Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C6A3EFBEB43E11EDA2D473AEF1222468.roa
File: C6A3EFBEB43E11EDA2D473AEF1222468.roa (raw, json)
Hash identifier: mwpXoWv3vUwFCC7v9lHBp3/cYsJTtz5aU2x3XLvsks0=
Subject key identifier: 3F:4E:1A:F5:F4:5C:05:8F:49:E6:38:E2:02:1D:2C:BE:21:08:3B:5E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C21
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C6A3EFBEB43E11EDA2D473AEF1222468.roa
Signing time: Fri 24 Feb 2023 12:28:43 +0000
ROA not before: Fri 24 Feb 2023 12:28:39 +0000
ROA not after: Sat 22 Feb 2025 12:28:39 +0000
asID: 61317
IP address blocks: 154.16.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3105 (0xc21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 24 12:28:39 2023 GMT
Not After : Feb 22 12:28:39 2025 GMT
Subject: CN=63f8ad7b-fc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:2c:34:1b:2e:79:7c:d2:e5:50:d5:30:3d:
9f:fa:84:b9:4a:62:70:e1:37:69:bb:5c:cd:48:81:
ed:2d:81:31:dc:78:e9:99:4d:83:fa:89:65:c7:e0:
27:0b:f2:36:9d:6e:1e:51:f2:09:00:d7:e3:37:af:
45:88:de:b2:c3:9a:02:1a:e9:dc:ec:bb:c6:ed:8f:
10:90:1e:3f:51:44:4c:e6:5e:b4:04:4f:e1:43:7d:
9b:9b:86:a4:d5:16:42:50:cc:4a:63:d2:e3:6d:c4:
48:b5:2f:a9:5d:e7:48:ab:b7:5b:89:82:2a:c9:51:
ab:61:bb:3c:2b:8e:f8:71:40:5c:17:1f:e4:7f:1f:
3f:9f:35:7d:2d:09:3f:ad:46:48:b6:ac:a3:d4:63:
f7:38:7b:5b:76:ba:c5:3c:41:44:e8:ea:11:6c:19:
78:91:34:0c:cf:2e:59:f3:35:d9:03:38:df:72:02:
b8:9a:a7:f4:ed:03:94:19:bd:69:d1:f0:51:09:2d:
fe:e6:1d:64:c6:76:50:0f:bb:24:35:70:c6:ed:64:
8e:fa:c4:f8:34:45:ee:08:81:8a:97:42:89:1e:1a:
45:cd:58:37:f3:f3:02:25:ae:c1:db:08:bc:69:00:
5a:38:37:2b:1e:c8:04:a3:21:06:22:53:81:86:f1:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4E:1A:F5:F4:5C:05:8F:49:E6:38:E2:02:1D:2C:BE:21:08:3B:5E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C6A3EFBEB43E11EDA2D473AEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.60.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ee:86:ab:34:34:49:4e:1f:a1:be:e2:ab:3a:04:f0:20:ad:
b8:d4:fa:3b:89:35:2c:8b:b4:f8:bc:b8:b2:4e:4c:64:2a:c7:
7d:db:3e:09:a9:ce:b8:9d:0f:25:d5:7a:45:bd:79:17:e3:8b:
40:7b:d8:34:ac:92:3e:8c:08:57:fe:c4:cf:ab:75:72:43:88:
fc:ea:5e:91:e2:f3:96:ce:a5:00:4c:f6:2f:ad:ca:db:c2:21:
cb:9b:53:4f:f6:db:89:6a:9b:57:bf:39:50:5f:23:4e:9d:45:
fb:5a:4a:0e:11:46:99:6f:0c:28:c6:fe:b6:e9:7e:82:80:70:
f5:ea:fd:2f:df:a3:66:b0:8b:80:7b:b2:77:a3:17:d1:e9:55:
21:e4:4e:44:62:93:46:a0:7d:81:6c:3e:fc:5f:c5:ab:5a:cc:
93:4c:12:d2:14:76:76:4a:88:b2:67:f0:5b:50:ff:f7:18:f6:
d9:11:95:45:e4:2b:a1:03:2c:c9:7d:dd:2c:21:29:d4:2c:a9:
c0:c5:9c:d3:b3:d6:40:6a:2c:05:ce:bf:5f:d5:d0:8d:f4:b8:
6f:64:f1:fc:60:c8:42:0d:62:87:af:11:b7:ca:9b:5b:b4:3b:
de:84:5c:5b:8e:d0:3b:fd:b1:ae:ae:88:c1:bd:6f:8d:d7:59:
08:18:b8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org