Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/485C20A21C9111EEBC89522B4AD9E6FC.roa
File: 485C20A21C9111EEBC89522B4AD9E6FC.roa (raw, json)
Hash identifier: zSzTqg3zYjr3JwjkYzsfNW+MmWi+hsmOwqEDI6vtf9Y=
Subject key identifier: B2:04:B7:9D:18:05:D7:93:5F:C3:8C:0C:4F:40:E2:35:17:FD:8D:70
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1049
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/485C20A21C9111EEBC89522B4AD9E6FC.roa
Signing time: Fri 07 Jul 2023 06:41:20 +0000
ROA not before: Fri 07 Jul 2023 06:41:17 +0000
ROA not after: Mon 07 Jul 2025 06:41:17 +0000
asID: 834
IP address blocks: 154.127.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4169 (0x1049)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 7 06:41:17 2023 GMT
Not After : Jul 7 06:41:17 2025 GMT
Subject: CN=64a7b390-dc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:cc:8a:44:33:3a:4a:e8:86:f0:3f:a1:1f:
51:ce:79:53:06:2e:5e:73:8a:26:5c:c2:ec:9b:92:
38:ce:74:05:cc:a6:00:cd:43:24:75:0a:95:6d:bd:
68:45:46:8d:8c:56:33:3e:22:3d:0e:e6:ad:09:7a:
03:18:ab:85:e8:73:73:5d:60:09:3b:1a:46:16:88:
5b:77:2a:a9:2d:98:af:24:cb:a5:63:d1:b6:43:f7:
72:99:40:af:4c:57:db:f8:fe:3f:22:81:d8:9b:1a:
a1:bf:bd:a8:aa:0c:b7:8a:13:4d:96:88:70:d2:73:
eb:cf:0e:30:d8:3c:d7:c0:a5:96:fc:f8:b9:f9:cf:
04:d7:49:54:b3:75:9a:23:4a:6f:25:e1:00:74:ec:
06:c3:a5:c4:9b:7e:35:a1:42:ed:38:6c:4b:27:ec:
fe:f5:a7:b5:ed:d0:0f:65:c2:aa:54:e9:94:ed:9a:
a5:d4:77:b3:79:21:21:f2:a9:89:fa:73:35:b4:c1:
b9:e2:34:6f:f6:16:83:5d:cd:0a:ae:79:6c:17:f4:
e8:09:00:0f:f3:aa:d4:42:57:31:8b:41:8b:44:c5:
08:f3:2f:0c:cc:30:1b:ba:af:ec:98:d4:db:67:18:
36:57:20:87:f9:e6:d9:6e:d1:d6:04:d1:28:88:0a:
0b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:04:B7:9D:18:05:D7:93:5F:C3:8C:0C:4F:40:E2:35:17:FD:8D:70
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/485C20A21C9111EEBC89522B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.60.0/24
Signature Algorithm: sha256WithRSAEncryption
02:6d:4c:af:86:64:82:5b:92:fc:02:df:9b:5f:d9:e5:7f:58:
06:d8:6a:e4:05:e5:56:15:51:26:e5:a1:de:fc:e7:d3:81:b6:
9f:b1:76:11:80:8c:35:df:e4:92:5a:33:a6:88:4f:2a:e3:16:
8e:8a:a5:3f:e6:f4:32:06:c0:69:cc:e8:3d:e2:61:40:3f:d0:
b9:4c:ad:9e:dd:e8:57:d0:d3:16:40:aa:c6:95:1b:0c:4f:4a:
fa:64:32:b9:78:bf:72:6f:a8:b7:fe:84:da:09:1f:b8:34:16:
f9:7c:90:f0:a3:64:c6:1c:a3:84:f4:f0:50:a7:f2:29:05:2d:
68:2b:bb:38:eb:6c:9e:c2:a0:1f:db:5e:9e:01:73:5c:94:e0:
b8:b4:b0:a0:32:b2:51:47:92:cd:17:2a:82:40:23:13:c6:4b:
23:86:5a:58:dc:64:17:c8:62:cf:18:e9:6c:b5:79:c9:2a:4e:
b9:62:89:f4:28:22:39:06:bd:08:1c:93:0b:cc:c0:33:df:8a:
72:3d:a6:d8:f4:9e:cb:a0:4b:2c:d2:09:95:63:43:cd:e7:9f:
89:c6:7c:9b:52:97:28:d5:b1:41:ff:9e:f7:0e:5e:3f:28:49:
19:84:2b:22:46:13:c6:d8:0a:c5:d7:e2:77:03:b6:2b:20:40:
f5:51:74:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 12:55:02 2023 by rpki-client on console-fra.rpki-client.org