Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B33D03FC047F11EE803878404AD9E6FC.roa
File: B33D03FC047F11EE803878404AD9E6FC.roa (raw, json)
Hash identifier: ee8Oq5v1M198xC/tiQzMOnu+3C3x0fYip8Js6NfKWhE=
Subject key identifier: 77:7E:38:A5:C7:ED:0D:02:91:CB:8F:29:E9:82:B6:51:26:A5:EA:FF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0EDC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B33D03FC047F11EE803878404AD9E6FC.roa
Signing time: Tue 06 Jun 2023 15:35:01 +0000
ROA not before: Tue 06 Jun 2023 15:34:57 +0000
ROA not after: Thu 05 Jun 2025 15:34:57 +0000
asID: 399045
IP address blocks: 154.16.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3804 (0xedc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 6 15:34:57 2023 GMT
Not After : Jun 5 15:34:57 2025 GMT
Subject: CN=647f5225-7f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:0d:78:dd:59:15:8e:d0:4e:c6:a5:b3:9d:1f:
2b:e5:e6:3a:2e:d7:86:c8:ea:b1:87:36:45:d5:e7:
48:56:e4:8f:a3:af:42:a3:0a:01:97:52:95:69:48:
94:af:f4:37:57:d7:c9:f2:17:15:61:b2:4a:d5:06:
c5:e8:f1:2b:86:83:bd:4b:73:cb:23:e9:f3:53:6d:
57:e0:8f:57:56:42:1e:79:dd:a0:e8:95:b7:d0:82:
c4:3b:8d:6a:55:5e:f9:6d:f8:0e:e5:a4:9f:46:92:
97:c8:a8:b4:6e:0f:18:20:ae:fb:c7:b2:3f:8d:d8:
5e:85:c0:5d:8f:df:ae:9c:e5:63:6b:c7:78:e7:0a:
2d:e6:b5:b6:cf:10:11:53:7c:c6:c2:2b:e0:00:9a:
1c:39:5b:99:d3:22:fb:fa:70:03:71:b2:41:eb:5b:
90:f5:e4:ec:45:2f:3a:60:d2:f7:fd:27:17:a8:ff:
55:f9:87:92:0e:fb:e2:f4:f8:2a:e1:28:73:f4:46:
a0:d5:77:ba:03:16:dd:78:ae:7b:86:bd:27:20:2e:
4a:4f:57:52:a1:b5:5e:0f:f4:34:d1:50:00:c2:6e:
8c:43:3d:12:ed:7b:2e:bb:56:ff:4e:bb:50:41:bd:
a2:b9:b5:6e:0c:a2:aa:db:b7:9a:8a:4a:94:c0:04:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7E:38:A5:C7:ED:0D:02:91:CB:8F:29:E9:82:B6:51:26:A5:EA:FF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B33D03FC047F11EE803878404AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.84.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:43:11:1b:74:62:74:ad:7d:5b:b4:8b:a9:8f:2b:6b:e6:7a:
61:0b:d2:53:bb:22:3e:db:eb:37:40:24:33:86:09:0d:74:fe:
e5:3f:3b:67:c5:15:e5:ac:33:b2:26:8a:f1:da:98:7d:29:36:
39:af:a1:0c:23:80:68:24:9b:1b:b3:c0:b5:38:73:00:92:ea:
54:a7:c7:70:93:25:d4:4f:8c:3a:f1:97:88:37:b3:56:1d:72:
a2:2a:30:e6:83:0f:44:43:f6:87:22:88:f5:54:0a:11:01:f5:
56:15:41:98:71:ea:f8:7b:74:12:1a:39:f4:51:bc:d1:0e:f9:
ae:74:a2:b1:74:93:37:86:a2:4c:d9:51:b3:07:de:c8:57:fa:
23:4d:af:f7:eb:0e:53:da:df:5f:72:f0:48:39:5c:88:cd:34:
ae:87:96:1c:41:25:04:84:0b:83:2b:6f:24:a2:be:b2:c6:b7:
c4:2f:3a:48:20:c5:9e:cd:63:9e:b7:7f:77:21:0d:50:c6:c0:
eb:40:37:5e:15:4c:23:94:04:f1:c6:9b:87:fd:29:26:18:f1:
01:9f:27:bc:71:74:51:bc:eb:ca:4f:e2:dc:71:06:b0:28:52:
15:9e:c3:ce:ae:af:d9:70:6a:75:ea:46:b0:17:a5:0a:e7:67:
ad:9c:36:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 07:51:49 2023 by rpki-client on console-ams.rpki-client.org