Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/57AADA16D45811ED810A8E83F1222468.roa
File: 57AADA16D45811ED810A8E83F1222468.roa (raw, json)
Hash identifier: idbq1gqpLcTrX1m7vr3Dzu1kvKU80CQslJOFbQYz+dE=
Subject key identifier: D0:35:44:B1:A7:63:B3:78:65:6D:D8:FF:00:6C:A5:B5:AA:1B:5B:BB
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D2B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/57AADA16D45811ED810A8E83F1222468.roa
Signing time: Thu 06 Apr 2023 08:52:21 +0000
ROA not before: Thu 06 Apr 2023 08:52:16 +0000
ROA not after: Sun 06 Apr 2025 08:52:16 +0000
asID: 328608
IP address blocks: 154.127.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3371 (0xd2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 6 08:52:16 2023 GMT
Not After : Apr 6 08:52:16 2025 GMT
Subject: CN=642e8845-10f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:91:2c:05:57:27:fc:c8:da:07:88:14:cc:
5a:01:cb:a7:20:28:6c:19:94:b7:f0:9e:dc:44:ab:
8d:27:8a:75:df:ca:7e:0a:04:56:20:46:ff:d8:81:
5a:0f:d0:41:0e:71:1e:78:ac:3f:86:20:ab:87:26:
67:a0:97:2a:4d:18:00:24:ea:1a:cd:ce:43:68:3d:
25:ae:49:ee:0f:fb:fa:e8:fc:c2:17:75:66:5b:94:
a8:6b:57:ad:11:9f:21:00:92:c6:88:cb:ed:1d:38:
b6:3f:5c:91:1e:60:79:c9:ce:e7:a2:77:e7:b0:95:
29:3c:ff:2c:f8:dc:e7:1d:79:3a:48:71:c6:5a:5d:
d4:4d:0b:b8:fc:86:75:11:3c:b2:e5:72:1f:a6:ee:
cc:45:0f:44:c8:88:ee:24:2e:74:da:87:c9:03:e6:
e7:8d:b7:19:88:62:f9:d5:00:21:74:77:54:0b:2b:
04:dc:9a:90:07:43:1a:02:ec:9d:4a:72:9c:6a:42:
04:b9:1f:14:f1:40:ae:04:d0:a2:7b:f0:06:41:eb:
c9:ae:9c:f5:54:3e:ec:54:1c:30:82:d9:4b:bf:fc:
50:08:1b:c9:4a:77:44:1a:37:21:4c:47:b3:1e:e0:
f6:ff:cb:b1:e1:cf:0b:4e:03:4f:72:4e:7a:a5:9c:
54:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:35:44:B1:A7:63:B3:78:65:6D:D8:FF:00:6C:A5:B5:AA:1B:5B:BB
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/57AADA16D45811ED810A8E83F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.60.0/24
Signature Algorithm: sha256WithRSAEncryption
59:0e:4f:28:bc:3b:71:08:98:d3:d7:ca:4a:ed:1b:99:6b:4e:
44:2a:68:42:68:d7:1e:e7:de:4c:0f:32:d5:7e:ca:6a:72:49:
18:e1:78:c1:ec:a9:a9:7d:a7:64:fe:8a:f7:b1:dc:21:32:d3:
c3:ca:c9:b2:60:88:b7:e1:50:db:68:52:db:84:44:df:42:7c:
8e:fc:6f:06:c3:93:d9:b8:c0:7a:41:0a:41:6d:29:95:ba:d8:
e6:f5:18:c7:f2:9d:b4:f3:4b:49:5f:31:27:22:f6:58:4d:eb:
7c:26:04:bb:26:fe:74:84:e7:d9:33:d5:ad:bc:37:67:63:60:
b5:ef:36:f8:db:a9:89:cc:3a:90:8e:96:7b:11:4d:b6:aa:3f:
c8:09:8d:92:bf:1d:0f:09:e3:5c:16:c2:a5:88:8e:e5:13:3f:
a4:87:b9:0b:af:24:ec:5e:2e:48:68:35:6c:e1:37:50:af:0b:
39:16:5c:cb:a8:82:1a:05:36:b0:94:0a:a7:ab:bc:df:a4:f6:
34:f5:7a:80:21:84:3a:10:e8:d2:a9:0c:9f:d3:f9:a3:9f:a7:
2c:0c:fd:c9:5e:16:c4:76:57:ad:ec:35:ba:91:ac:f2:f4:85:
08:91:8d:43:96:e8:c3:c7:10:4a:49:18:59:8a:24:47:d8:bb:
4d:31:22:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org