Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/602A06FC004B11EEA8D921754AD9E6FC.roa
File: 602A06FC004B11EEA8D921754AD9E6FC.roa (raw, json)
Hash identifier: 86SdPBPJpeoTMSYzGgVbYMHN0hyqrpO1F6qkAU9REH4=
Subject key identifier: 81:36:A8:FB:AC:2B:14:E2:15:98:DD:04:55:3D:41:E5:9D:76:15:E8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E62
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/602A06FC004B11EEA8D921754AD9E6FC.roa
Signing time: Thu 01 Jun 2023 07:10:23 +0000
ROA not before: Thu 01 Jun 2023 07:10:19 +0000
ROA not after: Sun 01 Jun 2025 07:10:19 +0000
asID: 834
IP address blocks: 154.16.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3682 (0xe62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 1 07:10:19 2023 GMT
Not After : Jun 1 07:10:19 2025 GMT
Subject: CN=6478445f-4d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:08:8f:d4:d6:e3:5a:d7:29:47:62:5f:5b:55:
1c:78:bc:cf:aa:84:f6:1d:57:85:e8:3b:59:8f:56:
8c:5e:06:a0:0d:b8:bd:10:6e:d9:9b:77:e6:71:0e:
86:6b:67:e3:37:86:99:5e:96:ca:b3:f6:2a:00:f0:
ae:79:3d:ec:69:d3:67:6b:ff:e2:a3:a7:96:ad:68:
4e:f7:95:3a:99:18:96:cf:8e:05:be:29:bf:a9:90:
b0:6e:9f:1c:3d:7d:7e:96:c8:35:8f:71:fe:36:06:
c0:60:8a:19:0c:f7:da:41:3b:e3:e3:51:f1:81:bf:
68:00:eb:83:1e:2e:98:53:27:7d:b7:e0:bc:9f:4e:
64:24:64:26:cf:54:ef:67:59:b3:90:2f:d0:67:31:
c6:4a:38:27:44:89:2b:46:17:31:ce:ab:67:1e:9e:
f9:1a:c4:29:c8:66:e1:62:98:b2:d5:80:c5:07:b8:
99:9e:04:80:18:6e:7e:f9:d6:9f:c2:b2:95:de:24:
09:65:b6:78:da:a9:cf:d8:65:ed:b7:ce:8c:47:ad:
cb:1c:d8:42:01:99:86:59:30:59:26:68:94:44:9c:
64:30:ae:eb:25:46:a1:58:f6:06:fa:dc:d2:65:76:
4f:33:64:9f:47:3e:00:5b:cc:5a:e2:26:95:92:87:
ba:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:36:A8:FB:AC:2B:14:E2:15:98:DD:04:55:3D:41:E5:9D:76:15:E8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/602A06FC004B11EEA8D921754AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.45.0/24
Signature Algorithm: sha256WithRSAEncryption
95:cd:df:73:a3:ca:d4:86:da:a3:57:f8:7d:ee:f6:70:17:65:
fe:04:5e:71:7a:63:17:67:20:14:0f:e9:d4:e8:b3:92:26:97:
13:fa:de:a7:e7:c3:cf:58:b3:d2:b8:4a:78:13:9c:c2:fc:0a:
b1:44:20:88:da:1a:dc:6d:f2:22:8c:77:9e:94:87:5e:fc:27:
b2:f9:7f:49:62:24:be:6f:de:f1:4d:c6:66:95:b4:43:ca:e4:
e9:49:bc:b6:f9:86:7a:66:5d:61:5b:96:da:6b:c4:77:86:ad:
cf:ef:9d:24:ec:18:85:b2:74:65:93:dd:ff:7e:f9:7d:50:c0:
1b:c1:ed:4d:6e:8f:2b:d3:1c:56:e1:40:ee:26:0f:bd:fd:54:
e4:b1:12:de:9b:70:fa:25:f9:c4:60:d8:23:00:48:ce:b0:52:
89:14:fc:b7:f0:ea:ae:b2:16:d2:63:7d:04:01:ef:c2:9b:60:
fa:fc:c6:6e:bd:3e:b9:6c:93:e2:50:6d:fa:18:2f:4a:23:60:
63:41:0b:04:9d:5d:fe:74:59:f0:82:73:b7:c0:a1:30:ac:42:
17:d3:0f:e6:5b:14:a5:e8:57:f5:80:11:e6:ff:b8:b3:ac:ba:
e4:56:a6:74:4e:0e:d4:e7:2f:b4:8f:d1:f7:7d:4c:21:0c:9a:
0d:ec:49:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org