Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D5B20BF48E8011EE80FC2CD67D84E21B.roa
File: D5B20BF48E8011EE80FC2CD67D84E21B.roa (raw, json)
Hash identifier: LXF8xW+NKb+mJvpiEmCrsf8IiUpcUeMLjAKWyVEoYPs=
Subject key identifier: C5:01:61:AD:81:59:43:ED:37:36:D3:58:D1:F0:67:4E:96:EF:F9:3E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 138D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D5B20BF48E8011EE80FC2CD67D84E21B.roa
Signing time: Wed 29 Nov 2023 06:30:49 +0000
ROA not before: Wed 29 Nov 2023 06:30:45 +0000
ROA not after: Sat 29 Nov 2025 06:30:45 +0000
asID: 984
IP address blocks: 154.16.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5005 (0x138d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 29 06:30:45 2023 GMT
Not After : Nov 29 06:30:45 2025 GMT
Subject: CN=6566da99-f402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:08:6f:9b:44:b9:63:84:13:cf:01:33:11:
8b:29:e8:47:fc:eb:63:30:10:3f:12:42:1b:6a:16:
d3:68:8d:f3:68:40:db:5e:fe:bd:b1:9c:7b:7f:0f:
94:4b:df:83:0e:61:59:8a:7d:ca:06:9b:ae:77:c5:
02:af:b4:40:eb:af:9f:55:75:c5:11:45:3e:ee:02:
07:9c:fb:d4:98:99:ea:2f:04:d6:8d:2e:c4:a2:81:
90:48:91:19:a6:fc:9f:32:e4:67:7b:bd:70:17:0e:
df:fd:5c:4c:87:3c:7b:8f:84:49:1f:bd:0a:5e:4d:
cf:b4:af:9b:68:d3:8d:7c:9d:54:c3:9a:29:c8:6f:
8d:64:ca:be:c0:e4:12:e7:c5:25:83:72:5a:75:4e:
05:ac:20:3b:63:d6:53:3a:9d:61:5d:a5:3e:88:40:
54:1a:43:42:ca:9a:81:fb:46:94:29:d9:ce:5b:26:
8e:50:0f:2b:df:ca:75:77:9b:72:8c:23:00:7a:0f:
36:e0:9c:3a:22:93:2b:30:67:1a:3e:94:a7:d7:f7:
16:63:b3:fb:6d:1e:9f:13:45:6e:dd:7f:56:9b:d8:
fb:dc:2e:47:94:c2:42:88:fd:db:a3:1b:62:ae:e1:
b0:d6:6d:78:ad:d2:95:af:2b:fa:b6:fa:b7:2d:71:
fd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:01:61:AD:81:59:43:ED:37:36:D3:58:D1:F0:67:4E:96:EF:F9:3E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D5B20BF48E8011EE80FC2CD67D84E21B.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.240.0/24
Signature Algorithm: sha256WithRSAEncryption
35:00:69:7e:46:87:cd:b7:ad:47:f7:94:ca:99:61:fa:47:8b:
86:64:29:01:da:a4:5b:d7:b0:97:f3:ea:2f:74:d3:eb:cf:bc:
00:9c:ce:3a:3d:a8:e7:a9:a3:b5:19:2a:4b:f8:d3:02:e3:33:
e9:e3:31:4a:ff:77:19:03:31:0b:c6:1f:60:aa:5b:6b:63:b3:
b6:d2:fa:ce:94:9d:43:c1:ec:32:81:10:0c:95:75:0b:7e:c9:
cf:6d:de:75:31:d1:05:06:3e:19:d4:e0:6a:49:00:fd:56:fb:
80:88:49:29:28:cb:16:d3:35:c8:a8:74:07:b2:66:ae:2b:ce:
9c:c2:80:f8:32:10:a1:c5:52:85:fc:9a:18:60:8e:80:e1:f3:
1e:9d:4d:66:b8:03:c7:ba:e1:51:ea:62:b3:07:4a:ce:53:4a:
dc:ac:00:81:41:c2:f5:52:70:65:06:58:6f:66:1f:f5:7f:60:
73:64:9d:0b:68:01:94:df:de:83:12:b4:25:8c:5e:d1:db:a5:
1a:14:22:7f:ed:81:8e:76:63:c4:06:01:49:4a:99:ff:8f:0e:
3f:19:fb:74:43:0a:a9:86:e3:1b:81:df:c3:37:f9:45:fd:32:
a5:d5:fa:f4:1a:3e:77:78:b3:f7:f5:7a:6d:89:4d:64:9f:03:
a9:a1:37:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 08:55:15 2023 by rpki-client on console-ams.rpki-client.org