Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/786DE2B811E111EEBDA56A3A4AD9E6FC.roa
File: 786DE2B811E111EEBDA56A3A4AD9E6FC.roa (raw, json)
Hash identifier: YEg3DkBtbA+6pwfoTYq3epE0pSTD78hvPqjTa4VKAA0=
Subject key identifier: 01:8F:54:5D:38:A8:BE:50:5D:1B:54:DF:7D:C2:F2:4D:F7:C5:0C:F2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0FF8
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/786DE2B811E111EEBDA56A3A4AD9E6FC.roa
Signing time: Fri 23 Jun 2023 16:17:38 +0000
ROA not before: Fri 23 Jun 2023 16:17:33 +0000
ROA not after: Sun 22 Jun 2025 16:17:33 +0000
asID: 200482
IP address blocks: 154.16.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4088 (0xff8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 23 16:17:33 2023 GMT
Not After : Jun 22 16:17:33 2025 GMT
Subject: CN=6495c5a2-0b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:38:c2:8e:34:90:81:13:0d:5e:27:7c:03:
80:bd:4b:52:35:fb:a0:95:e9:cb:fe:b8:af:94:81:
89:dc:01:89:37:91:54:bb:ec:9f:a0:e5:4b:4f:3f:
01:5a:65:1e:13:d3:dc:b1:c2:c6:77:4d:02:30:0b:
61:ca:15:ee:d2:28:3f:ae:5c:ce:23:bc:cc:68:ef:
27:7d:d3:bd:73:05:1b:13:c2:9c:47:fb:e9:57:bd:
79:2d:14:45:80:77:56:4a:7f:fd:fb:54:db:fa:dc:
76:ed:b4:e8:ba:01:c0:55:8b:27:f1:21:7e:6e:b2:
c7:e6:22:83:3d:ec:41:09:5d:fb:42:2a:f0:de:03:
3f:9d:7e:86:44:8b:26:c4:64:b4:31:95:10:67:55:
30:4b:65:5c:d1:9f:ea:ef:c0:75:ad:e4:2c:ba:92:
24:bb:bb:df:91:b5:3b:6f:0a:db:be:81:cc:fb:5b:
53:03:a9:1f:56:2c:da:7d:8e:3e:76:36:e9:18:fc:
4e:c3:f8:0f:ac:1a:92:67:66:ea:8a:53:e9:ea:64:
e2:7d:bf:c7:8d:e3:c8:d0:dc:d3:55:79:11:b6:96:
7a:55:3c:4f:40:9a:74:2f:80:ba:89:b8:6f:53:f7:
34:5e:6c:3d:ee:b6:f5:33:83:6f:ea:10:71:44:e3:
b5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8F:54:5D:38:A8:BE:50:5D:1B:54:DF:7D:C2:F2:4D:F7:C5:0C:F2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/786DE2B811E111EEBDA56A3A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.60.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:e9:3e:19:b5:46:f8:6c:68:7a:a3:0b:f3:0f:5a:0b:d0:7b:
99:f9:3e:61:88:26:2a:4d:86:d3:c1:78:4b:e2:67:b0:07:c3:
12:19:18:00:06:2f:47:5d:49:00:ef:ca:29:67:0a:39:c8:fd:
94:a2:c3:9e:c7:db:59:01:cf:6f:ae:c0:dc:bc:5e:33:e1:12:
71:f4:dc:7f:71:12:3d:b1:8e:40:cd:d7:7e:a1:f8:61:a5:84:
75:83:2b:a8:fe:c6:32:4a:9c:ba:4f:31:a8:91:bc:25:03:eb:
83:80:a0:5e:5d:31:14:65:26:c4:5b:35:46:92:de:5d:ec:e9:
79:80:02:67:8d:54:3c:73:29:f8:e3:ac:74:37:81:10:d2:3c:
29:71:cb:52:09:39:a0:4e:d5:91:ce:25:c3:e3:bc:93:a2:f7:
13:d7:8d:59:b3:23:52:6c:89:08:6f:d1:6e:04:06:69:26:49:
db:41:5d:c8:89:2f:da:24:85:3a:89:4e:79:0c:91:f9:d6:fa:
56:d9:f9:96:47:8c:a3:42:ac:d6:20:21:c4:61:cc:f8:9e:9a:
0e:78:2f:bf:be:b0:b5:45:b3:70:42:db:44:ce:90:77:53:dd:
bf:b0:fe:6d:9d:a5:d3:22:c3:bf:19:83:ed:b0:84:3e:28:2d:
2f:2e:b1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 12:45:40 2023 by rpki-client on console-fra.rpki-client.org