Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D0A4A8CC004D11EE88CA6F7C4AD9E6FC.roa
File: D0A4A8CC004D11EE88CA6F7C4AD9E6FC.roa (raw, json)
Hash identifier: vIIPrnMJWg02Yqp6dZhLiPucX/HJKMcGvtRWF0JnALw=
Subject key identifier: DA:D0:2D:0D:79:2F:16:94:01:C4:C8:F2:AE:12:F3:CD:0D:1E:1D:EE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E74
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D0A4A8CC004D11EE88CA6F7C4AD9E6FC.roa
Signing time: Thu 01 Jun 2023 07:27:51 +0000
ROA not before: Thu 01 Jun 2023 07:27:47 +0000
ROA not after: Sun 01 Jun 2025 07:27:47 +0000
asID: 834
IP address blocks: 154.16.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3700 (0xe74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 1 07:27:47 2023 GMT
Not After : Jun 1 07:27:47 2025 GMT
Subject: CN=64784877-3869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:60:68:bf:c7:3f:f6:8f:36:8e:83:ae:c2:eb:
ef:42:ef:d9:ac:7a:23:43:4e:b8:7c:95:be:c9:d6:
8d:3b:0a:22:d8:51:68:92:78:ed:6b:6c:fd:cb:53:
e9:bc:e1:2b:57:d3:46:ea:10:67:d7:4c:35:33:2d:
b8:24:b1:92:c2:db:3b:c3:2a:b6:c2:3c:36:a9:1c:
44:bf:ab:b4:13:67:e5:47:ff:56:5f:e5:85:7a:ba:
19:8a:fa:0b:e6:c1:a8:32:dd:80:1a:90:7f:4f:1c:
9a:0f:ee:24:8a:22:4e:5b:1b:aa:51:d7:0f:91:f2:
ae:ff:cb:ab:3b:ec:cd:24:1c:1b:eb:57:7e:fb:72:
40:73:79:65:da:9b:06:75:fa:8c:d9:83:08:b1:27:
c9:26:30:58:03:b8:dc:2c:f0:1d:be:7b:d1:5a:2f:
c9:91:e2:46:41:bc:b8:11:a7:c6:9e:09:d6:2a:84:
3e:86:e1:be:28:0f:b2:09:8f:4f:69:bf:f1:90:3c:
67:12:f1:88:b6:3a:b5:57:8f:79:07:07:6e:3d:4d:
a3:a4:cd:0a:16:df:9c:41:d5:8a:fc:59:3f:78:ed:
7d:56:09:0a:3e:16:1d:86:90:a1:9b:55:fa:c2:0c:
71:d9:6b:b0:fe:4f:45:ee:19:8d:19:95:21:90:22:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D0:2D:0D:79:2F:16:94:01:C4:C8:F2:AE:12:F3:CD:0D:1E:1D:EE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D0A4A8CC004D11EE88CA6F7C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.28.0/24
Signature Algorithm: sha256WithRSAEncryption
95:70:c6:3d:c5:f9:26:33:8a:5c:c0:c4:3f:4b:a0:d6:26:28:
3b:ea:8f:bf:a0:02:e3:3d:68:19:8b:d3:40:fb:07:61:40:33:
66:e8:53:68:de:b7:ae:4f:4f:cb:fb:b9:f1:e7:27:fd:8c:80:
1b:9d:26:2f:1e:96:26:a9:2d:31:3e:70:53:03:e8:ad:8d:e2:
32:b3:e9:23:9b:e0:b7:74:43:b0:ff:48:8e:23:d0:7a:5f:c7:
46:75:53:e1:e9:9a:13:11:08:c4:6b:26:d9:5e:b3:80:17:70:
a0:ed:12:ec:fa:af:5e:7e:fe:a5:17:2f:7f:6a:cd:74:90:43:
e9:d3:9a:2c:3c:c6:28:47:91:e8:d4:e4:30:e6:eb:b5:51:0d:
76:f5:e4:e8:1d:5f:8d:c2:1a:0c:bc:d1:d2:d8:b7:a6:fe:c1:
6f:e7:f4:8d:b4:f7:42:af:82:28:c9:ad:41:7a:51:80:79:70:
b6:27:f8:ad:3f:2c:a0:40:d1:34:35:f4:04:36:7a:b5:98:a2:
56:f8:a8:80:c7:7d:6d:bc:4d:47:08:29:10:dd:4e:29:81:cc:
55:d1:84:a3:ab:f9:40:55:a1:95:20:a9:7b:df:1c:59:c6:ee:
99:16:e2:8e:7e:b2:cf:39:da:cf:06:1a:b7:f2:0c:74:09:e8:
a0:82:97:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org