Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ED191F74BA6611ED8FE41FCCF1222468.roa
File: ED191F74BA6611ED8FE41FCCF1222468.roa (raw, json)
Hash identifier: +ToXP2Er+ICkyEOgJcOeJ6WYTR2x/Tkw5OhpCIbUIYk=
Subject key identifier: 9B:01:4C:C2:49:D3:F4:BE:41:58:F3:23:BF:12:9C:AE:35:9B:02:79
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0CE3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ED191F74BA6611ED8FE41FCCF1222468.roa
Signing time: Sat 04 Mar 2023 08:31:15 +0000
ROA not before: Sat 04 Mar 2023 08:31:09 +0000
ROA not after: Tue 04 Mar 2025 08:31:09 +0000
asID: 53356
IP address blocks: 154.16.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3299 (0xce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 4 08:31:09 2023 GMT
Not After : Mar 4 08:31:09 2025 GMT
Subject: CN=640301d2-f91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:aa:bc:d4:3d:76:a9:3c:4e:d9:8c:0b:31:18:
f7:7f:e8:ec:42:de:b3:46:10:d1:44:c4:5a:60:6b:
4c:7b:e4:64:a4:0a:24:ed:08:89:ae:01:13:30:ee:
08:7b:b0:13:a3:52:d7:a7:e7:62:3a:58:97:5b:09:
d4:13:eb:c9:70:bf:23:2a:0e:2b:67:64:c3:a0:6f:
95:45:e2:ed:42:2e:0b:30:21:6f:01:bb:3f:d7:86:
24:82:57:5d:26:d4:7e:0f:17:d5:84:b7:b5:e7:fc:
43:c2:26:2c:b9:37:52:58:26:92:b4:69:4d:de:8c:
34:03:8d:e4:b2:b8:7d:ab:44:58:cc:ac:b6:72:4d:
db:30:01:fe:85:99:4b:68:c3:59:64:95:1d:e3:1d:
30:e3:bb:23:ed:bf:98:b7:3b:fe:3d:e2:83:03:9b:
3c:9a:3e:51:89:c7:74:04:52:31:19:8e:31:f0:9d:
57:16:65:08:b6:29:0e:ab:60:fd:23:8b:e1:b0:67:
20:2c:47:b3:6f:61:47:17:ce:71:82:cc:c3:1b:83:
e6:4c:f6:d2:e8:16:33:af:e0:ff:ce:68:77:19:27:
ca:3a:97:88:38:42:fe:c6:01:b4:d1:41:14:a4:86:
08:5d:88:b9:3f:dd:f0:3a:4d:e5:8b:d1:d1:ac:4a:
fc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:01:4C:C2:49:D3:F4:BE:41:58:F3:23:BF:12:9C:AE:35:9B:02:79
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ED191F74BA6611ED8FE41FCCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.248.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:7d:60:59:2d:8e:f3:7a:32:7f:c2:db:1f:0b:ff:66:ac:ba:
1e:18:5f:83:30:05:dd:d3:66:d0:e7:91:ae:c3:0d:c8:9d:59:
15:e5:49:39:5c:e4:55:81:6b:bd:33:15:96:ae:bb:24:2d:4d:
32:9a:10:61:22:16:46:df:cf:da:ec:bb:73:b7:d3:55:37:83:
9e:8b:9a:2e:f2:f4:c4:cc:c8:35:3f:29:8b:58:0e:7b:0d:fc:
7e:56:b1:9b:b4:e1:c2:83:1a:04:97:7e:3d:8a:da:87:f6:fa:
5b:99:d6:df:73:0e:d8:cb:5b:e2:97:04:40:ad:05:4e:ea:3b:
a1:9c:34:af:24:ef:54:38:57:2e:51:74:8d:b5:8c:2c:e9:45:
d4:6c:cd:40:db:e7:bb:fd:1b:5d:80:81:ae:18:99:b4:72:f7:
ab:cf:d0:70:2c:99:67:cc:ea:67:1e:32:2d:db:b3:6e:ca:28:
32:21:17:34:95:cf:a9:fe:8f:95:23:78:f7:28:26:84:48:cf:
c6:5f:cd:3e:2f:c3:e0:81:43:ad:eb:65:2e:18:7f:af:5e:05:
42:3d:71:e1:f5:74:56:1a:c7:3b:8c:4e:45:cb:f5:4d:4b:26:
b0:5f:bc:d7:e5:c7:7c:26:41:48:2c:13:5f:63:33:b5:a0:ca:
1c:47:34:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:03 2023 by rpki-client on console-fra.rpki-client.org