Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BBEF33A6730411EDA06E70B6F1222468.roa
File: BBEF33A6730411EDA06E70B6F1222468.roa (raw, json)
Hash identifier: mJVrUhGMHIzdmv3h6b/d3KJbUKWVNqxoRXojFe71TAE=
Subject key identifier: 32:58:C2:11:56:52:BD:9F:12:2C:E0:62:7E:A4:91:43:D2:B8:79:34
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0AE7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BBEF33A6730411EDA06E70B6F1222468.roa
Signing time: Sat 03 Dec 2022 12:19:29 +0000
ROA not before: Sat 03 Dec 2022 12:19:25 +0000
ROA not after: Tue 03 Dec 2024 12:19:25 +0000
asID: 207459
IP address blocks: 154.16.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2791 (0xae7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 3 12:19:25 2022 GMT
Not After : Dec 3 12:19:25 2024 GMT
Subject: CN=638b3ed1-5910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b3:ab:c1:c4:2d:c2:8b:8c:d2:84:8b:0f:ad:
4e:2a:ee:e9:fb:cc:4a:3b:82:c4:05:34:1f:81:11:
09:a0:05:36:1b:71:e2:36:e6:1a:ba:5b:fa:d8:6f:
ef:1e:f3:10:35:2f:24:ee:2c:54:f7:b7:43:42:0b:
db:2e:38:b6:f6:17:dd:cc:58:ad:05:77:0e:54:37:
59:bd:55:16:cd:a9:70:d5:37:fe:1f:39:c5:5e:65:
b3:4b:80:7b:03:82:9f:dc:f4:1d:69:80:fd:9c:46:
5f:4d:ef:f7:a1:eb:89:8c:6f:55:40:f0:52:59:50:
2f:2c:c9:03:c5:eb:1a:db:3c:23:a3:22:a8:fe:3b:
24:5a:fe:3d:60:bd:ea:43:77:b0:56:f8:d6:37:46:
7f:ab:eb:82:ab:3b:cb:01:90:da:5e:b1:e4:00:ea:
df:c8:2d:2b:d2:40:e7:32:ba:70:e9:ff:4e:58:30:
e0:c1:5b:24:da:a8:9a:41:22:9c:2d:b5:2b:2c:71:
85:5e:0d:0e:39:42:58:ca:59:a8:3c:1f:2d:4a:17:
8d:41:c1:68:61:91:8d:ac:58:14:89:d6:63:32:19:
ed:77:b7:3c:fe:fc:16:47:c7:47:f3:67:c3:16:22:
28:bb:ac:e8:ec:ea:42:37:f0:5e:14:55:1b:04:68:
d2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:58:C2:11:56:52:BD:9F:12:2C:E0:62:7E:A4:91:43:D2:B8:79:34
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BBEF33A6730411EDA06E70B6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.123.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:b1:8d:42:29:66:78:c4:b9:b6:fc:f8:d3:9a:48:58:47:99:
17:ad:6a:db:5e:2c:04:b2:23:e1:83:07:13:5f:07:f7:9d:c7:
92:08:83:fe:2f:54:6a:ec:4a:78:59:67:62:a5:ee:09:a6:0d:
fd:8a:f2:eb:6e:c6:72:95:7c:3c:f9:73:ce:e1:7b:3d:ce:65:
a6:7c:86:b9:e8:77:89:ba:77:e3:27:cf:09:e3:b6:89:17:ce:
76:48:da:4a:c6:15:4b:d4:44:8c:a9:a0:66:7b:e0:8a:fa:98:
c5:49:7e:57:52:00:42:54:9a:b4:01:b0:05:68:ee:ea:ec:f2:
f5:ff:c8:42:58:68:07:ad:5f:29:a1:dd:0c:16:e3:ea:3f:61:
14:17:84:5e:e0:9b:71:2b:d6:62:2f:c9:80:00:1e:e5:79:9c:
68:62:b4:eb:73:10:d1:98:b0:75:be:d6:9e:f4:f3:af:17:29:
10:a3:c4:7a:9c:1c:4e:70:aa:c3:3e:f8:9e:28:49:26:28:05:
e4:ed:27:56:52:58:5b:14:6b:9a:8f:e7:4f:c8:45:84:26:6b:
57:36:95:04:93:21:aa:c6:7c:2f:06:fe:2b:96:8b:1e:8d:b7:
ba:62:94:a1:fd:e0:cf:4d:8d:9b:60:c4:83:56:1c:50:4e:bf:
df:a0:ed:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org