Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E604C3A8F61911EC8ABC8CB3F1222468.roa
File: E604C3A8F61911EC8ABC8CB3F1222468.roa (raw, json)
Hash identifier: k2ActiAh9ohsPCTDg0tL6IbOwgaMUQwlJWqLsGXyei0=
Subject key identifier: 7B:47:FD:FD:F9:11:FF:B8:5C:43:B5:30:7E:D5:48:5F:9C:8E:0B:AA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 08C4
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E604C3A8F61911EC8ABC8CB3F1222468.roa
Signing time: Mon 27 Jun 2022 13:06:04 +0000
ROA not before: Mon 27 Jun 2022 13:06:00 +0000
ROA not after: Thu 27 Jun 2024 13:06:00 +0000
asID: 40676
IP address blocks: 154.16.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2244 (0x8c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 27 13:06:00 2022 GMT
Not After : Jun 27 13:06:00 2024 GMT
Subject: CN=62b9ab3b-71b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7e:65:ae:0f:45:e7:96:a0:50:92:e7:35:dd:
10:1a:f9:e8:96:d1:73:bb:6c:b5:fb:b0:c7:43:83:
9c:ef:89:b0:04:fa:71:4c:84:a1:e7:5f:d8:c2:09:
47:0f:32:46:d7:96:f8:c1:23:ad:bb:bb:82:d7:ea:
fe:51:08:84:2d:b8:6f:ac:16:fc:46:40:0f:b7:89:
6b:87:19:f3:d4:0f:36:e4:e2:70:62:0e:34:39:a1:
e7:e4:44:ea:ba:b5:13:c9:7f:3a:8b:f3:62:03:35:
9e:95:2a:64:ae:c6:c8:ea:57:51:25:23:12:5f:50:
2f:43:49:4e:f6:c2:b7:52:d2:84:97:c0:5c:30:d5:
3f:0b:d1:85:79:4b:d1:32:60:4f:6f:01:ca:0c:80:
5b:86:95:08:c4:ce:c4:05:cb:f1:8d:37:20:08:53:
f6:ba:35:00:af:bd:2a:8e:ae:3c:40:b8:94:bc:57:
1f:6b:58:d6:44:35:22:93:92:3a:ef:4e:6f:53:7f:
1f:0b:fa:46:91:7e:71:34:45:ca:54:88:98:ed:b7:
0e:8c:4d:9d:c0:8d:75:bf:5b:b9:96:ae:c8:df:7f:
9f:e3:4f:cc:22:31:e6:da:f8:98:8c:36:04:ad:ce:
cf:1e:ca:04:6f:78:6e:56:d1:9e:33:01:59:dc:59:
61:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:47:FD:FD:F9:11:FF:B8:5C:43:B5:30:7E:D5:48:5F:9C:8E:0B:AA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E604C3A8F61911EC8ABC8CB3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.109.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ca:46:ce:7b:ac:6e:41:35:b9:e3:1d:3c:be:3d:9e:1a:fd:
ac:54:33:22:b6:9e:71:67:44:27:12:b4:97:26:74:83:15:c6:
35:b3:a5:88:5a:ff:78:eb:22:fd:8a:8b:e1:7f:6e:34:55:16:
37:1d:4a:66:f0:07:e4:cb:7d:d8:c0:34:e8:5c:8a:e4:ac:0b:
11:4f:03:0d:c1:d7:7e:c7:1a:77:4a:89:d1:20:e4:78:c3:5d:
b1:a5:ed:e9:4e:ac:49:70:de:9d:1e:4e:a6:29:05:79:e6:fc:
7d:e2:72:e1:a2:b5:ea:f2:a9:ff:b4:31:bd:2b:58:5a:3d:e5:
ba:c7:7e:1e:6b:26:2a:b6:5f:92:b0:39:e5:bb:cc:59:f4:cf:
28:a8:56:07:73:48:e3:31:7a:23:fc:f3:22:a9:6d:16:4a:43:
9c:54:fb:56:b4:fc:eb:98:ad:d0:1c:00:96:ac:cc:9f:4d:8d:
65:fa:3e:3a:84:97:e4:2e:25:89:6b:42:d0:9f:81:10:1f:40:
eb:26:cb:d9:35:99:98:21:8b:6e:a6:2b:47:44:8d:65:90:da:
68:03:44:01:d8:63:2d:b1:fd:b4:47:1b:8d:0c:4b:50:3d:8a:
3a:59:e4:ea:f6:6f:47:70:00:31:6b:9f:dc:a8:e9:89:46:64:
79:d2:d0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org