Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CFF5D1D2FFD311EDB748A8824AD9E6FC.roa
File: CFF5D1D2FFD311EDB748A8824AD9E6FC.roa (raw, json)
Hash identifier: k1Ag2vOy8zVQgfgBbqfSR5SjPRT84COHQjKLC5LLK0U=
Subject key identifier: 24:41:31:D3:D8:D9:2A:57:81:43:63:68:58:00:94:E3:C1:D3:46:11
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E3A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CFF5D1D2FFD311EDB748A8824AD9E6FC.roa
Signing time: Wed 31 May 2023 16:54:31 +0000
ROA not before: Wed 31 May 2023 16:54:27 +0000
ROA not after: Sat 31 May 2025 16:54:27 +0000
asID: 834
IP address blocks: 154.16.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3642 (0xe3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 31 16:54:27 2023 GMT
Not After : May 31 16:54:27 2025 GMT
Subject: CN=64777bc7-e85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0a:fd:9b:e4:fa:35:11:ba:e4:55:55:1f:b1:
89:4a:16:4a:34:10:54:8d:e7:68:da:42:16:cc:7b:
d7:c4:43:fb:99:65:48:f0:35:7c:b0:9e:cf:12:52:
35:ac:35:05:45:6d:10:3e:d1:b7:b0:bd:da:62:67:
5b:bb:f9:77:40:6f:43:9b:09:f4:95:e3:f7:81:25:
86:5f:99:09:f1:41:09:6b:0a:fd:06:69:63:83:a7:
34:f6:ff:8c:39:38:60:63:8c:85:18:05:30:cc:96:
46:da:2e:f8:a9:29:04:63:15:e4:40:e5:dc:7e:22:
5c:af:48:db:75:3c:ba:f6:6a:5b:07:73:bd:20:51:
5b:4a:21:f2:c6:8d:04:82:7a:70:3c:85:02:a0:41:
09:94:63:32:cd:34:e9:bc:4d:48:2d:67:b9:2c:ec:
ef:29:f4:1e:cd:4d:c5:80:a4:69:50:7b:6d:80:57:
6c:bf:98:2a:ee:cd:bd:1b:3f:44:f6:dc:84:aa:25:
f1:a4:eb:be:03:a0:0d:f9:d4:ef:96:11:1e:04:e0:
bb:20:b1:00:91:9b:80:22:40:a2:26:25:03:0e:b7:
de:aa:0e:df:cd:f3:d9:26:98:4f:51:59:8b:70:d2:
fb:b4:50:1e:19:d4:80:48:41:91:6d:c7:f0:f5:51:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:41:31:D3:D8:D9:2A:57:81:43:63:68:58:00:94:E3:C1:D3:46:11
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CFF5D1D2FFD311EDB748A8824AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.204.0/24
Signature Algorithm: sha256WithRSAEncryption
36:3e:cc:24:eb:d9:22:d7:9c:3a:05:55:1e:45:9d:2b:f6:0e:
bd:1e:a3:c5:cd:cb:09:97:62:6d:c6:35:a6:c3:38:2c:d8:72:
8f:9a:31:0b:32:7e:bc:84:5b:de:3c:a8:8e:45:f8:0d:52:81:
90:af:cd:6b:06:36:8d:e2:c5:8a:46:e4:0d:02:97:3a:6a:db:
85:2c:a1:26:23:bb:09:5a:34:b4:7a:11:ab:13:b4:1d:71:aa:
46:80:4a:a2:85:6c:b9:6b:26:33:62:35:e6:87:53:fb:37:47:
cc:bf:c7:00:0f:22:8c:f3:16:0f:aa:b1:4d:6d:aa:a0:b1:75:
64:c1:f4:41:61:78:c3:20:33:d4:d0:63:f8:2d:57:9d:8f:44:
fd:e7:09:b8:3d:8f:63:33:a9:19:43:89:88:e7:95:04:8d:cd:
9e:57:de:c3:5c:5d:eb:7f:1a:2a:6a:fe:1d:34:f6:8f:e4:f2:
fe:cf:1f:44:dc:06:4f:d0:e1:42:e6:e4:49:e7:45:80:b8:66:
d3:50:b2:06:24:53:88:66:51:9b:6c:04:51:d2:c6:23:bd:50:
f4:da:cf:bb:14:18:85:18:8a:04:60:6e:7a:cb:8e:ba:d9:45:
67:80:6a:91:7d:84:6e:9b:89:7a:dc:d5:dd:16:d6:07:6b:7c:
cd:7b:62:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org