Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B621F1A2723611EEAC81C46E4AD9E6FC.roa
File: B621F1A2723611EEAC81C46E4AD9E6FC.roa (raw, json)
Hash identifier: wsuFzA6xkZlrn0T2h7GkjbI2PBYENH4badHjHEH3+DQ=
Subject key identifier: 69:58:DE:2A:D5:E2:3F:19:30:2C:D0:6C:A1:96:F1:BB:28:1A:36:2A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 12EB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B621F1A2723611EEAC81C46E4AD9E6FC.roa
Signing time: Tue 24 Oct 2023 06:29:40 +0000
ROA not before: Tue 24 Oct 2023 06:29:37 +0000
ROA not after: Wed 30 Oct 2024 06:29:37 +0000
asID: 834
IP address blocks: 154.16.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4843 (0x12eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 24 06:29:37 2023 GMT
Not After : Oct 30 06:29:37 2024 GMT
Subject: CN=65376454-fab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:6a:8e:aa:f7:a2:4a:32:29:e8:b2:81:50:
db:bb:7e:ea:7e:25:50:85:b7:5d:5b:8e:57:6c:2e:
07:85:90:18:df:b9:e6:b2:d8:10:4a:b7:cf:e9:23:
65:5b:13:70:70:82:24:e8:19:ca:83:40:36:54:19:
b5:d4:e1:1c:f4:8c:8d:ab:67:32:1b:66:c6:d0:bb:
e4:2e:d6:c0:ab:d7:7f:bd:bf:47:34:25:5d:37:ad:
00:56:ac:28:56:c0:7f:1e:dd:52:cb:75:40:69:03:
63:9b:8f:9d:44:52:93:75:d9:13:4f:dd:2a:06:11:
7a:4d:f9:f0:8a:7a:dc:6d:32:1f:4a:89:c8:57:4a:
1b:ba:e0:9a:85:d6:98:ee:7c:f6:91:1a:4f:48:50:
80:c8:15:78:9c:5d:e7:eb:76:14:8d:26:af:ff:1a:
10:fc:20:27:e6:43:e8:0c:1f:68:4b:2b:89:8e:18:
ad:2d:91:4c:48:e5:2f:0a:43:0a:00:da:d1:71:36:
34:36:0a:0f:9f:4e:07:1c:36:fc:62:df:4b:c9:86:
00:46:fa:79:dc:72:9a:74:3e:7d:5d:01:e2:42:ce:
a1:63:60:15:e9:c6:c0:cf:d5:e6:49:9e:59:3b:02:
a0:52:53:03:c3:1c:2d:5a:12:64:3c:65:72:64:5d:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:58:DE:2A:D5:E2:3F:19:30:2C:D0:6C:A1:96:F1:BB:28:1A:36:2A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B621F1A2723611EEAC81C46E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.9.0/24
Signature Algorithm: sha256WithRSAEncryption
52:98:03:b8:49:d7:3f:a7:53:29:d9:80:18:c5:26:f7:2d:f1:
27:08:ad:97:54:72:33:4e:42:a7:a2:7e:9e:2d:00:f3:13:ba:
70:5a:01:46:c4:50:7a:24:66:c4:ab:f0:60:b6:c8:29:6e:f8:
1b:44:b9:bf:9f:e9:c8:0b:87:3c:88:82:d2:a0:62:8f:58:08:
78:99:1d:14:65:eb:5b:36:c7:6f:7c:c6:b8:f2:d6:b3:85:1e:
db:43:56:8a:ce:30:ad:78:7a:81:1e:91:4b:3b:43:cf:c4:45:
2a:ab:04:7d:01:c9:39:c0:65:33:a7:4c:b2:f4:55:e7:18:56:
e7:58:ed:ff:9c:d3:09:ef:7b:33:2b:fc:e0:47:88:4e:e5:77:
43:e3:3b:f1:56:1d:e7:75:2b:42:85:95:3c:f2:26:75:2c:f1:
18:b9:ea:24:4b:28:8b:df:be:6f:38:d4:4f:25:93:ee:71:93:
9d:44:f3:13:06:83:11:7d:77:a9:2d:5c:16:49:4a:c8:5f:2b:
d4:c9:28:ad:63:a2:84:da:b6:9c:6a:63:09:23:ee:4c:0b:70:
47:24:e7:f4:11:49:69:d7:e4:65:70:96:d5:98:f5:ef:c7:e4:
df:3b:58:14:45:9b:3b:7f:9f:ea:b0:76:9b:e0:8f:82:aa:2d:
f1:8f:c3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 07:00:58 2023 by rpki-client on console-fra.rpki-client.org