Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D0A16E9C0ABF11EE9017EF194AD9E6FC.roa
File: D0A16E9C0ABF11EE9017EF194AD9E6FC.roa (raw, json)
Hash identifier: 0PkyK5Xbp6oybVPXS3iW78sc51687lriMTm93zNi3g4=
Subject key identifier: F8:15:2E:4C:F1:6F:9B:67:97:11:D6:D6:EC:1A:34:39:62:ED:7B:75
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F6E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D0A16E9C0ABF11EE9017EF194AD9E6FC.roa
Signing time: Wed 14 Jun 2023 14:29:05 +0000
ROA not before: Wed 14 Jun 2023 14:29:02 +0000
ROA not after: Sat 14 Jun 2025 14:29:02 +0000
asID: 200482
IP address blocks: 154.16.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3950 (0xf6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 14 14:29:02 2023 GMT
Not After : Jun 14 14:29:02 2025 GMT
Subject: CN=6489ceb1-4943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:65:8f:92:bf:c6:4e:bf:dd:48:f2:88:ea:36:
9a:4c:ec:62:f5:dc:ba:4d:b3:ae:5f:9d:c8:11:7a:
15:74:2d:4c:9b:89:45:e3:c7:f0:5a:a0:9c:02:58:
a4:a4:10:82:d3:aa:e2:a6:7a:c5:58:8f:13:bc:8b:
e5:f6:d8:9c:39:d3:a0:58:a5:44:18:0e:26:01:f5:
50:aa:f7:f4:c5:d4:f1:ad:ef:3f:bc:51:0f:2f:24:
93:9c:8f:42:09:f7:ba:fc:d4:29:51:26:3f:8e:5c:
ff:d0:be:4e:a5:01:fb:c7:30:ef:0e:b2:37:99:0d:
07:6b:ce:14:26:2c:54:62:d2:41:20:5a:45:01:a3:
30:e9:4d:e8:3b:ce:20:80:5f:e3:62:95:00:ff:f3:
9c:1c:4c:6f:3c:c9:e4:57:47:61:7d:9a:60:7c:06:
5d:83:c6:b6:59:d7:d0:9d:34:a6:be:3e:17:8a:8b:
63:d2:e1:af:a8:f0:f6:18:6a:6e:af:bd:46:5a:d9:
53:6f:b9:bc:2c:66:ca:81:c9:59:d6:11:b3:fb:79:
5d:78:20:fc:71:f6:53:c0:bd:66:1d:a7:87:2e:dd:
e2:f3:08:6c:b4:64:e2:93:5f:82:71:c4:67:4e:17:
b0:b6:31:06:78:48:18:f9:57:ce:4b:c9:64:95:3a:
f8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:15:2E:4C:F1:6F:9B:67:97:11:D6:D6:EC:1A:34:39:62:ED:7B:75
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D0A16E9C0ABF11EE9017EF194AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.204.0/24
Signature Algorithm: sha256WithRSAEncryption
83:d6:33:c0:f3:25:19:05:d6:f3:24:d0:6b:df:7a:aa:76:e3:
34:89:fe:44:01:fe:c3:68:b7:0e:d8:3e:cf:01:4a:6c:5a:01:
33:b1:43:7e:a8:bb:ce:80:b6:84:ad:d0:e8:83:fb:b0:ff:7f:
c6:55:fc:44:de:92:f5:c0:c7:59:12:a4:ba:48:a0:55:ce:4a:
f7:ab:a6:54:19:ac:2d:2a:e9:e1:05:4c:95:73:cb:5b:b9:0b:
88:b0:7d:c8:ae:99:4a:1b:e1:2f:dc:13:d9:01:dc:56:6e:07:
c0:9f:1b:6a:e8:4f:76:ce:f0:c4:e1:c9:ea:67:ff:84:a5:0a:
bf:25:de:ba:19:fa:57:2e:b3:e1:66:cb:f2:0d:56:c9:ee:14:
7d:d4:c2:5c:7b:4b:a5:a0:ee:1c:e3:c9:b9:d0:20:2d:bd:0f:
c4:60:22:5d:16:06:6b:2c:7d:38:d2:a2:44:24:00:01:84:7d:
06:08:17:e9:3c:28:17:df:dc:1f:6e:66:04:ff:5b:ba:23:cf:
11:6c:95:b4:b1:a5:3a:c9:09:1d:46:fa:86:ad:ce:ef:27:28:
7b:c7:78:26:3b:2b:72:f7:dd:33:6e:fc:68:17:50:1b:81:73:
e9:91:92:4a:a7:5a:6e:66:ad:e4:0d:ce:d4:5a:09:85:65:90:
66:5f:2f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org