Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/63FB491292D911EBB191DF57F8AEA228.roa
File: 63FB491292D911EBB191DF57F8AEA228.roa (raw, json)
Hash identifier: 8vGA6EtJELNz4JvLgNQPDjAcymIQNSshrvsOWWH/hno=
Subject key identifier: 98:0E:FE:CD:27:97:71:86:3B:84:33:B9:94:8C:F4:D3:E4:52:98:00
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 053D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/63FB491292D911EBB191DF57F8AEA228.roa
Signing time: Thu 01 Apr 2021 10:59:55 +0000
ROA not before: Thu 01 Apr 2021 10:59:49 +0000
ROA not after: Tue 01 Apr 2025 10:59:49 +0000
asID: 61440
IP address blocks: 154.16.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1341 (0x53d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 1 10:59:49 2021 GMT
Not After : Apr 1 10:59:49 2025 GMT
Subject: CN=6065a7ab-ca88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:70:c7:31:1b:04:c8:40:be:49:7f:4f:b3:b7:
ae:b8:1c:04:53:17:01:7f:32:13:79:34:75:13:a2:
af:28:80:a1:55:ec:cf:74:69:aa:38:c2:f3:42:b6:
04:20:8e:b5:da:b3:35:a7:59:85:02:bc:6f:dc:18:
6d:dc:ef:21:ee:be:99:3f:bf:69:b1:c9:d5:a5:39:
25:99:e0:d7:cc:9a:5e:76:2b:a0:38:6f:bc:0a:92:
87:d0:91:23:a6:96:d1:43:19:0b:eb:79:4d:f8:7e:
8f:f9:38:d4:51:24:c3:c7:f5:78:0d:7d:60:a7:73:
c4:2a:1c:04:3f:50:a3:08:70:3c:27:d4:39:12:71:
d9:d5:ba:96:aa:50:aa:47:a4:7a:b8:72:40:7a:3f:
5e:8b:44:69:64:c4:13:35:4a:23:b3:f3:c0:fb:ad:
bb:1c:03:50:0e:96:ad:0b:f1:1d:cc:5e:a3:cc:62:
75:9c:79:83:82:19:c8:6c:63:a2:0c:7a:39:41:e5:
0e:ae:5e:f5:9a:98:73:84:1c:83:7b:47:88:ce:14:
ef:31:35:f6:cb:0a:0a:4d:f2:a9:98:fd:b6:84:53:
c3:5c:1b:ec:3f:08:72:aa:62:70:0c:c9:dc:48:c1:
d8:36:31:d6:63:28:fa:10:3a:d3:bd:ce:94:fa:ee:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0E:FE:CD:27:97:71:86:3B:84:33:B9:94:8C:F4:D3:E4:52:98:00
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/63FB491292D911EBB191DF57F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.109.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:9c:cb:54:7b:b7:b9:eb:e2:1f:e3:6e:f1:69:52:03:76:c2:
be:83:f9:b2:59:a5:70:88:78:2d:a9:e0:86:57:b2:38:c7:38:
1c:25:1e:50:01:91:6d:ea:f3:b1:e3:6d:e2:67:35:5b:f7:c4:
a4:3b:1b:b2:da:2d:2f:51:d9:f5:db:2e:a8:df:e8:3a:ef:d4:
52:d9:e0:db:87:1b:8c:f9:d2:4a:a2:59:e6:e5:c7:6d:95:c9:
3e:1a:72:37:54:83:6f:85:6a:bb:fa:be:01:fe:f7:04:8a:42:
d9:ae:04:f7:11:80:44:e4:02:9c:c9:9a:d4:0b:b9:50:5d:a2:
4f:20:a1:5b:22:5d:51:ec:6b:c9:5e:1c:f2:29:33:77:30:20:
60:b7:8c:4a:d9:f2:c6:e1:ce:74:48:d7:f3:32:ff:56:63:70:
a5:0e:65:06:5f:d0:43:8b:5c:e1:f4:7a:ee:ec:e9:cf:eb:9a:
0d:ae:1b:a3:7d:b7:79:4b:95:67:d1:d2:3b:28:6a:02:b3:22:
39:7d:a9:9f:b3:03:12:8c:12:7e:e0:14:df:ec:6a:9b:30:1c:
ec:f6:cf:cb:35:d8:23:6e:6b:e5:db:3e:a6:f1:a3:26:22:73:
c0:61:90:cc:c5:05:25:0c:c2:69:98:f4:03:df:b5:b4:c9:24:
14:09:d0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org