Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E98382BE4D7311EE9AEA67344AD9E6FC.roa
File: E98382BE4D7311EE9AEA67344AD9E6FC.roa (raw, json)
Hash identifier: Pai7+ZmNnvfJSw+pyHZzSA9XiU68W6UYzNvk/FnyIrg=
Subject key identifier: C3:8C:14:54:81:86:F2:CD:00:2D:6D:8D:47:33:04:B6:DD:00:0E:5F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1204
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E98382BE4D7311EE9AEA67344AD9E6FC.roa
Signing time: Thu 07 Sep 2023 11:44:33 +0000
ROA not before: Thu 07 Sep 2023 11:44:30 +0000
ROA not after: Sun 07 Sep 2025 11:44:30 +0000
asID: 834
IP address blocks: 154.16.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4612 (0x1204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 7 11:44:30 2023 GMT
Not After : Sep 7 11:44:30 2025 GMT
Subject: CN=64f9b7a1-63ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f5:05:68:f9:70:f0:f6:0f:93:1a:9f:bd:8e:
00:23:c7:6b:fd:f7:f6:50:10:36:58:a8:14:66:9d:
0b:ee:cb:65:ec:81:60:b2:8f:3d:c9:e9:e7:57:70:
d9:eb:1c:02:35:de:7a:05:e2:00:3a:e2:df:dc:b9:
0d:55:5b:76:e8:b8:6e:f6:86:8b:84:10:e3:38:e8:
b5:11:50:7a:13:4e:b0:1e:9e:2a:92:32:85:6a:3a:
2e:d4:22:01:64:eb:da:0e:8b:c7:06:44:05:dd:30:
a8:45:2f:ee:70:e0:50:30:f8:5d:72:6e:5a:9c:2c:
1f:bb:74:94:33:0f:eb:0e:36:7c:f8:c5:34:11:ba:
f7:a0:b4:cd:7d:c0:68:06:b7:e3:6c:8e:44:a1:f5:
a0:25:16:43:0a:eb:de:b8:fd:13:cd:9b:4b:08:39:
8a:2c:02:1e:89:cb:de:ad:e2:17:d8:2a:14:53:b5:
cc:f3:54:6e:7d:14:6b:2d:b6:48:e6:82:bb:7f:29:
f5:e5:88:4c:bd:06:f2:a8:1b:a6:6c:df:2d:16:55:
00:4c:f7:b5:0f:05:20:1b:be:f6:f6:f6:9e:bc:64:
09:86:43:a7:e0:81:a1:0e:cf:7d:d0:01:b6:fa:ea:
96:bc:19:32:7a:21:17:cc:12:86:01:48:05:a5:f9:
60:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8C:14:54:81:86:F2:CD:00:2D:6D:8D:47:33:04:B6:DD:00:0E:5F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E98382BE4D7311EE9AEA67344AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.231.0/24
Signature Algorithm: sha256WithRSAEncryption
98:3f:ad:57:04:5f:eb:dc:d1:f5:6b:ff:b9:bb:ff:c4:31:a1:
56:bf:bd:f0:fc:3a:0e:90:70:ce:62:39:9e:82:ae:5c:02:c7:
e1:40:05:b0:f9:2a:97:1a:aa:eb:70:57:2b:69:d9:10:5c:4a:
fc:79:d2:08:bf:ff:c3:ec:69:93:06:d2:69:8c:35:ae:8e:89:
22:d0:cd:5d:56:d3:da:18:02:8d:2f:33:70:30:7c:39:78:bf:
3b:ef:f5:07:94:f3:e6:4f:e4:bd:fd:8e:e7:ab:fa:20:8b:c2:
44:e3:a9:95:1b:c4:96:b2:22:90:b1:55:81:bc:84:4e:84:47:
54:ff:27:07:92:87:3c:25:19:e6:fe:21:1f:82:9d:59:d1:df:
f6:69:6b:4e:4a:12:7b:59:f2:26:e0:e6:96:01:da:a7:39:72:
53:9d:f1:9d:f8:b4:a1:3c:e5:f3:17:3e:f3:48:09:7d:5d:59:
04:03:98:6f:29:83:cf:90:9e:f7:ec:79:6e:36:f9:e7:4f:13:
3a:f6:7d:9a:8e:69:73:c2:3a:1f:8b:61:c6:c5:22:08:ba:c5:
01:e2:b1:35:ff:57:ca:cb:09:67:ce:c5:28:70:d9:ac:1c:90:
39:ad:76:10:3e:81:eb:d4:4a:5f:7d:54:ad:ef:18:24:48:44:
2f:8e:43:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 07:08:20 2023 by rpki-client on console-ams.rpki-client.org