Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B334316A876E11EEB05019324AD9E6FC.roa
File: B334316A876E11EEB05019324AD9E6FC.roa (raw, json)
Hash identifier: mLftTUdnzbpc7vheaHyPWNHI13Ev7jDBRbErpMIFVPk=
Subject key identifier: 00:39:2E:87:08:8B:E3:46:24:27:BA:EB:39:7D:64:EF:02:67:0E:C6
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1326
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B334316A876E11EEB05019324AD9E6FC.roa
Signing time: Mon 20 Nov 2023 06:33:22 +0000
ROA not before: Mon 20 Nov 2023 06:33:18 +0000
ROA not after: Fri 29 Nov 2024 06:33:18 +0000
asID: 3356
IP address blocks: 154.16.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4902 (0x1326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 20 06:33:18 2023 GMT
Not After : Nov 29 06:33:18 2024 GMT
Subject: CN=655afdb2-c955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3f:c9:46:bb:ad:f0:21:91:cf:05:1b:cd:ce:
41:20:2a:eb:9e:90:0d:46:4e:2b:9c:f7:ec:90:69:
50:0f:b0:7b:10:20:95:c3:58:30:d4:22:43:40:31:
67:81:d9:8e:ea:dc:1b:d9:15:b8:d4:e8:26:ae:fc:
4f:2a:85:56:1e:c4:e3:9a:4b:7a:7e:c5:cc:20:20:
a8:2d:dd:59:70:d7:3c:99:9b:7e:c2:24:54:79:0f:
4e:9b:61:35:d9:3a:95:c6:ec:69:4a:91:10:0e:73:
f8:84:d7:70:b0:0c:72:ac:68:af:9d:31:ef:42:ad:
97:29:a0:4c:60:41:e3:7b:4e:37:01:bb:c4:06:57:
8a:b2:8c:c2:4b:8f:c2:59:7d:56:83:af:5c:d0:d9:
d7:7c:92:c9:37:e2:94:95:8a:c4:36:fc:40:73:25:
c0:5d:89:ac:0d:20:5d:00:81:55:00:20:f2:f0:7d:
74:a4:db:a2:c8:95:84:50:f0:39:fb:8c:55:37:9d:
eb:f6:a2:48:56:53:17:cf:30:6c:7e:7e:25:a0:b4:
9f:2c:b7:94:7a:0b:9e:75:bf:6d:7e:32:5b:78:32:
c0:0d:b5:2d:24:29:c2:0a:cc:83:b0:c7:99:3c:c6:
b8:9e:c1:81:8a:82:f0:0e:11:1b:d1:b8:42:05:b1:
dc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:39:2E:87:08:8B:E3:46:24:27:BA:EB:39:7D:64:EF:02:67:0E:C6
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B334316A876E11EEB05019324AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.9.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:79:64:95:68:31:1f:79:26:90:e0:13:ac:0b:a9:48:94:27:
d1:72:04:90:63:99:e0:80:61:8d:25:d0:f7:32:28:82:31:f5:
85:d7:d3:70:cb:79:32:6b:9d:44:7d:22:87:62:3f:70:06:11:
d4:9b:67:e4:ac:05:1e:90:28:9c:0a:f0:4a:c3:15:56:02:7e:
d9:b3:5a:e2:0c:58:00:c0:bc:5e:f4:4d:c1:84:70:26:70:60:
53:6b:e7:87:ce:bf:8c:e7:2d:c2:01:a9:9e:fb:de:be:8e:3f:
24:ac:f1:96:79:4d:46:6c:ec:76:51:82:7e:55:cb:b9:ee:ff:
e6:65:16:ef:c9:b4:79:a9:86:40:fe:2d:e6:52:a0:73:f0:b2:
f4:47:a0:48:98:86:8b:76:af:15:96:fe:23:9d:ca:c5:67:8c:
fb:86:77:b9:e7:98:45:4f:8d:4c:5d:31:c6:2f:54:77:01:f0:
6a:4c:ef:53:c0:6f:bc:b5:51:5d:31:cc:3a:27:9f:2d:64:e6:
34:23:53:28:3c:97:b8:48:d6:f6:45:44:76:b0:61:be:f4:4f:
76:0d:d8:75:b1:b4:a3:80:e3:ac:1f:c1:08:07:36:4d:aa:fe:
8f:bb:03:b1:e5:21:44:26:8d:da:c8:1c:df:e5:13:4a:f8:55:
13:82:b1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 08:55:15 2023 by rpki-client on console-ams.rpki-client.org