Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EF4121261EC911EEA3EAEA7A4AD9E6FC.roa
File: EF4121261EC911EEA3EAEA7A4AD9E6FC.roa (raw, json)
Hash identifier: U8zwMv1Fs78c8jonGJtqDZKNyBJVo8dZY0egT3H5+mQ=
Subject key identifier: D4:4E:89:D6:72:9C:44:C4:AA:6C:D6:5F:B7:60:25:8C:53:AE:EE:C0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1062
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EF4121261EC911EEA3EAEA7A4AD9E6FC.roa
Signing time: Mon 10 Jul 2023 02:31:55 +0000
ROA not before: Mon 10 Jul 2023 02:31:51 +0000
ROA not after: Sat 12 Jul 2025 02:31:51 +0000
asID: 212238
IP address blocks: 154.16.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4194 (0x1062)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 10 02:31:51 2023 GMT
Not After : Jul 12 02:31:51 2025 GMT
Subject: CN=64ab6d9b-ff2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:8b:9a:79:ab:7f:ea:46:ca:93:65:8c:34:
f0:af:e5:82:11:d2:75:48:8f:39:01:92:35:e5:9b:
36:8b:7a:8d:9b:10:dd:76:d9:75:48:7e:29:c4:f3:
6c:4b:9b:ed:91:28:eb:ab:73:06:f3:5d:a6:32:9d:
7f:d1:38:43:02:9e:31:d5:59:9f:6a:af:7f:6f:ce:
10:94:3a:4a:d8:bb:53:2d:c2:2a:9b:64:1b:ea:6c:
f1:06:2a:42:15:a6:79:b9:24:80:61:0c:0a:77:29:
da:e3:73:81:8d:16:b2:93:da:ce:37:c4:c5:b4:69:
ae:80:de:e8:e7:75:f1:cc:a5:d1:01:45:76:36:1f:
a4:c8:30:d4:97:6e:16:fd:f5:12:e2:ac:64:9d:46:
7c:4a:48:61:89:d5:e8:a8:5a:29:a5:fe:a9:52:e8:
3d:16:ca:89:3a:77:0b:f9:58:e5:29:65:29:03:76:
67:de:4a:9d:d5:5b:0e:5d:79:93:50:a4:f5:e1:22:
0f:a9:00:08:2e:b3:db:ef:54:e7:8f:e8:0e:b1:7c:
61:a0:bf:f1:8f:fe:ed:bc:bf:ef:71:dc:54:fa:5e:
6f:3e:80:37:1d:f7:2d:ea:4c:40:4b:06:78:6e:9d:
96:49:4b:2c:ff:70:84:fe:46:2d:f9:b0:c2:f0:44:
67:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4E:89:D6:72:9C:44:C4:AA:6C:D6:5F:B7:60:25:8C:53:AE:EE:C0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EF4121261EC911EEA3EAEA7A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.18.0/24
Signature Algorithm: sha256WithRSAEncryption
39:9d:17:b3:8c:52:7c:fa:cd:82:e9:8e:a7:20:96:0e:bc:ae:
91:e1:4b:f3:6c:fe:8a:14:2d:d8:d6:5d:c0:3d:5c:37:1f:5b:
60:99:a3:36:e1:4a:ee:a1:10:e6:7c:95:5d:91:65:1a:4b:81:
82:e7:60:3c:b5:29:e7:dd:12:21:f9:f9:01:37:7a:bb:00:c0:
53:77:d1:bb:c4:45:b9:e4:b8:e7:0a:3d:c0:c6:f2:f0:74:d4:
4b:8a:b4:95:3a:9e:01:9d:0f:c0:8c:35:79:b3:a7:c2:39:2c:
4f:f0:4c:7f:ec:91:2b:22:c7:6b:45:e1:a0:55:e8:da:98:9d:
7f:d9:cc:1e:bd:36:39:1a:85:c9:19:6b:03:f5:1f:2f:62:72:
df:d9:db:3f:c1:9e:00:a2:b6:9b:12:b3:e6:ab:8e:80:34:56:
06:5b:f0:65:06:4b:fc:57:fd:3f:e2:68:5c:be:15:bd:bc:1c:
b4:c0:42:c8:2e:6e:a7:4b:c7:f2:af:c2:3c:cf:fa:e5:7d:9e:
d7:a2:9e:f8:8a:a7:8d:22:97:10:26:f0:fd:9f:99:b0:37:a6:
c6:7a:eb:65:8c:5b:13:0d:87:12:32:0e:98:d7:bf:ef:db:5a:
fc:86:bf:c3:f1:a1:cd:ee:81:11:c7:e9:f1:9d:71:47:3b:67:
44:7e:ae:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 07:58:19 2023 by rpki-client on console-fra.rpki-client.org