Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BF032C60D52311ED808327EAF1222468.roa
File: BF032C60D52311ED808327EAF1222468.roa (raw, json)
Hash identifier: hbzqDzf+VQgD6c59EyxJxtu2C4CVsa7vkIrMqgnuVXc=
Subject key identifier: 2B:BF:D2:61:91:D4:97:6C:EE:78:03:DD:4B:00:0E:F2:2C:93:15:41
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D40
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BF032C60D52311ED808327EAF1222468.roa
Signing time: Fri 07 Apr 2023 09:08:22 +0000
ROA not before: Fri 07 Apr 2023 09:08:19 +0000
ROA not after: Sat 12 Apr 2025 09:08:19 +0000
asID: 328888
IP address blocks: 154.127.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3392 (0xd40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 7 09:08:19 2023 GMT
Not After : Apr 12 09:08:19 2025 GMT
Subject: CN=642fdd86-03d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c7:51:0c:36:67:d1:9b:40:a2:e7:67:6c:4f:
46:df:76:8d:11:ce:f6:4f:24:ac:6c:53:90:65:c4:
50:f7:8b:df:c5:fa:46:bc:dd:bd:cb:05:f8:19:50:
28:f4:69:a2:a3:c7:3d:fb:8d:ab:43:39:fc:1d:ab:
f0:61:ea:6a:c6:0d:1c:a6:84:aa:25:e3:70:df:5b:
d9:b3:86:a8:f9:80:ce:48:83:26:8d:23:84:30:1c:
cf:a3:b2:d8:a6:fd:e9:e8:59:8d:29:78:a8:02:e2:
c9:6e:3b:9b:da:5e:ca:b7:46:38:28:bc:a0:4c:48:
d6:87:f1:b7:c7:ad:70:ec:40:41:21:3f:13:05:e0:
7c:33:02:bf:1c:03:20:a1:6b:a5:60:cf:fc:fa:24:
f9:e2:87:05:b7:b9:07:16:1e:a5:16:f8:0a:39:00:
e8:26:49:68:54:f2:50:50:ed:a5:79:30:b3:67:1e:
4a:df:0f:98:f7:c4:ef:00:14:71:e3:4c:fb:11:17:
d3:55:09:0c:1d:1f:97:4b:9c:33:b2:89:03:a2:55:
c7:05:81:b9:26:0f:1e:61:97:bf:d1:fe:1e:d1:d8:
4a:2b:e8:48:4d:6d:28:17:78:1f:a5:47:11:74:98:
45:82:5a:8d:be:69:59:83:af:0d:b6:cd:d0:0f:d1:
f2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BF:D2:61:91:D4:97:6C:EE:78:03:DD:4B:00:0E:F2:2C:93:15:41
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BF032C60D52311ED808327EAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.60.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c7:9a:54:3e:cd:74:2a:88:df:85:d6:dd:31:61:6b:95:5a:
6e:ad:c6:cb:bd:a5:11:3d:bb:b0:c8:97:42:9b:ae:46:da:11:
20:29:9d:6a:20:30:a9:18:88:fb:94:36:e0:98:f7:7f:a4:b5:
8f:b6:3d:83:6a:b7:6c:6f:94:84:56:40:44:37:7e:ee:0f:84:
3b:8a:f1:c0:f6:73:e0:9e:b7:d6:5f:64:d2:21:ba:63:97:51:
ae:9d:6a:d0:9a:cf:9a:08:17:d4:00:b7:6b:1a:e1:eb:ed:2d:
21:99:f9:8a:5f:31:54:e9:b2:bb:58:50:4d:c4:27:2d:02:9a:
d8:30:43:f2:46:15:c1:5a:0f:c4:5e:8d:42:9a:0d:10:b8:6a:
d2:82:63:03:80:85:f1:d4:a9:90:42:79:9b:e4:be:bf:e0:e7:
15:ed:bf:9c:69:c4:a2:ac:b5:cb:42:b9:91:80:61:b2:02:ba:
d2:84:5b:f0:4b:0a:55:d8:8e:c4:1c:56:33:42:f7:dd:19:5b:
4f:1e:93:93:4c:3d:ca:75:d6:60:6b:69:4f:ee:24:34:7b:9f:
f8:11:b2:c1:68:f3:c3:fc:c4:8c:ce:b1:28:22:c2:e6:70:33:
aa:f1:e5:36:e9:c5:d8:32:e8:29:69:28:56:05:a9:98:4f:7d:
be:48:92:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org