Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/60EC6110241911EEB79E4B134AD9E6FC.roa
File: 60EC6110241911EEB79E4B134AD9E6FC.roa (raw, json)
Hash identifier: 48UBMnl5Go0EY4SDcco3u44zr5fjiPlSpDowH9hba5A=
Subject key identifier: 57:11:D5:CD:6B:0C:37:5F:C5:30:C6:6E:6B:E7:80:E3:ED:E7:02:8B
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 109E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/60EC6110241911EEB79E4B134AD9E6FC.roa
Signing time: Sun 16 Jul 2023 20:43:11 +0000
ROA not before: Sun 16 Jul 2023 20:43:08 +0000
ROA not after: Tue 15 Jul 2025 20:43:08 +0000
asID: 834
IP address blocks: 154.16.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 13:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4254 (0x109e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Jul 16 20:43:08 2023 GMT
Not After : Jul 15 20:43:08 2025 GMT
Subject: CN=64b4565f-7692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:08:5c:9c:c3:c3:44:11:60:42:63:1b:bc:
60:ee:f2:ef:1b:d8:8f:b3:94:68:2c:53:d8:55:05:
d5:02:76:04:e5:ff:cd:54:f3:12:ce:0f:e4:38:dc:
66:d7:31:c4:47:c7:12:72:a3:4b:44:1f:90:e6:52:
97:8f:d4:73:8b:a6:5a:ac:a1:ba:00:65:43:cf:1d:
ab:bd:8b:85:10:43:c9:40:09:49:68:bb:41:65:6a:
77:a8:3f:57:bc:2c:06:77:ef:7e:e4:24:46:2f:66:
0b:03:43:70:14:7b:ca:d1:66:66:d9:6e:c9:de:6f:
d1:9a:49:14:06:b3:7d:db:6d:50:c8:85:86:f8:39:
0b:59:82:d4:af:05:35:f6:22:13:d4:4c:9d:59:43:
5b:9e:cf:a0:d7:86:d6:9d:7e:5e:82:ee:4c:61:32:
cc:fc:56:41:9b:3a:f2:44:14:ee:8a:dc:b4:ab:ed:
e7:58:54:3a:cb:71:d0:f4:39:d7:75:fc:2a:b0:78:
99:da:83:9f:c7:24:f1:9b:ac:97:96:e7:21:e4:51:
81:5e:61:6b:de:bd:07:df:4a:38:98:54:dc:0e:93:
e7:32:8b:a8:07:28:22:5a:26:1d:e6:32:39:64:c3:
77:0f:01:65:08:0c:b2:1a:5f:4c:b7:f7:ac:94:e0:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:11:D5:CD:6B:0C:37:5F:C5:30:C6:6E:6B:E7:80:E3:ED:E7:02:8B
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/60EC6110241911EEB79E4B134AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.94.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:9a:cf:d7:e2:14:d2:42:9f:f6:db:a8:35:3e:59:ee:b3:0c:
46:b4:21:b8:f5:b9:51:82:55:6b:d4:98:3d:71:01:b1:87:2a:
68:07:f1:03:86:31:01:84:2e:ac:b4:dd:64:d7:5f:3c:10:9f:
ad:c8:52:97:1e:36:1a:ba:bb:6a:75:16:8f:e1:d3:19:3a:5e:
e9:6e:bf:ad:2f:10:18:d6:16:66:fb:4b:7b:41:94:51:28:46:
b2:bf:54:49:70:28:69:de:d9:4f:c3:9e:8f:32:1d:52:03:83:
dc:5c:4f:f4:cd:50:39:b0:73:5f:0c:1c:12:7d:81:90:8c:08:
43:37:93:aa:0a:7c:cb:e3:22:0b:e9:9c:0d:2c:f2:53:f4:77:
3a:14:2b:71:dc:ee:3b:8e:1a:ce:6e:ec:6f:c1:69:99:ba:8b:
1a:da:49:3c:a3:83:67:28:74:de:e4:c3:d0:d2:6a:21:9f:8a:
a7:09:af:66:e4:65:a0:21:9a:2c:ac:c7:06:81:95:32:9a:2c:
a3:02:9c:92:6b:a0:91:73:cb:b0:4d:79:dc:b5:70:0e:98:f2:
5f:70:79:d9:18:9d:b1:7b:6a:99:f3:a3:de:a0:8b:9f:8c:a3:
a7:bf:bb:3d:70:6f:b0:da:fd:dc:bf:0d:9b:aa:f1:de:d3:0f:
10:8c:9d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 15:02:59 2025 by rpki-client