Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D9DD58D0539511EE937C33404AD9E6FC.roa
File: D9DD58D0539511EE937C33404AD9E6FC.roa (raw, json)
Hash identifier: w33mFyk7/5PG8OeFYiZVIwAwBv5KDh++R6HuBoKS8D0=
Subject key identifier: 1D:CE:3A:E6:DF:9B:28:FD:82:4C:64:EC:D0:9B:14:83:DA:E5:55:E4
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1234
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D9DD58D0539511EE937C33404AD9E6FC.roa
Signing time: Fri 15 Sep 2023 07:02:37 +0000
ROA not before: Fri 15 Sep 2023 07:02:33 +0000
ROA not after: Mon 15 Sep 2025 07:02:33 +0000
asID: 834
IP address blocks: 154.16.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4660 (0x1234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 15 07:02:33 2023 GMT
Not After : Sep 15 07:02:33 2025 GMT
Subject: CN=6504018c-fa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5d:17:3d:18:ac:f2:0f:c1:54:e0:70:6c:11:
44:97:8f:74:18:11:87:f9:7c:65:fe:f1:e6:9f:10:
29:c1:4e:78:43:98:b9:55:79:20:8a:60:61:1b:15:
a6:d2:f7:60:84:d4:fc:db:ac:98:92:44:0c:8a:1b:
4a:50:27:4f:a2:c8:26:98:4f:a7:6a:ef:dc:ce:a0:
86:2e:e8:e9:13:a2:a9:5f:51:2c:09:52:5c:a0:f3:
50:d9:80:fa:80:42:2f:ce:8c:1d:32:44:5d:4a:6b:
0a:19:c7:85:be:82:43:17:70:be:23:31:a3:c4:07:
30:d5:b5:54:fe:7f:ee:86:df:0c:87:bb:40:c8:eb:
87:46:87:61:e5:d2:03:a0:e1:3f:5e:84:53:5e:bc:
fd:d1:7a:f3:0d:d8:2f:b2:48:05:26:fd:4b:0c:e7:
2b:92:41:48:fa:2f:b6:37:07:48:28:a5:45:8a:7c:
6c:51:e8:18:53:87:54:fd:5f:47:c1:13:72:b9:7e:
6f:7f:d8:ce:c1:f3:8a:66:b8:0f:90:83:f5:83:22:
ea:01:2b:fc:a4:21:ab:70:0d:20:c7:7b:e1:2a:b5:
cf:0a:a0:ee:9c:79:af:b5:62:79:0d:27:64:fb:e2:
23:3a:a4:11:67:39:c0:83:be:c8:2d:5f:f6:7f:13:
2c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CE:3A:E6:DF:9B:28:FD:82:4C:64:EC:D0:9B:14:83:DA:E5:55:E4
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D9DD58D0539511EE937C33404AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.96.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:cb:44:d2:28:9f:61:d6:fa:06:24:e4:a6:9f:98:ac:4e:e0:
bf:a5:d7:c6:58:d3:40:87:7a:37:d4:ec:51:79:6d:2a:e2:f3:
5a:77:48:4a:38:62:2d:e1:37:66:bf:55:af:5f:7d:44:fc:6e:
df:a8:2b:9a:23:3d:a9:33:36:12:23:b9:a1:0b:53:c5:1d:14:
9d:97:8f:68:44:0c:20:90:0b:a5:9e:e4:53:72:07:6a:d0:62:
74:ba:3a:a6:2b:1c:2f:24:e7:da:2e:c3:c3:a2:cb:8d:9a:25:
e6:fe:5f:e2:aa:6e:f9:a8:95:aa:b6:76:51:52:d8:7a:35:e0:
24:f8:f2:e6:0f:d9:2c:87:89:4b:7d:a0:5a:e3:7a:d6:ac:68:
3d:9c:70:3b:bf:ee:fd:e8:0e:f8:13:5b:a7:14:62:d3:c4:61:
2f:61:2e:2b:d1:be:5a:b5:31:bf:0f:24:55:70:8f:e1:49:fa:
76:b6:23:d1:2b:6a:e8:8f:dc:91:1c:04:58:ef:5e:dd:5f:87:
b8:06:97:4d:24:62:75:98:cf:f5:08:20:6e:74:d8:2e:21:be:
cc:8d:23:a4:73:01:51:49:91:d2:30:12:9d:5e:32:1b:fa:4a:
c0:42:dd:7f:9b:40:92:cb:f4:0b:fc:7f:9d:db:f9:3f:29:6d:
42:f6:90:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 16:38:21 2023 by rpki-client on console-ams.rpki-client.org