Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C7C60D5E1C9511EE963E4C384AD9E6FC.roa
File: C7C60D5E1C9511EE963E4C384AD9E6FC.roa (raw, json)
Hash identifier: 1wp7hWy0tDXR370p3gMLC1lsWBMHxLWQbZssfpVXHFc=
Subject key identifier: 03:AE:A6:D7:08:FE:BE:A2:A0:48:88:1D:A1:E2:2A:EE:E4:B8:8F:68
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 104C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C7C60D5E1C9511EE963E4C384AD9E6FC.roa
Signing time: Fri 07 Jul 2023 07:13:32 +0000
ROA not before: Fri 07 Jul 2023 07:13:29 +0000
ROA not after: Mon 07 Jul 2025 07:13:29 +0000
asID: 834
IP address blocks: 154.16.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4172 (0x104c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 7 07:13:29 2023 GMT
Not After : Jul 7 07:13:29 2025 GMT
Subject: CN=64a7bb1c-c60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:6a:9a:03:9d:81:71:29:8f:70:94:5e:7b:
23:31:dd:9e:89:57:f3:95:e5:6b:bc:36:96:4c:48:
45:ce:5a:ac:e9:99:b9:60:0a:0b:57:59:16:3e:7b:
db:21:c3:07:d3:d8:db:5a:72:62:e5:a3:28:eb:a0:
77:fc:45:77:57:3b:c6:7e:01:bc:7b:cc:57:04:ab:
60:c0:36:dc:e7:6e:c4:c9:f2:cd:40:01:d4:2b:c5:
9c:72:25:4a:dd:80:15:07:25:de:d9:97:c5:21:bb:
de:95:f3:92:74:60:ba:7f:52:e5:3e:6b:24:16:b1:
ef:59:45:d1:3f:fc:a4:15:af:c9:50:74:3e:f5:9d:
58:9d:19:f1:ee:0e:9b:83:74:f6:86:0f:f3:a1:a6:
48:6e:df:0b:11:fa:37:1e:82:a7:e3:f1:7c:5f:19:
e6:e6:e8:c5:56:81:e5:0b:e6:fc:e8:ac:66:90:81:
c6:08:02:aa:c7:49:7c:db:78:b2:36:56:de:b4:29:
73:00:17:db:0d:aa:3a:52:22:d8:5c:8f:72:2c:0d:
25:2b:0c:4a:9d:77:74:9a:1d:53:23:2e:d4:79:06:
23:79:21:37:53:93:6f:19:9b:8d:3e:67:c5:0f:95:
5e:5b:6f:33:e9:8d:ac:f6:ff:67:09:71:5a:af:a5:
ec:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AE:A6:D7:08:FE:BE:A2:A0:48:88:1D:A1:E2:2A:EE:E4:B8:8F:68
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C7C60D5E1C9511EE963E4C384AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.213.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:26:93:d3:91:06:7a:0b:3d:4e:79:ae:46:27:a4:fd:fa:1e:
7e:01:09:d0:cf:c1:2b:a5:0c:6f:ed:9c:c1:3c:d6:df:b2:50:
74:dc:8e:00:44:4c:3c:8f:b7:f9:b5:ff:dd:aa:61:d0:30:dc:
40:ad:0a:7b:6f:4e:b5:f1:da:5e:be:04:7e:52:87:23:85:c6:
39:6a:10:0b:df:0a:f9:cd:ff:d1:c2:ab:cf:d9:67:2e:46:ea:
eb:05:a3:87:b6:65:b4:f7:b6:91:6b:b5:24:fa:7b:29:e5:85:
9f:ba:52:2e:1b:f0:63:07:4d:2c:a8:45:eb:e0:85:47:33:dc:
1c:06:16:db:be:b6:bb:65:d9:cc:f1:08:d5:47:03:14:c9:d8:
4f:6f:72:3d:1a:00:58:e6:72:ea:85:07:4f:7f:9b:a9:ce:a3:
be:ac:4f:c0:a1:1e:8b:00:51:b2:0a:b2:51:7b:82:92:39:d4:
00:f6:67:12:86:25:1f:e4:ed:87:4c:f6:31:63:dd:64:3b:0f:
60:bc:59:fa:5c:55:38:64:e8:3d:af:d4:bc:cf:60:c7:8e:5b:
78:40:75:45:cb:18:aa:61:b2:7f:d8:a9:2d:8e:fa:5a:dd:82:
7c:8b:24:81:34:30:11:d3:2c:80:a0:bc:e8:97:36:01:9c:d8:
c8:d5:6b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 07:08:20 2023 by rpki-client on console-ams.rpki-client.org