Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DEC2D126077911EE89A876484AD9E6FC.roa
File: DEC2D126077911EE89A876484AD9E6FC.roa (raw, json)
Hash identifier: EVsXxsokkg8vcrP7fvTfRiFlsUcZl4NIUUXlPTn5Xd8=
Subject key identifier: 89:4B:91:D9:00:CF:9F:52:04:5C:03:16:00:EF:1C:06:2B:34:07:71
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F22
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DEC2D126077911EE89A876484AD9E6FC.roa
Signing time: Sat 10 Jun 2023 10:30:51 +0000
ROA not before: Sat 10 Jun 2023 10:30:47 +0000
ROA not after: Tue 10 Jun 2025 10:30:47 +0000
asID: 61317
IP address blocks: 154.16.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3874 (0xf22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 10 10:30:47 2023 GMT
Not After : Jun 10 10:30:47 2025 GMT
Subject: CN=648450da-acfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:9e:8b:ae:dd:21:3d:14:ee:22:9c:d7:e6:
ca:a7:24:23:5b:dd:53:66:f7:61:49:7e:3d:8f:06:
9a:ec:81:f2:b1:e3:40:c5:aa:f5:f0:eb:54:e8:50:
7f:49:d8:75:74:b3:bf:24:11:fe:62:75:d8:c1:08:
45:78:88:d8:05:71:ae:72:58:01:2d:be:5d:38:22:
c8:df:d8:f4:43:87:30:b8:db:44:73:7c:5a:7c:53:
fd:16:59:32:45:4d:ad:70:c0:7b:8b:60:7f:8b:93:
02:10:e9:de:9b:30:32:1a:0d:b3:96:c3:89:a8:dc:
0a:b5:c4:1b:02:cc:5f:de:44:15:91:b9:b4:13:da:
07:8d:17:64:cf:2f:e4:34:9d:04:8b:2d:e5:27:47:
f9:6e:aa:e3:18:8d:4f:58:e5:b3:d5:90:27:da:8b:
88:ef:72:f4:2f:5e:be:0d:52:56:79:b4:2f:37:de:
67:11:4c:8c:c5:f4:4a:8d:86:a5:14:07:21:82:f7:
64:ce:a0:b0:0f:fa:bc:d9:4b:d6:43:32:67:55:4a:
91:e1:e3:c5:76:ef:db:27:b3:e3:6f:43:3c:83:a2:
d4:1e:31:12:ad:43:fd:d5:85:1e:57:26:be:03:f9:
e1:61:e2:35:a4:6e:de:3a:92:5d:01:1a:ac:79:e3:
7e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4B:91:D9:00:CF:9F:52:04:5C:03:16:00:EF:1C:06:2B:34:07:71
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DEC2D126077911EE89A876484AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.30.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:7c:f6:49:c4:d0:3a:47:fb:d2:b3:43:bc:1b:2e:04:3c:5c:
34:64:14:71:52:35:0c:ed:a1:b3:6f:d3:32:2a:4c:0a:24:18:
ff:79:d9:52:c2:61:21:bc:5c:a3:c0:4a:e5:a3:42:49:80:13:
de:b1:73:fd:8e:04:5d:51:f5:f7:81:22:da:2b:9c:d4:ec:ba:
26:fc:35:45:7d:0c:7f:a6:0f:29:75:a9:ea:61:8e:01:de:62:
cf:51:1e:3d:59:de:29:f1:c7:2c:97:5c:0a:96:a9:28:bf:2b:
83:28:d6:c4:4b:0c:1a:c8:65:c0:58:94:90:36:e5:81:ec:cd:
b7:9d:cd:fc:26:fe:25:ec:e2:50:7d:c2:90:d4:59:11:53:d7:
eb:4f:ad:59:76:41:66:1d:f6:54:45:5a:12:bd:a1:59:fe:1e:
cc:48:4f:0e:93:4d:88:f5:72:c5:25:28:4c:bf:44:09:83:66:
bf:14:e6:98:eb:b6:e1:b8:26:f3:a6:bd:53:87:26:83:bd:a3:
8d:0e:ef:cb:53:2d:38:fd:7d:c1:d8:48:b9:e9:f7:d6:35:8e:
1c:56:59:ad:95:0a:91:3d:15:70:47:bb:91:c2:3b:f7:ef:96:
f8:97:56:b1:4e:f4:5f:47:d8:c0:77:a3:61:b7:1f:11:b4:60:
2a:97:eb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org