Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A93CC6106FAD11ED9A536C8BF1222468.roa
File: A93CC6106FAD11ED9A536C8BF1222468.roa (raw, json)
Hash identifier: 5RjyBj+avoNrYCWj7rJTuNQCPiZEEIDTKolASSjHgys=
Subject key identifier: 0A:D0:D4:E7:8A:73:54:C3:AC:D3:5A:33:70:0E:06:02:F5:6F:BB:46
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0AD5
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A93CC6106FAD11ED9A536C8BF1222468.roa
Signing time: Tue 29 Nov 2022 06:18:38 +0000
ROA not before: Tue 29 Nov 2022 06:18:34 +0000
ROA not after: Sat 30 Nov 2024 06:18:34 +0000
asID: 49581
IP address blocks: 154.16.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2773 (0xad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 29 06:18:34 2022 GMT
Not After : Nov 30 06:18:34 2024 GMT
Subject: CN=6385a43e-f0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:ce:1c:ce:f0:ed:07:83:9a:19:96:8a:bf:
0b:bf:e7:ba:a1:ff:1e:38:69:0b:2f:a4:be:11:0a:
0f:1d:36:f6:54:57:a5:22:71:07:56:3b:46:74:cb:
0b:31:fa:7c:e5:a7:eb:25:81:fd:f0:de:9e:88:8d:
b8:6a:05:48:ff:aa:12:49:03:92:04:e2:f1:9f:31:
1c:c4:4c:6e:52:23:32:d1:67:aa:a9:d7:a2:b6:f0:
06:d8:58:90:45:17:da:b8:6f:95:4a:48:79:f2:bd:
ed:8d:cb:4c:19:ba:3e:47:f0:dc:a8:e9:8b:29:10:
62:44:e7:6e:d9:50:0e:03:b0:ec:50:4e:5f:ea:dd:
9b:9e:32:65:8e:50:49:84:c8:f4:ff:52:42:70:b7:
0f:4f:a3:84:dd:24:7a:ec:d8:19:74:10:9d:ba:68:
0d:2f:ba:7f:bd:f7:78:99:45:a4:6e:49:94:b8:7d:
f3:23:67:3a:1e:76:8d:60:2c:6e:f7:af:47:4e:a7:
c6:27:33:5c:4f:1d:f1:32:95:23:7e:54:0e:a4:fa:
c7:b3:fa:0f:6e:82:44:03:3b:79:5f:3b:b3:2c:c0:
66:a2:8b:bf:85:4e:f2:98:96:61:67:c3:ca:dc:6b:
c0:dd:bc:a8:8a:9f:8b:d0:49:72:49:92:80:74:01:
6d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D0:D4:E7:8A:73:54:C3:AC:D3:5A:33:70:0E:06:02:F5:6F:BB:46
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A93CC6106FAD11ED9A536C8BF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.250.0/24
Signature Algorithm: sha256WithRSAEncryption
40:5f:1e:ff:71:cf:70:01:e9:b4:14:e3:64:90:b3:5e:a8:df:
d2:39:54:16:29:05:ec:a1:60:ff:2e:52:f3:63:29:4c:f4:25:
5d:13:10:1b:19:d8:ef:01:1f:08:0d:d3:cd:5e:41:e2:c0:1f:
81:0d:cc:d6:ad:17:eb:5a:9f:55:9f:54:62:aa:53:79:61:e5:
cc:92:d1:2c:10:be:12:f0:87:db:03:3f:9d:86:ba:12:a9:51:
bb:5f:c8:3c:a2:e7:9b:f2:5b:03:ae:55:5f:16:ec:89:bb:77:
ff:0c:67:14:49:60:99:27:c4:e8:dd:64:d1:03:b3:15:42:e9:
18:54:34:c6:a3:41:eb:b0:b8:48:af:50:8f:e6:1b:ae:2a:c4:
35:cb:0b:0f:69:b6:00:a6:dd:13:0f:d5:ae:ae:4c:48:42:bb:
23:06:fc:54:81:f2:d7:6e:9f:12:fb:0d:62:b3:13:dc:37:73:
b9:83:8a:36:c1:75:fc:d2:fd:88:dd:bd:f0:f7:4b:1c:4e:67:
a0:16:43:a6:12:44:f9:b6:2c:42:82:41:98:66:d1:ee:f8:88:
c4:c1:80:24:e1:21:6f:31:78:36:a8:98:82:77:85:34:ce:e1:
4f:0e:db:ae:a0:7e:5e:d8:78:f6:c5:fb:e7:0f:51:26:b6:cd:
99:38:6c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org