 10:05:54 2023 by rpki-client on console-fra.rpki-client.org