Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C4B713C8FDF111EDA1FC78534AD9E6FC.roa
File: C4B713C8FDF111EDA1FC78534AD9E6FC.roa (raw, json)
Hash identifier: hN4BvhakvWs2DeV0TtRhOOVp8495FVWvD+mzvpMuRmc=
Subject key identifier: 93:AF:E8:EF:92:D6:C8:F4:7E:F8:74:AD:BA:AC:03:5D:71:9E:BB:FA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0DF5
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C4B713C8FDF111EDA1FC78534AD9E6FC.roa
Signing time: Mon 29 May 2023 07:23:55 +0000
ROA not before: Mon 29 May 2023 07:23:51 +0000
ROA not after: Wed 28 May 2025 07:23:51 +0000
asID: 398465
IP address blocks: 154.16.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3573 (0xdf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 29 07:23:51 2023 GMT
Not After : May 28 07:23:51 2025 GMT
Subject: CN=6474530b-47b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:21:9c:69:9a:c3:9f:4f:4d:5e:f9:8f:f4:1d:
39:4c:88:6c:2b:20:10:55:66:bf:4c:29:42:96:ce:
dd:ff:a1:fa:f3:c4:33:9b:50:e0:e7:d2:87:5d:6f:
5a:79:02:15:85:8c:4d:5d:9c:5d:a9:2d:72:74:3f:
06:a2:67:4f:1b:08:a5:55:9d:af:9a:7f:df:61:af:
b6:49:af:30:e2:a1:9e:0c:81:e0:15:0c:6b:cd:3f:
08:5c:40:5d:46:78:7c:5e:76:d9:72:3c:78:3f:18:
bf:77:92:7a:03:7d:93:e8:cc:a4:ef:f9:e9:e7:d5:
ef:5b:cd:95:24:8e:49:d1:1a:c7:c6:52:a7:43:8d:
83:85:c5:d4:4b:b7:a2:74:81:b6:bf:67:f4:d6:e7:
0c:13:78:95:42:0b:1f:28:a7:96:63:85:15:87:73:
00:dd:3b:8b:a7:61:f5:bd:f3:a1:c8:48:d3:d9:12:
0b:6f:26:cc:2a:84:0c:85:07:50:d9:5c:41:13:c1:
1d:9e:ee:76:8d:d4:48:4e:8d:34:83:9a:94:1a:c3:
57:aa:18:94:58:04:77:41:e2:5f:8e:16:45:67:e0:
ff:4f:ce:6d:19:42:8e:af:8c:38:9b:9f:aa:e1:07:
27:69:86:3a:cd:41:77:1c:cf:53:f8:11:0e:3a:d6:
68:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AF:E8:EF:92:D6:C8:F4:7E:F8:74:AD:BA:AC:03:5D:71:9E:BB:FA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C4B713C8FDF111EDA1FC78534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.107.0/24
Signature Algorithm: sha256WithRSAEncryption
52:d3:15:b5:d6:53:44:bb:31:17:2b:f9:99:ba:fc:09:49:b0:
4c:5f:fe:71:5e:08:da:92:68:aa:f9:ef:37:76:2e:b0:fb:f0:
db:31:56:3c:ae:c5:50:da:c0:05:cb:47:8a:67:dc:64:59:c9:
10:0f:0f:7c:bb:a6:7f:15:dd:b3:1c:54:93:87:95:7f:71:d6:
d4:c7:06:e4:08:04:79:a7:20:82:2d:ef:0b:7c:46:72:b2:01:
0f:c0:37:81:b4:32:3b:a9:5f:be:d1:36:e8:71:45:51:fa:25:
28:d6:f2:e7:df:06:71:76:db:da:50:52:e4:a6:3f:8e:cf:a1:
bf:04:61:79:69:0a:d1:72:18:37:ce:5c:8e:46:00:b3:e5:4a:
16:cb:e0:6d:40:b7:bc:bf:87:b5:4a:75:bd:45:16:e6:37:4c:
c5:fc:6e:5c:6f:04:fa:c8:e9:a5:a0:70:40:c1:c5:23:9b:d3:
e8:27:18:1b:5b:a6:f1:73:d8:b5:dd:75:05:33:42:df:b4:32:
43:8b:27:25:59:a2:ea:21:76:af:a6:a0:5e:79:01:f7:4a:dc:
b8:5b:61:18:e5:9f:34:8f:9c:80:e6:9d:28:bd:ea:06:da:7e:
ea:91:87:e9:1a:68:07:4b:0a:8e:5a:f1:8d:6b:78:75:dc:10:
d7:f9:f8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org