Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6C174AC62D6C11EE86552C0F4AD9E6FC.roa
File: 6C174AC62D6C11EE86552C0F4AD9E6FC.roa (raw, json)
Hash identifier: fjuK/xPdZePa7aTc8Cq11JPTDB6gIPDlrica/GF7NXY=
Subject key identifier: 06:BF:CE:06:DB:48:F4:3C:F0:76:9E:A6:3E:5F:02:1E:DE:BB:CD:91
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 10EB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6C174AC62D6C11EE86552C0F4AD9E6FC.roa
Signing time: Fri 28 Jul 2023 17:30:19 +0000
ROA not before: Fri 28 Jul 2023 17:30:16 +0000
ROA not after: Mon 28 Jul 2025 17:30:16 +0000
asID: 200482
IP address blocks: 154.16.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4331 (0x10eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 28 17:30:16 2023 GMT
Not After : Jul 28 17:30:16 2025 GMT
Subject: CN=64c3fb2b-2d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e8:9e:46:a4:d7:83:bd:0e:05:93:29:81:27:
83:ad:b6:b8:d8:cd:1a:2a:08:39:0f:50:00:ad:60:
f8:ba:7f:6d:dc:36:25:bd:43:36:c0:69:6b:cc:d1:
60:fd:f1:73:c2:cc:dd:a5:ee:2e:86:c9:55:65:05:
cb:97:76:4b:47:c0:3b:ff:78:b9:81:51:1a:c9:1b:
cc:41:b6:23:6d:0b:50:09:05:0d:54:53:e6:c1:fc:
7d:d8:28:07:2d:39:32:e9:70:25:12:b9:af:cc:a7:
48:8d:55:ce:13:c2:82:73:fd:76:4e:67:0f:23:b7:
80:03:e3:ad:8c:1b:67:fc:7e:ad:69:e0:cf:67:9c:
fb:07:3b:3f:69:a3:cc:6c:7c:b7:d3:b4:40:2c:2f:
82:ae:81:2d:88:ac:d0:3b:0e:9d:33:f9:41:f0:6b:
d3:b5:25:19:6b:1a:e4:95:92:77:7d:02:85:4e:47:
ae:77:d9:42:8a:21:b9:89:80:9a:d1:c9:b5:69:83:
16:29:3b:fd:fa:ac:e4:ab:59:0c:79:ae:e1:35:48:
3a:87:72:73:f8:b7:e4:b3:bc:93:8c:84:7a:2e:ab:
c1:ee:49:09:49:66:6f:1f:8b:83:85:0d:df:9d:47:
ad:cb:21:7d:26:6c:20:1f:68:e8:9b:26:77:5e:4a:
e6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BF:CE:06:DB:48:F4:3C:F0:76:9E:A6:3E:5F:02:1E:DE:BB:CD:91
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6C174AC62D6C11EE86552C0F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.78.0/24
Signature Algorithm: sha256WithRSAEncryption
36:52:57:61:f8:eb:ba:5a:2c:b8:9f:53:16:40:15:1e:5e:af:
b2:bb:b0:8d:ee:6c:af:b1:ac:ca:eb:03:f3:0a:de:10:5a:a8:
60:fa:c2:9b:ed:9c:25:16:66:cc:9b:87:f7:b4:0e:33:53:e7:
21:42:47:0a:32:4d:01:8d:c5:50:18:a1:46:7d:80:9f:a8:ae:
f3:8b:2c:d5:c2:46:80:b9:5b:76:0c:f6:d5:0b:20:57:de:86:
ed:7a:31:79:31:ab:7f:38:e5:52:ea:45:eb:f6:a3:65:c6:5d:
c2:dd:70:02:cc:4c:78:80:5d:25:5e:8c:e7:4c:7c:34:5b:8f:
dc:bc:8d:16:7d:e6:21:a6:75:b4:ad:76:22:5b:36:91:86:45:
cf:68:a2:b5:5d:e6:34:fa:06:41:1a:5e:d6:0c:1e:74:b7:16:
5a:ed:18:b7:5f:c4:84:cb:c2:37:47:e9:44:89:a5:0d:d9:1e:
58:27:92:24:cb:d6:5d:0e:e2:15:5b:e3:02:46:de:e2:14:97:
04:db:7f:a4:36:79:c3:2e:32:ed:6d:15:d1:59:92:86:69:94:
d3:e8:af:0c:bf:ff:74:f7:f8:a4:4d:de:d5:80:c7:8e:a0:d7:
a7:38:c0:18:70:4e:3f:8c:ce:5a:df:24:3c:85:92:df:69:29:
f7:53:20:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 10:30:34 2023 by rpki-client on console-fra.rpki-client.org