Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C7821D5090EB11EDA5F9DDF5F1222468.roa
File: C7821D5090EB11EDA5F9DDF5F1222468.roa (raw, json)
Hash identifier: vrmqmnBYgcceG7sIndYZYZhR+njarCMggvfaSIPbJSU=
Subject key identifier: 61:A2:0D:0D:83:E9:8E:D6:A2:A8:CC:57:B6:D1:59:79:73:7E:01:57
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0B6A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C7821D5090EB11EDA5F9DDF5F1222468.roa
Signing time: Tue 10 Jan 2023 13:36:26 +0000
ROA not before: Tue 10 Jan 2023 13:36:22 +0000
ROA not after: Wed 10 Jan 2024 13:36:22 +0000
asID: 35913
IP address blocks: 154.16.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2922 (0xb6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 10 13:36:22 2023 GMT
Not After : Jan 10 13:36:22 2024 GMT
Subject: CN=63bd69da-479f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:23:54:d4:f6:25:6c:02:fa:76:54:e8:c0:d0:
e7:3b:82:16:b5:40:69:28:02:79:f6:9f:c9:04:cc:
a0:06:f4:77:2b:0f:46:62:79:94:4c:9e:12:90:47:
9a:bc:15:f2:f0:46:f7:62:29:00:f8:6f:d7:d7:dd:
b4:7a:8d:11:a4:0e:01:95:da:31:7e:c1:73:90:ca:
a2:60:4d:da:c8:37:7a:35:c5:3f:54:ee:6f:bb:7a:
43:e9:23:6d:d7:7a:9f:43:9a:6b:a4:bf:29:31:57:
a6:74:66:af:b9:71:ee:e5:2b:89:1d:9b:a3:c3:96:
ce:b5:14:b7:8b:c3:a3:6e:ad:b5:67:7f:c5:35:27:
f4:cf:2a:f0:82:b1:ea:40:06:8e:4f:d8:41:e5:e9:
1e:2d:cd:5f:a3:9d:ce:07:50:74:9d:ff:bc:85:43:
32:d2:5c:fd:6e:7c:43:a5:4e:95:6b:e2:ee:77:d3:
f6:54:11:5d:f3:f5:65:62:6f:18:35:a5:5e:e7:4c:
97:2d:06:e7:13:bb:6a:73:31:66:c0:e4:79:b5:12:
18:a7:9f:d8:b9:6b:3f:47:0c:56:74:7e:27:f1:54:
4d:73:50:e3:5d:5e:32:b4:1d:f5:c9:62:1c:f2:50:
c1:9c:9d:cb:6c:69:9d:cf:f9:57:8b:7e:c5:22:47:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A2:0D:0D:83:E9:8E:D6:A2:A8:CC:57:B6:D1:59:79:73:7E:01:57
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C7821D5090EB11EDA5F9DDF5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.107.0/24
Signature Algorithm: sha256WithRSAEncryption
85:2b:9f:b9:e6:67:63:c0:46:24:36:70:6b:cd:d0:9e:e2:58:
8e:7b:4d:85:f8:92:18:79:37:60:54:53:58:62:39:80:ef:c7:
18:23:7d:c4:fb:e6:c3:be:67:af:cd:da:b0:75:99:0d:b3:66:
55:52:b7:01:a6:57:27:32:e5:8b:46:e7:d1:dc:03:5f:93:cb:
9a:c9:43:00:3f:8a:e6:71:d5:3b:60:e2:f3:21:17:b7:9a:43:
58:ec:9e:03:71:f3:a5:8c:f4:f9:47:8c:33:94:12:7d:06:f6:
77:23:6c:a7:8e:57:2f:f8:f2:bb:8a:4e:14:78:6b:72:26:e6:
d3:4f:ff:d4:c5:d4:b1:26:b2:c8:22:2f:d8:ad:c8:89:14:70:
36:86:6e:3f:37:1d:a2:11:a7:4f:5e:f7:e5:ea:1f:3d:20:76:
77:bd:68:50:1f:37:86:96:8d:30:75:2c:81:56:12:5b:54:f8:
53:6e:d1:57:ad:b2:2c:6c:07:1f:52:6e:fc:46:c9:3a:e2:b9:
c1:45:df:ed:42:b6:3b:f9:f7:f4:c5:60:7f:5b:d2:ee:42:8c:
90:33:fc:3d:01:6a:cc:c7:bb:29:f6:c8:26:c7:0c:7e:6a:c7:
db:a1:08:68:31:d9:13:26:99:75:13:42:f6:e9:93:6c:74:ff:
f6:d8:cf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org