Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F00B53048B2511EBB5A6ED7CF8AEA228.roa
File: F00B53048B2511EBB5A6ED7CF8AEA228.roa (raw, json)
Hash identifier: 6GUJsgXSH6pqgyStNX8q3kDxcQL6urFfBT8mNOJmu/4=
Subject key identifier: B3:A0:8C:AF:46:75:15:DC:B1:37:B0:AF:6D:6F:C7:A5:7E:3F:77:F0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 04E5
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F00B53048B2511EBB5A6ED7CF8AEA228.roa
Signing time: Mon 22 Mar 2021 15:47:43 +0000
ROA not before: Mon 22 Mar 2021 15:47:36 +0000
ROA not after: Tue 11 Mar 2025 15:47:36 +0000
asID: 13768
IP address blocks: 154.127.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1253 (0x4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 22 15:47:36 2021 GMT
Not After : Mar 11 15:47:36 2025 GMT
Subject: CN=6058bc1e-3fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:71:3b:a9:43:2b:6e:14:fe:58:65:9f:e0:
9a:ea:6e:49:93:d3:38:e8:a7:61:98:96:85:0d:7d:
81:f1:52:ce:dc:09:96:31:d4:ca:f6:e4:56:cd:3a:
d1:ce:c3:0b:ea:9a:25:a5:25:02:62:ff:db:66:a4:
4f:44:a7:2e:c9:5a:4a:94:54:29:95:1d:b4:7e:e7:
1e:a4:91:ce:bf:e8:a5:89:3a:45:07:0f:89:ac:81:
c6:d1:c3:e1:f6:ad:6b:63:f1:d8:d2:5c:2b:77:74:
d8:6d:f3:89:6c:40:82:ff:94:ea:88:20:98:0d:20:
ac:d6:3f:50:45:11:48:63:45:ef:c3:c4:b3:df:7c:
ab:f3:4c:cf:47:3f:25:55:71:1b:9d:3d:d2:8a:0e:
99:3d:46:df:e1:24:9e:ba:48:8b:28:80:d7:3c:6d:
32:c2:40:cb:3a:4e:53:f4:da:6b:46:f5:ce:cd:24:
8e:55:0e:5f:fb:79:5a:85:0d:5c:8a:c8:80:6f:5e:
9b:4a:99:46:32:ce:85:b1:f2:63:b6:43:ef:32:63:
df:44:20:f5:0a:48:e7:a1:1d:85:09:a2:39:a1:fa:
47:57:68:7d:97:2a:3a:05:11:c4:6f:64:3e:24:a9:
3a:ae:c1:9d:c0:3a:5f:2b:4f:03:c0:34:38:47:d4:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A0:8C:AF:46:75:15:DC:B1:37:B0:AF:6D:6F:C7:A5:7E:3F:77:F0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F00B53048B2511EBB5A6ED7CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.55.0/24
Signature Algorithm: sha256WithRSAEncryption
73:47:97:39:33:1f:f2:79:f8:4a:77:18:76:e8:59:99:62:68:
bd:1e:c6:7e:3f:50:7c:3b:a4:e0:28:e0:f7:dc:26:ed:23:61:
58:dc:14:7c:59:67:0e:af:4a:e0:c9:af:4d:60:ef:e5:5d:24:
02:0a:ed:d5:16:53:75:c8:1d:e6:4b:80:92:47:5d:61:44:80:
cd:0c:7f:25:3f:72:d8:b7:02:7e:e1:a2:81:32:f6:f2:1b:37:
3e:f4:9c:47:c9:de:51:65:6a:3f:ed:84:bc:ce:6a:53:87:a6:
3e:49:17:4d:01:ec:7c:86:1f:f6:d8:3e:ff:26:7e:78:d4:bc:
cc:ba:73:eb:8e:53:70:c2:5a:6f:46:2f:21:60:7d:2b:aa:7d:
a9:0c:de:e4:b5:2e:46:46:44:e4:03:cc:13:ab:f0:f6:f6:39:
0f:ae:20:cd:7f:94:fb:52:ae:af:96:3c:ba:50:0c:ce:20:e1:
73:0b:d3:fc:3e:db:16:dd:a9:e0:67:b8:b7:83:cb:e9:52:6c:
8c:01:03:32:d9:b7:f1:e3:1c:e4:6d:d4:1a:c8:39:c8:39:58:
18:d4:69:9b:24:ce:5f:b9:6b:4a:32:d0:24:a1:cd:a5:88:5a:
95:cf:28:4d:4c:50:22:79:06:ee:78:57:09:06:e9:6c:e4:d4:
30:8d:ed:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org