Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8E71B2A4171A11EE9F6571144AD9E6FC.roa
File: 8E71B2A4171A11EE9F6571144AD9E6FC.roa (raw, json)
Hash identifier: gUAHeVtNgXIjhoxBPsl5Iw1Lo9oEQk07jQsgOzxap5c=
Subject key identifier: 78:75:72:04:4E:A6:AF:0B:37:A6:AC:9D:54:E0:82:0C:74:8E:68:CF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 102F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8E71B2A4171A11EE9F6571144AD9E6FC.roa
Signing time: Fri 30 Jun 2023 07:48:52 +0000
ROA not before: Fri 30 Jun 2023 07:48:48 +0000
ROA not after: Sun 29 Jun 2025 07:48:48 +0000
asID: 834
IP address blocks: 154.16.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4143 (0x102f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 30 07:48:48 2023 GMT
Not After : Jun 29 07:48:48 2025 GMT
Subject: CN=649e88e4-7645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:bb:4d:01:43:f9:8e:98:52:b3:6c:a2:ca:
d5:60:51:55:1d:73:41:71:f0:3f:e1:2c:67:21:45:
45:c8:d1:68:4b:cc:4e:a5:70:b9:c1:48:ab:27:d4:
fb:0d:b2:0d:55:41:22:6b:41:2e:18:47:75:0f:5d:
ed:b1:28:86:c9:cd:97:c4:a8:09:9a:a0:9e:28:8d:
1d:3b:94:30:7c:32:b2:92:dc:2a:a3:ff:bd:6b:d4:
c2:8e:21:8b:6e:99:f7:8c:c3:2e:5b:c0:cc:c7:33:
48:28:1b:9b:af:53:45:f6:ac:ec:42:c3:64:68:0d:
bb:2e:95:47:e6:b3:dc:6c:4e:8f:bc:68:d3:df:fe:
c2:b1:e8:ce:89:7c:f6:55:7b:42:37:5e:1d:4d:25:
00:d8:fb:87:39:2b:67:d1:e8:85:9d:2f:68:4f:24:
dc:9f:de:3a:bd:9e:e5:d2:3c:91:6e:37:ac:76:27:
b2:a1:28:06:ec:80:6f:9f:33:1d:ba:2f:25:34:3e:
01:3b:9e:c8:c8:53:c4:fb:20:61:be:10:c2:58:70:
df:02:19:2b:19:26:dc:c9:95:97:8e:58:42:6d:15:
d2:b4:eb:37:a2:15:7e:be:a4:ed:a6:07:3b:bd:1e:
be:32:55:04:c4:33:82:cf:ad:8a:72:19:fd:87:62:
7a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:75:72:04:4E:A6:AF:0B:37:A6:AC:9D:54:E0:82:0C:74:8E:68:CF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8E71B2A4171A11EE9F6571144AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.27.0/24
Signature Algorithm: sha256WithRSAEncryption
39:b2:20:f0:e1:8e:8f:8c:3c:70:e3:1e:a7:b4:fc:ed:96:ac:
a8:48:02:f2:98:2c:e9:9a:b7:87:60:e5:01:43:c4:d1:fe:f1:
81:0c:c3:93:aa:e7:40:a4:04:11:66:ae:ae:96:35:7d:ee:2a:
ec:fa:76:06:25:7b:6f:1f:c9:69:c2:6a:46:2f:7f:8f:5b:e8:
da:f8:48:e8:c9:2c:f0:2b:8f:55:76:7b:63:77:ec:95:dd:79:
7b:97:fd:24:af:ad:58:d3:fc:82:05:ed:b5:f3:26:4f:77:dc:
24:0b:23:cf:12:fc:7d:a4:88:d6:25:c0:a2:c9:a5:49:8b:72:
b3:b1:bd:60:8c:65:e8:2f:d4:39:7b:2a:8a:f5:4a:c6:0e:34:
ef:3f:2d:5f:d4:6f:f2:6f:79:44:f8:7e:86:ed:f2:d4:81:12:
b7:92:0a:c3:16:81:7c:5f:4e:e2:61:16:15:3c:da:46:c0:a7:
5d:7d:72:72:31:8e:f7:c0:50:4b:65:21:16:d0:e9:15:ea:35:
dd:a8:c5:fc:8d:e5:c9:3d:13:64:13:bf:5f:0b:23:6e:b2:6e:
da:cd:2a:56:b1:70:e1:60:25:2b:7f:f8:c3:4a:1e:35:eb:3a:
6d:03:53:49:05:39:b7:47:18:07:a8:e5:58:3b:dd:bd:c7:9c:
13:40:5f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org