Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7103551AB30111EDBE618497F1222468.roa
File: 7103551AB30111EDBE618497F1222468.roa (raw, json)
Hash identifier: 318XBYf62CCf2KhJzZsUAlkSm+e7iN+ABd2eDfMAkaM=
Subject key identifier: E5:21:4A:54:87:3B:3B:DB:43:0A:01:FD:5C:B4:BD:C0:CA:33:91:F8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0BCA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7103551AB30111EDBE618497F1222468.roa
Signing time: Wed 22 Feb 2023 22:37:09 +0000
ROA not before: Wed 22 Feb 2023 22:37:05 +0000
ROA not after: Tue 25 Feb 2025 22:37:05 +0000
asID: 204843
IP address blocks: 154.127.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Mar 2023 12:12:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3018 (0xbca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 22 22:37:05 2023 GMT
Not After : Feb 25 22:37:05 2025 GMT
Subject: CN=63f69915-6a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5a:97:1c:c8:ee:c4:f3:47:b2:fa:eb:a5:24:
06:f6:ed:96:18:f7:1e:b0:65:72:52:55:b4:c3:a5:
7a:59:ae:3d:77:fe:4e:4d:14:7a:dc:4d:aa:5d:e8:
fe:d3:37:a7:86:c7:7b:7a:8c:09:ee:11:b1:16:74:
47:06:51:a9:63:39:40:1a:5b:3e:42:11:c7:93:82:
ef:5d:87:88:d8:5f:ff:e6:93:94:65:eb:86:50:5f:
39:9c:98:95:bc:eb:66:e5:82:89:6d:ad:31:e3:e6:
f5:97:06:46:08:3e:e0:cd:d9:a7:81:d2:bf:16:cc:
50:0c:c6:12:52:b9:7c:c7:ab:02:de:61:da:0b:a2:
6f:74:8c:1e:45:69:5a:c9:06:31:76:d5:2e:b6:01:
af:78:04:82:af:ce:83:21:d5:8a:5c:63:15:0c:cd:
f5:dd:28:4e:c1:1c:c5:b6:a3:ea:95:57:af:e4:31:
f5:25:04:b0:bb:ae:8c:9f:83:70:2c:70:75:52:0c:
c1:db:98:10:0b:fe:77:ca:54:ce:28:00:10:ce:c5:
d5:6f:73:0b:9f:cc:92:92:57:c2:50:92:cc:6d:9f:
34:04:38:07:b8:5e:01:ed:cb:ff:39:1a:8f:ee:30:
4d:15:8b:00:82:85:a9:1e:1f:c6:43:76:5a:12:03:
56:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:21:4A:54:87:3B:3B:DB:43:0A:01:FD:5C:B4:BD:C0:CA:33:91:F8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7103551AB30111EDBE618497F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.60.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:08:b6:78:b4:48:8c:1b:b0:ac:fb:f4:cb:50:b9:2f:51:2d:
f7:c8:55:c0:85:a5:40:c5:27:74:9f:91:7d:85:64:8c:f2:86:
5d:ba:de:71:23:08:59:90:34:77:80:2b:7a:c1:af:8b:9d:31:
d4:d1:28:e7:e3:dc:a0:82:ba:5b:1c:29:fc:3e:23:8e:a3:76:
eb:48:a2:9f:95:48:6f:6a:2c:56:63:05:3d:4b:8c:50:f4:9d:
57:2d:2e:09:e7:fe:ca:7e:e9:51:02:68:8e:34:43:69:0d:2d:
7c:77:46:6c:ac:a7:bf:97:fe:0f:b4:22:dd:97:3d:25:ce:17:
64:0e:c0:f4:da:6e:cc:db:bd:c6:d3:69:e0:5e:47:21:da:aa:
8c:ea:fc:75:48:85:47:0d:e4:af:b2:34:93:7f:58:8a:9b:34:
39:0f:03:27:68:28:78:17:fa:bc:20:75:0f:80:55:f2:7d:78:
21:12:ad:a8:ce:99:4f:98:78:45:56:00:a4:72:d8:53:68:45:
bd:2a:b5:a9:4d:ad:8c:ce:5b:3f:49:c2:1b:8a:87:2b:e6:f5:
4f:83:5e:4a:d8:d6:f8:0e:03:90:d8:4e:69:90:1e:c5:3e:94:
f2:55:f9:3d:ee:d8:e4:1a:bf:67:13:0e:11:29:a8:2d:57:a2:
9b:db:a4:ba
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICC8owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAyMjIyMjM3MDVaFw0yNTAyMjUyMjM3MDVaMBgxFjAU
BgNVBAMMDTYzZjY5OTE1LTZhMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQChWpccyO7E80ey+uulJAb27ZYY9x6wZXJSVbTDpXpZrj13/k5NFHrcTapd
6P7TN6eGx3t6jAnuEbEWdEcGUaljOUAaWz5CEceTgu9dh4jYX//mk5Rl64ZQXzmc
mJW862blgoltrTHj5vWXBkYIPuDN2aeB0r8WzFAMxhJSuXzHqwLeYdoLom90jB5F
aVrJBjF21S62Aa94BIKvzoMh1YpcYxUMzfXdKE7BHMW2o+qVV6/kMfUlBLC7royf
g3AscHVSDMHbmBAL/nfKVM4oABDOxdVvcwufzJKSV8JQksxtnzQEOAe4XgHty/85
Go/uME0ViwCChakeH8ZDdloSA1YlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU5SFK
VIc7O9tDCgH9XLS9wMozkfgwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzcxMDM1NTFBQjMwMTExRURCRTYxODQ5N0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACafzwwDQYJKoZIhvcNAQEL
BQADggEBAKYItni0SIwbsKz79MtQuS9RLffIVcCFpUDFJ3SfkX2FZIzyhl263nEj
CFmQNHeAK3rBr4udMdTRKOfj3KCCulscKfw+I46jdutIop+VSG9qLFZjBT1LjFD0
nVctLgnn/sp+6VECaI40Q2kNLXx3Rmysp7+X/g+0It2XPSXOF2QOwPTabszbvcbT
aeBeRyHaqozq/HVIhUcN5K+yNJN/WIqbNDkPAydoKHgX+rwgdQ+AVfJ9eCESrajO
mU+YeEVWAKRy2FNoRb0qtalNrYzOWz9JwhuKhyvm9U+DXkrY1vgOA5DYTmmQHsU+
lPJV+T3u2OQav2cTDhEpqC1XopvbpLo=
-----END CERTIFICATE-----
Generated at Wed Feb 5 14:41:20 2025 by rpki-client