Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/78FBFB6C09DE11EE935DA46B4AD9E6FC.roa
File: 78FBFB6C09DE11EE935DA46B4AD9E6FC.roa (raw, json)
Hash identifier: fY1By58Z8BuNQC97NXV9GnJawoXOp4XeJJEV/dh6Xdg=
Subject key identifier: 0C:52:B4:01:6F:C0:7E:C4:3D:0F:C4:CA:E0:F0:00:E3:A3:A9:FA:74
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F42
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/78FBFB6C09DE11EE935DA46B4AD9E6FC.roa
Signing time: Tue 13 Jun 2023 11:36:01 +0000
ROA not before: Tue 13 Jun 2023 11:35:58 +0000
ROA not after: Thu 12 Jun 2025 11:35:58 +0000
asID: 61138
IP address blocks: 154.16.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3906 (0xf42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 13 11:35:58 2023 GMT
Not After : Jun 12 11:35:58 2025 GMT
Subject: CN=648854a1-2b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:33:e0:3c:f4:56:93:8f:72:ac:a9:f0:5e:d8:
7a:d0:1f:b9:f5:d5:80:5c:dd:09:6b:6a:63:46:ab:
d8:ce:44:6a:5d:62:94:e4:c2:57:e8:10:63:74:5f:
46:61:a2:1a:e0:a4:d6:91:9c:69:c1:49:d8:15:dd:
e0:4a:e5:f2:f6:a7:bc:70:de:f3:3d:c8:85:39:a3:
1a:be:b7:f4:28:3a:4d:50:cd:50:19:a3:fe:b6:37:
45:53:f2:f9:51:f5:1f:d8:d3:b7:d9:da:b9:28:ed:
a5:34:69:42:6b:66:7d:8f:19:42:3a:82:55:37:fc:
3a:08:d3:c2:52:45:ce:01:49:48:04:7b:34:4a:6d:
9c:41:74:a1:1b:0c:cf:d4:d2:9c:64:96:fb:15:61:
a2:e5:ec:e9:25:a1:eb:54:f1:a0:52:a2:cd:3c:ed:
46:8b:8a:39:1d:5a:bb:18:fe:40:5d:27:11:62:eb:
35:94:0b:34:62:10:35:36:66:62:57:7b:45:f7:05:
ed:53:19:bb:a2:b1:2e:a3:ea:02:5b:16:a6:bd:c5:
90:49:03:9c:2a:2b:0f:53:ff:cf:d8:be:1f:30:b8:
5e:8a:66:ca:83:91:c4:bc:bc:32:11:fa:90:92:4e:
b3:74:2c:fe:ea:fb:2d:74:92:28:07:d2:2f:d4:dd:
8a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:52:B4:01:6F:C0:7E:C4:3D:0F:C4:CA:E0:F0:00:E3:A3:A9:FA:74
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/78FBFB6C09DE11EE935DA46B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.48.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d7:e5:e0:ec:4e:7a:cc:1d:af:0d:01:54:27:83:32:bc:19:
00:df:a1:cf:e6:61:b3:f4:5f:1b:08:f5:d6:3f:81:77:f1:52:
27:72:a2:f1:df:52:40:0a:c5:a0:1b:79:5e:19:1e:79:05:07:
15:d8:49:8a:b1:ad:3d:e3:f9:23:80:76:d1:e1:2d:ec:82:87:
63:46:23:ba:39:bb:71:bb:21:fc:b7:ca:69:09:7c:4d:d1:78:
80:de:75:b7:8f:94:4c:3c:63:d0:f3:33:dc:15:8f:a9:1e:a5:
f6:f8:de:6c:b5:37:5a:b1:bd:f6:8e:23:55:c6:a9:b7:6d:c5:
20:ba:a3:30:e0:4c:ec:bc:03:f4:e2:0c:bd:f6:c9:89:97:10:
49:e5:02:0c:20:1f:dd:96:5f:64:53:11:32:ce:02:0b:4d:d4:
46:40:eb:b3:cf:47:40:48:21:c1:01:cd:e1:62:ca:35:27:e9:
14:47:36:44:72:90:e4:0d:1e:48:a8:f5:ae:09:4d:81:4b:11:
49:39:ad:14:9d:fb:d2:bd:08:dd:cf:5e:3e:9f:0b:3a:dc:bd:
cd:dc:58:5c:f1:3c:b5:5d:18:b1:f0:45:1e:56:89:32:66:ce:
2d:06:bf:75:05:c9:98:55:ac:db:38:7d:28:cb:ef:51:a2:f3:
b7:83:e2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org