Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/0FF849840EA911EE85BBBB744AD9E6FC.roa
File: 0FF849840EA911EE85BBBB744AD9E6FC.roa (raw, json)
Hash identifier: HBV/AY1ZnYE2vK61+kf+H5wWMRMDcGkyxsJA77bkQ6k=
Subject key identifier: 9D:3D:1F:F8:32:EC:E2:F8:2E:73:94:51:DC:7A:6F:BC:7A:07:D0:0C
Certificate issuer: /CN=F3614D1DAF/serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Certificate serial: 0143
Authority key identifier: 27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/0FF849840EA911EE85BBBB744AD9E6FC.roa
Signing time: Mon 19 Jun 2023 13:56:18 +0000
ROA not before: Mon 19 Jun 2023 13:56:14 +0000
ROA not after: Sun 19 Jun 2033 13:56:14 +0000
asID: 329063
IP address blocks: 2c0f:7680::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 25 Mar 2024 13:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614D1DAF/serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Validity
Not Before: Jun 19 13:56:14 2023 GMT
Not After : Jun 19 13:56:14 2033 GMT
Subject: CN=64905e81-b72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:77:b6:04:9d:9a:3d:8a:01:8f:7c:f1:27:
65:01:7d:6c:4e:3d:4a:dd:d1:63:db:3e:57:ad:5f:
7c:d2:e5:4b:bc:73:5b:0d:8a:1f:85:97:d4:cf:c4:
d7:37:da:f4:6d:14:de:59:bd:b7:c5:9b:5d:41:0f:
c5:d3:ec:a4:dc:5c:ea:89:df:db:11:0a:b0:ba:15:
d5:3b:77:b2:a2:52:a0:c6:0f:2d:b3:76:07:10:5e:
dc:45:c3:f1:c8:71:a2:7d:61:7a:d8:fe:ba:1a:e2:
ae:e3:8d:82:8c:26:e1:3c:71:f9:a7:d5:8b:4b:13:
7c:07:90:79:fa:c0:38:dd:af:72:8d:78:75:3e:eb:
05:12:7b:3f:47:1c:3b:4c:53:a9:d8:12:cd:76:cc:
18:6c:66:95:54:ae:b2:f9:82:9e:a3:07:4c:b5:b3:
15:63:f8:dc:02:f9:66:03:da:0b:4e:5e:fd:49:b0:
42:bb:77:5b:6d:33:b7:be:27:77:30:46:23:ad:7a:
6e:22:5a:ed:77:ae:c3:60:cc:ce:43:2d:3a:50:b7:
68:7d:bc:43:c3:1c:7f:97:ae:70:7b:93:c4:77:9b:
c9:aa:15:c4:ac:57:05:5c:43:71:0c:4d:ce:9e:a7:
f5:e8:71:2a:58:00:6c:15:39:e1:3d:bc:19:38:7e:
cf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3D:1F:F8:32:EC:E2:F8:2E:73:94:51:DC:7A:6F:BC:7A:07:D0:0C
X509v3 Authority Key Identifier:
keyid:27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/0FF849840EA911EE85BBBB744AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:7680::/36
Signature Algorithm: sha256WithRSAEncryption
1f:ed:6c:d3:7f:ec:11:a2:5f:ab:e2:65:7e:e9:0a:bb:fb:09:
a2:4e:1b:ad:34:e7:f4:77:dd:f0:12:bf:c7:f9:0d:52:70:b5:
62:12:35:6e:a4:e1:0c:1f:fa:ca:3e:1e:00:aa:3c:c9:a6:f0:
e8:17:2c:28:b4:29:5c:32:0e:57:40:b9:56:b3:af:d2:f6:ad:
96:49:62:e4:4d:86:ac:9f:b1:0a:24:10:34:ea:e8:ac:31:1b:
75:21:27:4c:34:1f:44:09:f6:13:73:f1:bc:1a:7c:f9:da:14:
39:38:1c:33:1b:1c:14:18:b1:74:8b:41:1c:ce:c5:bf:85:c0:
bf:bc:5f:39:20:df:06:5f:9d:10:68:a8:7b:d7:6c:02:e0:8d:
f6:00:88:4d:a2:46:db:4d:41:4b:8e:23:6b:84:64:01:66:10:
93:6f:47:29:ec:49:68:f3:4c:be:8e:bb:dd:c9:38:1f:b5:b2:
9a:2f:90:f4:09:a0:f3:a6:be:9e:c0:37:3f:8b:e6:0e:93:36:
25:39:fd:c1:61:78:3b:e2:9e:eb:13:ab:48:c9:43:e4:ab:9c:
a8:78:38:b6:31:35:50:ab:c7:f4:e7:8a:70:0f:34:75:58:09:
41:42:d3:9f:ed:e5:a8:f8:e3:d2:65:64:ee:ce:53:c1:1f:90:
87:8d:6b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 17:25:41 2024 by rpki-client on console-fra.rpki-client.org