Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BA63F0CEFFBF11ED923278484AD9E6FC.roa
File: BA63F0CEFFBF11ED923278484AD9E6FC.roa (raw, json)
Hash identifier: Z1hAEgkusinVcjfarE8pI3KWhPjusmu6J5tl6QhpZMQ=
Subject key identifier: 0E:0E:7F:23:45:93:28:A1:05:A6:D2:6A:B6:B9:5B:D4:40:39:AC:BF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E27
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BA63F0CEFFBF11ED923278484AD9E6FC.roa
Signing time: Wed 31 May 2023 14:30:45 +0000
ROA not before: Wed 31 May 2023 14:30:41 +0000
ROA not after: Fri 30 May 2025 14:30:41 +0000
asID: 834
IP address blocks: 154.16.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3623 (0xe27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 31 14:30:41 2023 GMT
Not After : May 30 14:30:41 2025 GMT
Subject: CN=64775a15-59fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:23:30:91:af:6d:6d:5e:f7:45:ee:27:01:e9:
38:a6:42:c2:40:df:68:f1:bf:55:ee:20:27:10:89:
86:d6:e5:dd:84:bd:89:c0:07:4d:48:d8:ce:f2:69:
49:69:5f:1c:61:ba:bc:e1:a5:d7:79:41:2d:0a:53:
ee:41:b9:68:0d:f2:51:e9:28:f7:7e:29:d2:cb:ef:
64:0d:92:6c:9f:3e:e5:28:88:ca:aa:e1:e3:89:8e:
3e:f4:4d:03:87:a8:d1:16:7c:9c:ab:05:2b:14:a4:
44:a8:5e:74:e7:09:0c:8f:7b:c5:9c:6e:a8:12:32:
fa:84:fe:00:c8:50:e4:c3:6f:71:23:29:aa:f7:fd:
29:9b:b8:d7:c8:df:5e:96:bb:dc:2d:1e:81:f9:c4:
d0:a4:3e:21:da:89:67:29:70:ad:bb:27:5c:85:a3:
2e:4b:61:ea:31:66:7d:10:5a:f9:fb:97:dd:dc:07:
0b:39:99:5a:6b:cf:7f:b5:a4:e2:f7:09:fb:bf:8a:
aa:68:49:2a:ac:09:c6:40:02:ea:f6:9c:aa:61:ea:
70:3a:75:cf:9c:26:6a:d1:94:6f:d4:58:27:87:40:
10:a0:3c:bf:dc:01:dc:1a:cc:59:74:df:cc:86:a9:
c8:e1:dd:44:71:51:d0:34:da:85:0b:c4:a6:4e:fa:
e2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0E:7F:23:45:93:28:A1:05:A6:D2:6A:B6:B9:5B:D4:40:39:AC:BF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BA63F0CEFFBF11ED923278484AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:83:72:66:f3:0f:e7:37:25:ff:4a:7b:f7:04:14:59:f8:cd:
8a:79:c7:bc:3b:6f:d3:58:37:d4:b5:64:4c:96:d9:b0:aa:e9:
c8:77:7c:5c:45:8e:dd:3f:e5:23:79:ba:dc:82:01:f4:44:af:
7a:42:77:cb:6a:b8:35:3d:2e:cb:bc:45:0b:a9:f7:35:54:0d:
f4:f0:c5:2a:3c:6b:20:46:af:e1:c3:4e:82:4a:f3:9e:6b:6f:
87:d8:18:a6:52:f7:ee:5a:65:06:4d:41:cf:f5:83:8d:b8:39:
91:0b:bd:22:5d:ae:2d:68:72:23:93:27:7e:39:d9:40:a6:3d:
d2:89:fa:96:74:d2:4d:8d:71:b9:88:21:0c:ea:9e:ef:7f:a7:
fe:d4:c9:aa:f4:82:c4:24:50:57:cb:28:68:9b:3e:ed:48:a9:
38:bc:ad:74:e3:36:a5:5b:d4:4f:36:dd:0b:1f:ca:84:29:b9:
95:bb:0e:61:74:9d:90:36:b4:b8:e2:3d:ba:54:48:ee:b6:be:
84:10:35:72:a9:8c:83:61:d3:bb:0a:f9:a8:56:45:7c:8d:92:
bb:90:91:d2:82:98:95:10:cd:de:14:f0:59:35:7e:76:68:c9:
2b:d3:cf:5e:a5:e4:4e:be:0b:fd:1d:5a:bc:85:b2:02:08:1a:
36:f0:62:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org