Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FBE2234291F111EBAA4BD167F8AEA228.roa
File: FBE2234291F111EBAA4BD167F8AEA228.roa (raw, json)
Hash identifier: wad4hN7rsJInq8NmRhG2ABrkpLdiggY38VMZFk6NhFM=
Subject key identifier: 8D:4D:E5:B4:C7:16:8C:21:9E:7D:4A:D4:FC:63:EC:8E:5A:40:29:D0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0538
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FBE2234291F111EBAA4BD167F8AEA228.roa
Signing time: Wed 31 Mar 2021 07:23:27 +0000
ROA not before: Wed 31 Mar 2021 07:23:22 +0000
ROA not after: Mon 31 Mar 2025 07:23:22 +0000
asID: 133752
IP address blocks: 154.16.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1336 (0x538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 31 07:23:22 2021 GMT
Not After : Mar 31 07:23:22 2025 GMT
Subject: CN=6064236e-e5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c2:ac:81:17:4d:a8:9e:06:9f:0d:0c:80:a3:
a5:8a:f8:a5:44:39:5e:67:8b:6b:19:99:c0:ae:8e:
22:43:bc:35:e5:77:3c:72:3f:d5:9a:02:ed:9c:e3:
74:82:53:61:74:6a:00:dc:ed:f6:35:44:46:be:1e:
a4:99:38:74:e6:d9:4b:41:09:4e:a8:0e:a6:83:32:
c9:d6:98:d8:cb:3a:e0:b7:b5:4e:e0:fb:bf:ec:07:
25:c3:96:66:a2:40:7a:3a:9d:ec:37:95:be:bb:26:
7e:8e:cb:88:0c:06:b9:e4:3f:20:9a:bd:27:18:28:
4c:5e:19:2e:73:a7:bc:e9:ac:83:2d:df:fc:45:88:
77:3c:51:1d:d6:e4:b3:a9:1d:96:43:26:ee:02:22:
4c:68:a1:44:54:d8:c8:d7:27:8d:ec:ec:d9:6f:af:
2d:f5:41:da:5c:25:a2:45:2c:c7:9a:72:82:0c:ff:
04:83:62:33:3d:4e:76:e4:be:7c:d5:03:22:76:e7:
c1:90:24:a8:d2:6f:32:be:58:38:53:a3:49:a4:d7:
4a:a1:87:c0:ca:80:16:b3:c9:b6:9b:bf:a0:28:84:
5c:a6:61:7a:eb:42:f9:e2:69:8e:e3:9b:92:16:fb:
06:ad:1c:65:fd:85:bf:63:11:dd:7f:28:51:e7:36:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4D:E5:B4:C7:16:8C:21:9E:7D:4A:D4:FC:63:EC:8E:5A:40:29:D0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FBE2234291F111EBAA4BD167F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.233.0/24
Signature Algorithm: sha256WithRSAEncryption
36:5c:10:16:e4:56:91:6c:a1:e5:f0:89:0e:99:95:d5:70:73:
6c:92:c8:0e:5f:54:2d:a3:1f:68:ca:30:a9:74:d7:78:4f:0d:
0b:5a:ae:48:84:24:55:ec:be:29:53:69:16:c5:ca:ab:bc:2d:
95:cf:08:37:eb:cc:4e:57:46:a4:1d:4e:fb:b7:2a:42:31:0d:
8e:65:2f:99:e8:ed:92:0f:4c:e6:82:42:dd:2a:b5:2f:7a:b9:
b8:79:e9:e4:d4:5e:7b:c1:44:35:16:47:83:19:f0:c5:5d:d5:
5d:c6:30:1a:53:21:17:64:da:f7:f0:67:fc:d9:1e:e9:a3:03:
04:7c:b1:68:62:66:ab:c9:3f:ec:f1:9d:04:f7:db:8d:1d:f2:
96:f2:7a:68:54:c5:30:4e:5e:0a:e0:33:2e:e6:6d:ac:06:34:
eb:77:e4:a8:4f:8c:cc:b1:44:da:fc:77:0b:63:4c:4b:94:51:
d2:9f:96:29:75:b5:9a:e6:8d:46:b2:88:36:27:c8:9d:f1:21:
ec:56:04:9e:dc:43:06:26:b1:e5:20:a7:72:ad:44:b2:fe:38:
23:16:3b:c9:43:1f:47:47:1d:96:50:f6:27:26:bf:0f:4e:20:
77:9f:51:66:b5:2e:2c:68:a4:8e:c3:f4:22:bc:02:d4:1a:93:
e1:83:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:03 2023 by rpki-client on console-fra.rpki-client.org