Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/60CC5C6CD4AF11EDB4C85584F1222468.roa
File: 60CC5C6CD4AF11EDB4C85584F1222468.roa (raw, json)
Hash identifier: UdbM8r/Q+qyNHWx/uFGtQhpu5T4M198mrEWumMKknNI=
Subject key identifier: F5:A2:AD:03:CB:8B:BB:03:7B:3A:7D:FC:63:AA:99:66:7B:2E:27:D2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D37
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/60CC5C6CD4AF11EDB4C85584F1222468.roa
Signing time: Thu 06 Apr 2023 19:15:23 +0000
ROA not before: Thu 06 Apr 2023 19:15:17 +0000
ROA not after: Mon 07 Apr 2025 19:15:17 +0000
asID: 15083
IP address blocks: 154.16.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3383 (0xd37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 6 19:15:17 2023 GMT
Not After : Apr 7 19:15:17 2025 GMT
Subject: CN=642f1a4b-9ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2c:9f:f2:ef:be:d5:f4:7b:5d:b6:48:66:43:
b2:44:30:e9:1d:fe:bc:d6:f3:a8:50:4d:c1:5f:49:
c9:d4:a1:e2:78:ef:fe:77:49:ee:56:c8:2e:ef:7d:
2f:30:cc:60:50:3b:4f:24:08:66:e1:41:5d:9d:73:
20:1f:65:52:38:cd:a1:ef:7a:eb:14:8f:8c:fa:a4:
3f:fb:9e:ed:3f:3a:66:6d:24:4d:9f:40:68:ea:65:
74:cb:8e:86:5c:b5:83:e8:8b:6d:45:67:fb:05:55:
58:c9:cd:f9:09:10:80:32:3b:a1:77:3e:c0:d1:ab:
68:df:aa:ab:19:54:67:5f:99:86:03:59:99:34:3d:
48:b7:e2:e8:0f:e5:de:52:ac:3f:97:96:2f:53:9a:
b5:71:a8:80:d4:99:31:07:a8:1d:20:44:c6:48:2f:
55:0f:90:39:6c:11:a2:5f:55:42:de:f6:62:3e:d5:
b9:a5:9d:c0:c1:e0:eb:6b:2a:b9:78:f1:67:c6:67:
83:7c:98:d7:2a:e3:c9:0e:76:26:28:6a:04:ce:d5:
e5:32:83:58:c0:06:1d:a4:9e:0d:10:9c:79:83:b1:
83:82:70:47:dd:b4:f9:f7:3d:6f:4c:5c:f0:f6:ed:
1c:a5:90:93:52:3f:02:cb:d2:00:91:71:90:53:e3:
c8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A2:AD:03:CB:8B:BB:03:7B:3A:7D:FC:63:AA:99:66:7B:2E:27:D2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/60CC5C6CD4AF11EDB4C85584F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.51.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:85:6b:82:cf:5f:02:90:17:d6:aa:14:2c:28:67:13:5d:1a:
5a:fa:5a:20:ec:fc:79:66:0b:5b:6c:35:13:99:dc:1a:c8:d6:
d0:8a:b7:53:27:4a:90:b1:b8:5a:66:c4:ec:81:04:69:fc:ce:
ce:3a:d1:b9:43:2f:ca:e0:ec:25:4a:de:fb:27:f9:d2:c9:38:
cc:5f:13:34:eb:1d:3d:fe:a6:1f:57:a8:3b:41:47:21:2d:9c:
d6:68:cb:ac:09:b4:e0:f5:26:55:dc:1a:98:10:98:63:fa:43:
ee:51:96:8e:7f:70:c5:97:38:f2:16:56:98:9d:d7:31:94:d9:
ad:e5:ad:ae:bd:90:b2:a0:0c:02:78:e0:1d:0c:f3:28:fc:26:
0d:a3:67:1c:52:74:4a:ad:01:1c:cb:22:22:48:8a:c4:d8:a7:
b6:d8:4d:ee:61:81:ec:92:3c:4e:00:5f:07:e9:00:f9:14:ad:
a6:73:36:bb:4e:ed:ac:b5:78:10:6d:44:9a:c9:fc:98:bd:7f:
f5:d9:14:09:21:8e:5d:e6:af:2d:2d:f4:eb:0f:f1:a8:fa:19:
55:35:2b:98:29:14:79:e9:5b:2f:db:79:dc:73:b7:7b:55:3a:
7f:e5:ab:d2:28:e5:5c:9e:2c:d4:4d:d8:05:ec:df:f9:8a:fb:
c1:bd:f2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org