Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2A60BDF0B43C11EDAD0DE7A6F1222468.roa
File: 2A60BDF0B43C11EDAD0DE7A6F1222468.roa (raw, json)
Hash identifier: 7qma+6pk/IiZLEoocUAOrwa0+2cvUancD+LVxdbbgps=
Subject key identifier: CA:1B:4F:CD:1D:18:B6:3A:31:3C:4F:6E:79:77:F4:69:E3:60:40:51
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C07
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2A60BDF0B43C11EDAD0DE7A6F1222468.roa
Signing time: Fri 24 Feb 2023 12:10:02 +0000
ROA not before: Fri 24 Feb 2023 12:09:58 +0000
ROA not after: Sat 22 Feb 2025 12:09:58 +0000
asID: 61317
IP address blocks: 154.16.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3079 (0xc07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 24 12:09:58 2023 GMT
Not After : Feb 22 12:09:58 2025 GMT
Subject: CN=63f8a91a-6868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e6:e2:7b:07:a8:b9:23:3b:a8:95:92:5f:65:
e6:17:69:e0:2f:23:61:42:77:be:2c:f8:b1:ff:cf:
3c:e8:97:08:a2:81:5a:18:36:48:54:17:f3:ba:a0:
70:b4:0d:e0:39:28:db:65:8f:0d:d0:da:c0:fd:9f:
04:82:9d:ff:c4:a2:6c:17:57:07:10:0f:13:61:66:
a3:40:c8:9e:75:79:09:f9:de:d2:9d:6e:bb:1a:47:
67:f2:59:2e:23:f2:a6:e9:6f:74:36:cb:ae:0e:88:
a4:77:62:7f:57:f6:41:94:26:d6:d9:8f:b0:f2:aa:
83:67:31:5c:c5:45:02:ad:f7:7d:32:5f:3b:24:11:
61:ad:a9:f0:43:5d:4d:87:22:3d:5d:a1:f1:15:99:
0a:cd:fa:d6:57:31:4e:5d:58:01:44:d4:26:15:99:
26:c5:96:0a:1a:13:53:d0:cf:17:dc:26:c5:86:3e:
ce:37:38:2a:05:fb:09:c8:72:bc:fb:16:e2:43:b8:
bd:b8:21:96:59:01:02:65:b7:63:56:ce:1c:1e:87:
29:a5:f9:2d:b4:db:74:43:c8:16:4e:3d:9c:85:19:
da:d2:97:fb:17:4b:25:4b:ef:2c:3d:45:81:8b:80:
fe:96:42:90:bb:d0:f7:33:4a:49:7e:e4:1c:b3:71:
a9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1B:4F:CD:1D:18:B6:3A:31:3C:4F:6E:79:77:F4:69:E3:60:40:51
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2A60BDF0B43C11EDAD0DE7A6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.39.0/24
Signature Algorithm: sha256WithRSAEncryption
37:df:0a:ca:bf:c3:5e:37:b6:e9:da:74:f2:cb:87:12:b5:5a:
45:84:ea:c9:60:bf:2a:a2:8e:90:0e:71:2c:5a:c9:42:d7:f2:
a4:89:75:3e:f3:88:4a:49:a9:0c:e4:1b:5e:53:f8:da:1f:ba:
19:97:db:c6:10:c7:3a:61:0e:dc:69:66:03:49:ae:d1:c2:78:
61:f0:4f:64:2e:25:aa:de:b2:43:e9:b2:91:43:10:48:46:09:
d0:28:64:b0:9a:8e:4c:f9:85:0c:0a:73:7c:ad:3c:e3:01:60:
06:e7:af:f9:6b:a9:75:7a:43:70:bc:99:4d:15:8a:72:02:d7:
53:1d:40:83:34:7e:df:e9:1f:79:f5:f8:16:c1:8f:5b:5a:ae:
aa:4e:dc:23:b5:17:73:91:22:58:ff:95:c9:fb:95:76:07:83:
46:2c:a5:76:b1:e5:88:04:ba:49:a1:2d:d5:ce:ae:d5:e0:42:
9c:d6:a1:71:5f:70:53:15:e0:6c:b0:8f:42:fb:23:92:06:3b:
6c:e7:a6:0d:8b:c2:2b:58:91:2a:c8:11:5f:77:a2:61:aa:9b:
5a:2f:59:30:21:df:2c:23:13:f5:41:38:c6:57:76:64:46:20:
e8:62:b6:e5:1e:e6:17:fd:70:74:6b:f7:cb:d5:50:24:4d:62:
73:db:53:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org