Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F5F1A53CDEAE11EDA2E5CB11306D8C1D.roa
File: F5F1A53CDEAE11EDA2E5CB11306D8C1D.roa (raw, json)
Hash identifier: sNyfiNKnHFDNxh47cBx8rr4N11+ujXL+yrktssmsYxM=
Subject key identifier: 29:C8:F0:6A:9A:6B:16:67:89:A3:36:9C:C4:5D:79:61:2A:34:5E:51
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D6D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F5F1A53CDEAE11EDA2E5CB11306D8C1D.roa
Signing time: Wed 19 Apr 2023 12:37:35 +0000
ROA not before: Wed 19 Apr 2023 12:37:31 +0000
ROA not after: Fri 18 Apr 2025 12:37:31 +0000
asID: 834
IP address blocks: 154.16.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3437 (0xd6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 19 12:37:31 2023 GMT
Not After : Apr 18 12:37:31 2025 GMT
Subject: CN=643fe08f-15c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:bb:b5:54:0a:fe:d2:15:35:b8:1a:57:ad:
bb:14:fc:92:6e:af:2d:07:27:1b:15:11:15:54:bc:
4c:8b:69:fe:e8:34:3e:1c:ed:da:5a:4d:14:7d:a0:
fd:81:50:bb:43:38:47:78:ea:e1:2e:93:27:0e:68:
fd:83:31:e9:b6:83:1c:c3:c7:a6:df:a5:f1:2b:a7:
75:8f:da:c4:31:71:0a:58:bb:fb:d8:aa:f2:37:c3:
a1:03:fd:b5:95:35:24:b2:a6:22:cc:1e:8d:f7:e5:
59:d8:7c:9a:af:49:cc:3d:0d:25:c2:d8:8f:69:24:
39:4e:db:8e:73:de:e6:61:3c:a3:31:55:6b:0f:78:
d8:02:4a:68:66:1b:6d:df:24:6c:c1:32:cd:cd:64:
97:b4:ee:26:db:49:7e:65:ff:08:93:99:aa:df:f7:
4a:65:9a:6a:3a:92:93:4c:32:ad:b1:51:ab:7e:ad:
68:6a:2a:e0:14:a0:4e:df:4f:cb:e5:e8:99:69:b5:
c8:89:d6:1e:6f:02:a5:8e:af:66:66:09:ea:d2:fb:
2e:2e:68:00:ee:cf:42:38:62:cf:0d:63:ab:c5:ef:
81:78:bb:c8:cd:8a:ec:fb:e7:2c:4c:4f:c3:dc:b5:
44:7f:ec:3a:23:7c:64:8e:c1:44:c9:9d:cc:5a:f8:
91:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C8:F0:6A:9A:6B:16:67:89:A3:36:9C:C4:5D:79:61:2A:34:5E:51
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F5F1A53CDEAE11EDA2E5CB11306D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.23.0/24
Signature Algorithm: sha256WithRSAEncryption
10:3a:c2:c1:3d:89:e3:8b:f6:63:80:f0:53:9e:27:9b:aa:9d:
1c:38:ce:85:f2:7c:36:cb:f1:2e:60:cc:f5:73:33:2c:7c:92:
b1:2b:27:72:87:ce:b5:ef:3c:fa:cf:8f:65:ea:2f:a1:76:6d:
0f:a7:96:31:79:19:16:15:f5:b0:2e:c9:27:96:25:4e:99:bc:
e2:3f:50:0e:32:d5:cb:37:24:38:eb:5b:6a:13:39:23:99:14:
cc:22:e7:47:02:25:48:02:28:a2:2f:06:f1:74:3c:c8:7e:07:
be:fe:1d:32:15:9e:3a:78:05:d3:91:f3:44:79:26:d2:8a:18:
f9:6b:f8:e1:7d:77:0b:c3:46:e3:5d:e0:48:77:f6:22:99:b5:
b2:a5:a7:fd:2d:9d:a4:9f:d8:1c:99:48:83:aa:cf:3b:24:2d:
6a:3a:e1:77:76:7f:9b:eb:95:4d:e9:f2:e2:9d:a6:14:ba:87:
1e:7f:64:38:37:7f:28:9a:71:5c:01:b4:12:96:d9:3c:ac:3f:
af:ee:c6:b5:22:d4:92:78:96:fa:a8:cf:40:9f:d1:22:e2:4f:
f4:d0:07:b4:7e:2b:c6:e8:5d:1e:ec:38:d4:1f:e1:d6:0b:83:
65:41:63:80:4d:52:9b:89:f7:00:25:42:bf:e1:36:96:04:f2:
4e:3a:05:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org