Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E71B1C76592111EEBDFABD714AD9E6FC.roa
File: E71B1C76592111EEBDFABD714AD9E6FC.roa (raw, json)
Hash identifier: bxTvZcfWDknNemriUJodqDQeNGAsRSNIuUAS+7K0ZE4=
Subject key identifier: DC:3E:8B:23:3C:A9:3B:72:BD:0E:93:D0:BD:95:35:F7:F9:CA:62:3C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 126F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E71B1C76592111EEBDFABD714AD9E6FC.roa
Signing time: Fri 22 Sep 2023 08:27:44 +0000
ROA not before: Fri 22 Sep 2023 08:27:41 +0000
ROA not after: Sun 22 Sep 2024 08:27:41 +0000
asID: 213074
IP address blocks: 154.16.24.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4719 (0x126f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 22 08:27:41 2023 GMT
Not After : Sep 22 08:27:41 2024 GMT
Subject: CN=650d5000-48ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:a4:ca:87:1e:6e:49:58:79:72:fe:d2:34:
6b:9d:03:a5:84:2b:2c:a5:b7:1b:28:2e:51:b5:53:
b5:80:98:cb:af:73:b5:e9:ed:72:d8:bb:c7:65:db:
71:06:ed:ad:ba:df:70:ad:2d:b6:2a:cb:4a:9c:ba:
91:2f:f2:17:f7:18:ce:06:08:11:93:c4:59:7f:40:
94:33:e3:52:a6:79:74:d1:d6:d3:6a:6d:30:67:67:
59:f7:a3:4a:30:51:bd:13:02:48:3f:1a:ae:57:ae:
25:1a:cf:59:d8:3f:cc:a4:fe:cf:ad:df:ff:39:d5:
93:12:44:47:31:22:9c:01:30:8b:b2:73:18:fa:b5:
b2:7f:35:e5:ad:ea:b9:2a:91:72:d7:d3:2e:e8:b0:
78:8d:9c:41:fa:71:2d:63:51:79:88:6c:c1:4a:3f:
a5:55:27:a8:c4:69:85:45:82:a9:c8:cb:b2:44:de:
04:fa:01:be:b1:2e:65:44:e6:d1:fd:a8:0f:b9:60:
d2:5b:ca:56:81:dd:93:49:3f:6c:d8:00:7f:44:0e:
52:fd:1e:98:84:62:63:fb:22:41:20:47:2f:29:67:
b2:7c:47:e0:35:56:51:d2:8a:2a:ab:a0:68:44:32:
0c:fb:71:6b:3b:9e:b3:b4:77:9b:60:63:a9:20:7c:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3E:8B:23:3C:A9:3B:72:BD:0E:93:D0:BD:95:35:F7:F9:CA:62:3C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E71B1C76592111EEBDFABD714AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.24.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:e0:55:f5:dd:f7:19:d0:72:70:28:0c:5f:d7:36:36:db:94:
34:f9:63:af:4b:72:28:13:06:41:89:02:0f:9a:e9:df:56:53:
39:75:37:c4:6e:25:cf:14:fc:b5:da:e8:bd:97:78:6a:ba:3b:
5b:6a:1f:e6:5b:79:e1:7c:e9:b3:5a:41:ac:5f:c9:62:44:6c:
eb:8e:0b:7a:86:73:94:4d:99:2d:bd:3f:a1:40:0a:e4:41:36:
81:5b:13:e2:be:8d:2e:08:5f:3c:47:88:83:3a:da:4f:01:f7:
a4:26:0b:ec:ff:83:f7:db:c4:de:65:cf:68:00:f7:a7:fd:4b:
fc:ad:47:63:f8:bc:a5:b1:d1:a5:b1:6a:51:04:5b:e9:90:da:
f7:39:93:00:bb:c3:88:92:30:8c:bb:df:d5:77:41:9d:ab:c3:
89:b0:dd:c3:c4:57:fd:d7:95:d3:4d:74:38:be:64:48:08:33:
40:91:e8:93:61:fb:7e:b3:c7:87:b9:7d:e6:8e:ad:7c:1b:ba:
5c:1b:9c:9b:9c:2c:3f:5d:be:13:36:37:d6:36:c4:1c:f8:e2:
00:e0:78:5f:aa:3f:0a:55:18:3b:0e:81:a4:ba:ef:08:2b:e9:
10:66:13:65:fa:34:ec:a6:ac:e0:27:26:19:3b:09:db:57:0d:
a4:27:13:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 11:46:38 2023 by rpki-client on console-fra.rpki-client.org