Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/94BA3E241DAF11EEAEEDA51A4AD9E6FC.roa
File: 94BA3E241DAF11EEAEEDA51A4AD9E6FC.roa (raw, json)
Hash identifier: aenTeWnpySg2ERnQyqAXqpMtph2LDLX/ksdzkRKbJok=
Subject key identifier: 60:0F:5E:0E:C0:DA:03:63:FD:69:CE:06:38:95:39:A2:01:CB:04:4D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1050
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/94BA3E241DAF11EEAEEDA51A4AD9E6FC.roa
Signing time: Sat 08 Jul 2023 16:50:45 +0000
ROA not before: Sat 08 Jul 2023 16:50:41 +0000
ROA not after: Mon 07 Jul 2025 16:50:41 +0000
asID: 834
IP address blocks: 154.70.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4176 (0x1050)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 8 16:50:41 2023 GMT
Not After : Jul 7 16:50:41 2025 GMT
Subject: CN=64a993e5-d4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:0f:00:35:52:dc:84:f4:36:82:16:8d:69:
7d:08:32:4e:7b:1c:e7:7b:31:8f:80:3f:05:f2:c7:
d4:0c:6b:62:d4:e2:00:d7:51:70:3f:69:35:59:48:
24:ae:89:97:72:31:69:e4:14:bf:1a:6b:07:20:36:
f8:7d:c7:11:38:14:a7:9f:8b:88:30:07:4b:b4:f6:
e1:74:9b:52:f5:6a:e4:5b:93:3f:46:b9:2c:fb:5c:
09:74:4d:51:26:da:7e:4f:43:d1:70:8e:55:63:49:
d5:fc:bf:0b:c3:70:c8:d3:72:94:24:ff:e4:8e:38:
0c:fd:37:8b:32:51:ff:f2:3c:43:68:83:14:cf:d3:
30:df:ec:bb:92:24:91:a2:1f:40:b8:ad:f7:3a:3f:
0e:64:f0:3e:1a:37:7f:c6:c9:a9:47:e4:0d:bf:1a:
6b:c3:52:2c:d6:6a:c3:e5:19:b7:19:9f:9f:a2:5d:
f0:26:94:43:cc:b1:86:e3:a8:d3:16:af:cd:fc:8b:
f0:b6:15:ef:c7:79:8b:6e:da:05:32:5c:9e:f0:98:
c4:18:24:a4:3c:7b:37:2f:c8:84:ec:64:48:b8:82:
27:a8:01:e3:3e:c8:84:e5:6e:68:8a:b8:bd:6d:a1:
70:81:f0:41:66:a5:c0:30:22:37:87:bd:1f:0d:df:
bf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0F:5E:0E:C0:DA:03:63:FD:69:CE:06:38:95:39:A2:01:CB:04:4D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/94BA3E241DAF11EEAEEDA51A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.70.152.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:63:50:3c:cd:0f:a8:ec:bc:a3:ba:9a:c8:68:bb:fa:83:8a:
e6:a4:10:3d:06:0d:a4:a0:c1:cc:f0:73:1b:e6:bb:49:2b:77:
08:4e:6d:8c:ee:d7:11:c2:70:83:72:72:69:e6:9d:a2:39:99:
97:1e:4b:c0:c4:a8:25:b3:c8:b9:3c:db:73:4a:7f:0c:27:8e:
20:c5:01:c0:7d:b4:04:f0:4f:42:1e:c5:b6:4b:e9:54:eb:06:
f1:cc:d0:be:c9:04:60:b6:63:87:82:5e:cd:a6:d2:bf:5f:4c:
a3:17:76:ea:94:d1:2c:07:5c:c8:af:bc:a3:de:cc:bd:21:f8:
f9:8c:20:81:59:fb:45:ed:0a:db:e6:77:6e:a7:b2:0f:b6:01:
a0:e0:2a:f0:97:f8:b0:f7:f9:08:8f:36:62:0f:eb:0a:a6:0b:
77:44:7b:61:1b:12:25:48:77:d2:a1:35:c6:cb:a3:6d:fa:96:
cf:cf:5b:66:f4:17:17:5c:32:06:0a:29:81:77:66:42:1f:8e:
87:81:96:e0:d7:7a:2c:64:c3:e4:05:de:3b:bc:e8:13:0f:5e:
be:ea:d6:be:7c:f4:f7:25:b9:a0:f0:e5:39:4c:99:ec:5e:69:
09:5d:17:b4:94:75:81:5d:99:bd:6f:c3:12:cf:f0:4a:7b:d4:
68:1a:03:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org