Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D58D65FA7B2E11EBBFD7AD20F8AEA228.roa
File: D58D65FA7B2E11EBBFD7AD20F8AEA228.roa (raw, json)
Hash identifier: YtxPiHWNCzsCJstviA5GJIIJOZecfLWqyhCuz7YS9XE=
Subject key identifier: DE:0B:EC:AF:49:2A:B1:80:A9:62:29:30:07:97:3A:56:DE:A0:BC:86
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 04CB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D58D65FA7B2E11EBBFD7AD20F8AEA228.roa
Signing time: Tue 02 Mar 2021 08:11:05 +0000
ROA not before: Tue 02 Mar 2021 08:10:58 +0000
ROA not after: Sun 02 Mar 2025 08:10:58 +0000
asID: 24875
IP address blocks: 154.16.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1227 (0x4cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 2 08:10:58 2021 GMT
Not After : Mar 2 08:10:58 2025 GMT
Subject: CN=603df319-d987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:b0:25:77:cd:9b:0d:16:7a:b6:57:12:2b:
ec:d5:c2:1e:50:ef:ed:8a:f1:c8:7e:75:b2:05:2a:
ff:cb:ce:0c:44:17:4d:78:69:05:2d:fd:b1:42:2c:
66:4e:6f:7f:28:44:e7:21:c1:b4:df:4e:1a:17:39:
92:28:fd:36:71:07:a3:bb:3d:56:74:a5:ae:fa:e4:
1f:f1:57:45:39:88:b9:65:0f:13:8a:65:e8:30:3b:
dc:98:30:16:aa:51:3f:57:0e:f5:ad:37:ac:94:11:
c9:e6:23:26:56:e7:83:db:75:be:08:d1:d0:f0:4a:
88:f7:09:bf:49:c8:41:75:11:b8:79:41:b8:36:83:
96:d3:ac:26:29:38:3c:82:53:48:6b:b4:84:be:9c:
f9:64:0f:e2:28:04:ae:d6:c7:18:2e:49:b2:e8:cf:
12:0f:b9:ec:00:fe:f7:16:3e:49:64:23:23:98:5f:
49:dd:be:51:e7:20:ae:71:99:17:d5:34:4b:f6:73:
a5:60:7a:14:5d:91:1c:cb:e8:4b:f0:ec:0f:0c:6a:
58:64:8c:d8:cf:03:e8:b5:e9:5d:84:80:0a:cb:44:
dd:85:ab:58:7e:c6:25:b2:71:09:ee:99:99:48:26:
23:70:00:04:5a:cd:77:91:1e:82:f6:3d:75:75:08:
a5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0B:EC:AF:49:2A:B1:80:A9:62:29:30:07:97:3A:56:DE:A0:BC:86
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D58D65FA7B2E11EBBFD7AD20F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.180.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1b:9a:2c:28:1f:e4:94:4b:0e:ed:b4:0d:ad:17:72:54:f0:
68:10:af:ef:bc:78:70:d7:37:55:1f:73:8e:bf:9c:64:a2:64:
a8:4a:eb:57:26:f0:74:99:c0:dd:60:f5:4f:4d:bd:71:b0:0f:
ab:40:df:d5:6c:a9:c2:1e:d4:5a:04:5e:7a:de:ff:c2:3b:62:
40:83:cf:3b:c8:77:d4:0e:d1:24:84:7c:6d:18:78:c3:8a:ff:
03:3e:d7:fa:41:55:f2:54:9d:3c:38:11:06:96:40:d4:ca:da:
69:77:5a:1d:fb:a1:74:9f:39:95:5d:80:a8:f9:f2:01:dd:e9:
c1:e1:99:f1:e7:86:b7:c8:8a:15:36:a7:bc:f5:0c:b3:4e:cd:
51:c3:2f:4a:bc:3c:27:b7:83:07:b1:21:15:6a:ae:19:49:c4:
36:6b:2c:e1:f4:64:ea:4c:92:a2:1d:55:ed:b6:98:89:a3:da:
0e:b0:fb:92:a7:6a:cc:7c:6e:13:8b:80:35:f7:69:1f:7a:d0:
6c:bf:bd:59:57:95:5a:56:11:4e:36:b1:e5:84:b0:42:e9:f4:
b7:0c:2e:a7:fd:96:68:f8:a1:72:8a:2b:d2:19:12:09:2d:77:
c2:be:18:66:7e:ae:12:d0:2f:4a:7e:20:ff:10:66:dd:6a:62:
90:2f:08:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org