Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F3A531C60ABF11EEA8DB501A4AD9E6FC.roa
File: F3A531C60ABF11EEA8DB501A4AD9E6FC.roa (raw, json)
Hash identifier: 7hO+K8K1mxlhG/kn8TH2JiPkMkAG+sDdJ/H2aU9WYwk=
Subject key identifier: 62:BF:EF:4B:25:C1:43:E6:7E:C4:77:9D:D6:B4:19:A9:CD:06:43:80
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F70
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F3A531C60ABF11EEA8DB501A4AD9E6FC.roa
Signing time: Wed 14 Jun 2023 14:30:04 +0000
ROA not before: Wed 14 Jun 2023 14:30:00 +0000
ROA not after: Sat 14 Jun 2025 14:30:00 +0000
asID: 200482
IP address blocks: 154.16.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3952 (0xf70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 14 14:30:00 2023 GMT
Not After : Jun 14 14:30:00 2025 GMT
Subject: CN=6489ceec-279f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:03:fd:f5:4d:f3:15:24:a4:e6:11:55:98:
38:c9:ee:e0:5d:c8:c7:b9:9c:9f:28:31:68:47:93:
09:34:fb:d8:5a:a1:c1:7e:5a:31:f0:08:dd:6d:7f:
b5:8d:d8:0a:bd:90:c9:95:5b:f0:1f:fe:cd:94:a8:
7e:55:43:1d:be:96:42:35:1f:c4:37:4b:6f:dd:ee:
ee:a4:21:bc:88:fc:b7:f2:ad:aa:8b:3c:b0:79:1a:
1e:ec:11:a9:05:c4:ca:33:fc:b2:09:f5:6a:35:13:
7f:82:dc:30:fa:59:22:d4:fe:0c:8b:ca:c7:58:9e:
e6:d9:65:01:14:1d:4f:3a:7a:43:5f:38:49:4f:c0:
2d:cf:1b:31:63:d4:a3:8d:f0:a8:83:1c:f2:8b:73:
19:25:ac:21:5a:20:04:17:09:ca:d7:55:a0:ad:e3:
83:cc:46:b5:75:0d:40:a7:c6:77:e0:27:93:27:b2:
04:80:91:9d:48:02:2d:7f:04:5d:db:a8:0b:71:c6:
51:60:70:e5:76:03:d7:f4:9e:31:1b:48:99:0e:8a:
63:fd:68:f3:7c:db:27:df:28:d7:b1:81:a8:20:9e:
a5:b7:42:bd:03:0a:3e:54:e9:af:c4:1d:dd:05:de:
10:9e:42:b7:36:1b:8f:7a:26:e7:4d:93:17:b3:ad:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BF:EF:4B:25:C1:43:E6:7E:C4:77:9D:D6:B4:19:A9:CD:06:43:80
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F3A531C60ABF11EEA8DB501A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.203.0/24
Signature Algorithm: sha256WithRSAEncryption
60:94:a0:e2:28:9d:c1:26:3f:62:a6:b8:5d:51:30:4a:d6:0e:
13:d8:27:94:19:51:39:f9:69:84:f1:68:e9:7d:54:fe:74:15:
5c:3a:18:d0:bf:95:7c:2a:a7:ef:e1:a3:e8:4c:76:f4:f8:f0:
fc:ab:1a:42:0c:a9:ab:83:07:59:08:89:c4:55:20:df:77:1c:
5e:98:54:8e:a8:39:41:bb:ae:82:54:fa:0f:46:00:b4:b1:c9:
8b:73:06:50:70:c6:78:5c:c2:6d:70:04:37:73:8f:5f:ea:d1:
84:10:f2:bf:24:7d:ae:32:e7:bf:34:4b:3f:de:04:f7:76:ee:
7a:6c:58:18:bb:f8:be:08:0b:07:bb:50:7e:0c:4d:96:ef:fe:
8c:6b:fd:c2:84:73:8d:71:b9:a4:60:b5:d1:d8:ff:f2:54:99:
e6:33:f5:57:4f:d4:30:81:0c:3d:95:2c:b5:65:36:60:bb:f0:
06:37:87:6c:f5:69:e7:80:df:c5:fe:23:04:2c:ff:90:a0:53:
49:e4:eb:df:f0:ff:18:17:e5:57:2e:b3:dd:32:3b:1d:dc:e0:
a9:d2:e9:9e:06:84:52:d9:ac:bb:d6:7f:5b:85:cc:cd:5c:06:
e1:7a:0c:af:8e:b3:73:62:e8:eb:14:45:e3:72:78:25:ad:36:
3b:42:a7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:03 2023 by rpki-client on console-fra.rpki-client.org