Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6DA20E1EBF6011EDA35402D9F1222468.roa
File: 6DA20E1EBF6011EDA35402D9F1222468.roa (raw, json)
Hash identifier: NiorL2c6Gzhf5NviyevcGGsI6j3rsljUNI0btqdAh20=
Subject key identifier: 95:D8:42:B3:41:D6:03:A8:17:62:E6:E7:5D:5D:D4:42:A6:90:57:57
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0CF4
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6DA20E1EBF6011EDA35402D9F1222468.roa
Signing time: Fri 10 Mar 2023 16:27:20 +0000
ROA not before: Fri 10 Mar 2023 16:27:15 +0000
ROA not after: Mon 10 Mar 2025 16:27:15 +0000
asID: 62240
IP address blocks: 154.127.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3316 (0xcf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 10 16:27:15 2023 GMT
Not After : Mar 10 16:27:15 2025 GMT
Subject: CN=640b5a67-747d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c0:12:d4:7b:9d:6a:b4:57:5a:0b:dc:76:f6:
a5:42:45:af:0f:66:ae:0d:d0:4b:f8:44:47:79:73:
88:45:cd:c5:62:b1:c3:57:92:cd:59:79:e4:48:36:
bd:f3:9c:0a:bf:9b:4e:d4:e5:75:5d:c9:c8:61:a4:
97:a6:c1:55:f8:78:21:7e:de:63:62:70:30:1b:fd:
4e:f6:f6:66:28:b1:40:ad:5e:a7:c3:31:7e:bb:36:
7f:13:7e:d5:7a:e1:ce:2c:2a:ec:8f:4b:07:27:b8:
5b:9d:a7:4f:99:a1:e0:a9:b6:de:57:03:bc:39:d4:
2d:49:e5:c2:38:ef:8f:95:39:07:2d:a0:f8:66:c3:
3f:98:46:91:8f:25:51:12:59:54:f2:98:c0:5a:d4:
db:73:37:09:be:ec:6c:5c:17:a4:e1:2e:76:cc:8d:
a5:82:01:7b:d3:6b:73:dc:03:8e:dc:c4:a1:4e:67:
17:ae:01:eb:06:e0:31:44:36:1f:13:1e:1d:2e:86:
57:64:34:47:57:c5:18:d3:bf:de:f2:73:0c:55:33:
af:22:b3:55:c1:45:fc:3e:85:9f:22:d8:92:b0:6e:
26:9f:98:ec:09:56:f1:b2:8b:f8:94:08:d4:34:25:
67:d1:9e:d0:40:ad:ce:aa:da:d9:28:55:2d:58:49:
ec:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D8:42:B3:41:D6:03:A8:17:62:E6:E7:5D:5D:D4:42:A6:90:57:57
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6DA20E1EBF6011EDA35402D9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.62.0/24
Signature Algorithm: sha256WithRSAEncryption
45:be:fe:12:aa:68:75:65:24:d9:54:9a:52:15:61:99:77:63:
3e:35:16:91:f7:99:d8:4a:51:e4:2c:66:d0:9b:f4:fb:44:0c:
c8:fb:31:6a:d5:62:43:b2:f5:22:d6:7e:25:20:03:1b:b5:d7:
3a:20:2d:98:c0:a5:93:69:e7:37:37:fc:1d:1d:3d:44:d5:16:
eb:bc:c8:f2:c1:9d:dd:f1:32:a0:5b:3f:84:99:3f:88:63:29:
9b:17:19:16:48:d1:22:1e:0c:5b:b0:a3:83:c7:73:de:fa:13:
47:64:ce:e0:ea:d0:f7:d6:12:b3:c9:2f:71:bf:fc:48:aa:d2:
55:e1:0e:4b:5f:45:16:fc:5d:04:d4:70:31:74:c3:22:f0:08:
08:1f:eb:cf:b1:67:fa:e7:42:53:81:02:aa:43:bf:19:34:2d:
c5:b8:21:5f:6a:47:e0:6d:45:7c:14:8e:6d:1f:2c:51:ad:3d:
70:94:4f:f9:9f:21:1c:c1:6f:c4:4a:f8:4a:e3:1b:c6:ea:57:
19:c4:20:2b:44:6e:54:f6:4b:c3:ce:a2:e8:86:cd:18:1f:fb:
55:23:da:61:fd:78:d0:2d:59:83:e5:d2:97:88:9a:18:74:78:
c2:21:93:56:34:8a:22:31:6e:07:ec:b3:ce:62:da:6d:61:57:
74:12:d7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 23 09:12:49 2023 by rpki-client on console-fra.rpki-client.org