Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DB4074AAB69211ED8FACAEB9F1222468.roa
File: DB4074AAB69211ED8FACAEB9F1222468.roa (raw, json)
Hash identifier: bfNtKCgBnvQYKBVoOidhIYZ2o2pr+zPvHcCE6JgT7v8=
Subject key identifier: 74:A5:B8:67:3F:17:B6:6A:81:26:1D:86:A7:2F:31:2B:32:16:1C:97
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C52
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DB4074AAB69211ED8FACAEB9F1222468.roa
Signing time: Mon 27 Feb 2023 11:35:38 +0000
ROA not before: Mon 27 Feb 2023 11:35:34 +0000
ROA not after: Thu 27 Feb 2025 11:35:34 +0000
asID: 61317
IP address blocks: 154.16.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3154 (0xc52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 27 11:35:34 2023 GMT
Not After : Feb 27 11:35:34 2025 GMT
Subject: CN=63fc958a-32cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:a1:d4:b3:91:cf:bf:73:d7:23:32:ce:93:
06:20:b9:38:b0:33:13:0c:65:5a:71:e2:c5:f9:ac:
a2:a2:a0:64:ee:5a:0e:8f:12:ab:cf:88:60:ee:a1:
e9:85:d5:9b:11:cf:11:59:59:a5:ef:80:dd:2a:cd:
7c:63:99:07:98:e5:dd:d2:dd:a0:b2:b2:6e:38:97:
e1:ef:fa:ed:27:d7:75:dd:f5:45:71:ea:cd:5e:1e:
58:cc:0c:79:bf:ba:43:ab:a9:ba:4b:7e:a0:7c:cc:
73:10:e5:e0:c9:49:e1:55:19:97:9b:4e:c5:aa:06:
ae:4c:31:99:63:be:97:b7:c2:64:4f:20:a7:00:74:
a5:45:d1:6e:d0:3b:38:7e:17:13:cf:46:37:56:b3:
6b:84:d8:31:ac:2c:ee:62:64:dd:07:87:af:7f:7e:
87:f9:eb:da:c8:12:b4:f8:3e:47:25:73:69:0e:2f:
1c:ea:59:35:61:90:da:21:3d:58:36:de:e0:9b:45:
f1:03:7d:25:4e:4b:99:53:56:d7:4d:07:42:97:a8:
81:e9:e9:0b:15:ed:ba:13:d9:d1:f1:ea:a7:c9:d3:
3e:0c:e4:6b:f6:92:d4:86:09:fa:47:65:0e:ab:ea:
74:65:01:b3:61:fe:e6:ff:b6:de:0f:de:7a:7a:43:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A5:B8:67:3F:17:B6:6A:81:26:1D:86:A7:2F:31:2B:32:16:1C:97
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DB4074AAB69211ED8FACAEB9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.94.0/24
Signature Algorithm: sha256WithRSAEncryption
17:55:83:2e:6c:4e:60:8a:96:0f:d6:e0:5c:5a:41:a4:df:6c:
67:74:73:a6:93:b5:94:1e:49:31:19:36:e1:66:44:0f:31:3d:
d6:43:ce:fb:9a:de:cb:20:88:2f:c5:14:9f:c5:3e:36:a7:7d:
ad:23:3b:38:5c:43:76:c1:d2:32:81:d0:87:0e:81:59:78:36:
02:a6:26:5c:a9:0b:57:5b:11:dc:42:3e:e7:02:aa:6d:62:3d:
4a:60:ed:ec:90:73:f2:da:64:20:28:42:cd:72:e0:68:8f:81:
07:be:20:1f:99:00:f0:44:c5:bf:59:b3:44:3f:9d:9f:93:f5:
bc:cf:6e:1c:c8:d8:46:09:59:a5:05:58:b7:0a:a9:48:1d:97:
aa:7f:ae:76:11:13:25:f6:fb:34:81:f5:bd:c1:2b:36:80:f0:
ec:f3:22:c6:6f:2a:bb:d0:6d:ca:ee:2c:b0:d7:68:02:ce:80:
51:86:1f:50:59:4a:fe:4c:f3:c6:db:fd:8f:16:ef:20:fc:0e:
68:de:8d:cd:96:e6:c1:74:36:8b:e6:42:2b:91:97:86:3b:ff:
cc:c1:46:53:e8:58:87:c6:94:a0:59:1d:7b:96:5b:24:9f:9e:
40:4d:b3:b3:44:52:94:f9:59:95:4d:00:1d:f5:b4:71:8e:20:
23:74:5a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org