Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AF3C8560B5E11EF9470810B017001B1.roa
File: 6AF3C8560B5E11EF9470810B017001B1.roa (raw, json)
Hash identifier: Iq1lBWYS93cXP7ahts4q244ssyyWh/tQdDF8xHw1A4E=
Subject key identifier: 70:DF:D5:EA:CE:29:60:E1:83:23:8B:03:E3:2E:A4:BC:3B:90:27:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B504
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AF3C8560B5E11EF9470810B017001B1.roa
Signing time: Mon 06 May 2024 04:09:22 +0000
ROA not before: Mon 06 May 2024 04:09:19 +0000
ROA not after: Tue 11 Jun 2024 04:09:19 +0000
asID: 328608
IP address blocks: 154.93.128.0/18 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 10:06:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46340 (0xb504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 04:09:19 2024 GMT
Not After : Jun 11 04:09:19 2024 GMT
Subject: CN=663857f2-f6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:08:a1:c0:7d:f8:23:c4:41:f3:9f:1b:25:
5d:e9:2a:d8:f8:ce:a1:df:8d:d0:a5:a4:76:9e:b0:
c6:a9:d4:32:90:fd:83:c9:fe:d2:69:d7:06:37:2d:
f7:bb:a9:4f:79:43:01:4a:4a:68:89:d0:24:d0:62:
1d:0b:e2:1d:70:53:a1:d6:61:95:7b:9b:9e:fd:18:
6e:68:35:c3:87:53:de:d5:1b:2f:71:6e:83:84:49:
16:e3:da:fd:6d:1c:93:e2:1c:a1:f7:3d:cf:a4:2e:
30:44:ca:2f:59:52:b6:e8:e1:f9:81:53:38:ca:21:
f0:79:8e:66:04:73:a5:2a:39:57:9a:05:a7:47:bf:
9c:a7:9d:44:46:26:ce:a4:8f:ee:78:2c:6c:51:9e:
e9:14:71:dc:61:eb:b9:80:7a:da:42:81:12:f6:bc:
48:d0:4a:6b:8f:e6:67:c9:8a:84:dd:cd:fa:6c:23:
53:f8:54:18:09:bb:76:af:21:96:f9:7e:45:72:eb:
29:87:4a:72:9c:62:17:ab:07:b9:1c:32:78:e6:52:
66:bf:ce:ae:c7:1d:14:27:71:7e:1e:87:e2:ed:15:
17:50:ed:8c:ea:36:fa:9e:5e:bb:67:9a:bc:bb:25:
f5:5b:cf:3c:f6:b3:29:d8:4a:36:78:9c:a9:eb:e2:
09:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DF:D5:EA:CE:29:60:E1:83:23:8B:03:E3:2E:A4:BC:3B:90:27:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AF3C8560B5E11EF9470810B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.128.0/18
Signature Algorithm: sha256WithRSAEncryption
d4:61:71:0a:40:26:83:75:ed:ef:d0:b2:78:eb:fa:f3:90:ba:
f8:9b:ec:12:a0:95:48:be:3f:4d:66:89:ce:81:0b:b7:ca:7b:
91:81:a7:b7:7c:f7:37:a8:40:53:9f:81:48:6e:61:84:23:08:
e6:0a:69:2d:f1:58:64:3b:cb:f9:e5:2b:63:a8:12:37:0b:eb:
d8:4e:f0:8f:e9:80:32:3e:97:d2:c5:be:b7:0f:6e:24:42:35:
d5:25:9e:7c:cc:e6:ca:63:a9:77:f5:a4:d4:24:a5:fa:8e:e9:
ae:2f:95:4b:20:f6:1a:33:34:53:4b:eb:c1:80:84:58:37:47:
8a:2c:9a:63:58:1d:ad:b1:ea:7b:99:f5:87:b8:b7:6b:f5:99:
de:27:3f:ec:d4:c6:34:71:3f:3f:d1:aa:64:69:b2:58:38:bd:
6d:5b:14:03:27:e6:7b:3e:8c:6e:25:cf:07:80:0f:2e:a0:3e:
d8:19:c2:f6:28:0e:65:aa:44:3d:17:3f:32:5f:60:a9:a5:44:
3e:bd:b4:e6:07:24:52:33:fe:b5:f1:ed:da:79:d3:68:01:d6:
cc:d5:ae:9a:b2:21:98:0d:89:33:b9:04:5f:81:dd:a7:b2:a4:
ba:00:41:48:33:53:4d:ab:50:96:04:7b:b3:17:8d:98:b2:7b:
86:e1:2e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 15:01:43 2024 by rpki-client on console-fra.rpki-client.org