Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F2AF441209F411EEB39A0F2E4AD9E6FC.roa
File: F2AF441209F411EEB39A0F2E4AD9E6FC.roa (raw, json)
Hash identifier: mQ/Ebk8X2znFVpfclujNhMSpU8rwJ5PtHMkfqWML85Y=
Subject key identifier: 9D:46:94:A5:E4:7B:81:CA:7B:E8:68:6F:FA:EA:2B:1D:8E:6E:C5:8C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F47
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F2AF441209F411EEB39A0F2E4AD9E6FC.roa
Signing time: Tue 13 Jun 2023 14:16:54 +0000
ROA not before: Tue 13 Jun 2023 14:16:51 +0000
ROA not after: Thu 12 Jun 2025 14:16:51 +0000
asID: 61138
IP address blocks: 154.16.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3911 (0xf47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 13 14:16:51 2023 GMT
Not After : Jun 12 14:16:51 2025 GMT
Subject: CN=64887a56-cf23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:14:84:45:a1:bf:ad:5d:eb:7f:0c:e6:95:
35:f4:22:8c:7f:fc:3d:fe:d2:bd:3e:82:fe:95:b0:
c2:aa:d5:fe:36:d5:e4:f6:25:d1:97:9e:6f:3a:f6:
74:11:24:16:3f:e2:8b:6e:ea:3c:82:6a:08:27:b2:
a6:0d:21:e6:7a:4b:92:14:19:74:38:80:8b:39:ec:
5d:39:8e:6d:b0:15:ad:29:3f:f5:cd:2f:d4:6f:bf:
41:1d:29:64:90:c6:f3:13:18:b6:3b:e7:33:82:53:
0e:74:26:49:4b:6d:b2:92:eb:7a:8a:31:f2:6d:b4:
7c:88:04:c0:6e:3f:b0:e9:87:8b:eb:86:0b:21:f1:
46:63:34:e4:07:41:40:a3:3c:97:36:57:b1:31:04:
d4:db:98:a2:6c:13:ce:08:ee:b4:f2:90:ee:ef:6f:
74:88:18:c1:eb:05:b1:9e:bd:ab:60:d6:ad:da:7a:
e4:24:a1:d2:76:16:fe:78:8d:ec:52:e0:0d:26:3f:
62:fb:4b:c8:f0:c5:58:b3:ac:df:67:42:99:e2:1f:
f2:0c:bf:93:7e:15:8a:79:1f:84:58:49:7d:09:67:
0e:7f:28:12:28:7b:36:2d:f1:e9:23:b4:a1:af:fe:
e0:25:f5:69:17:65:21:96:bf:1b:99:bf:d9:f7:db:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:46:94:A5:E4:7B:81:CA:7B:E8:68:6F:FA:EA:2B:1D:8E:6E:C5:8C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F2AF441209F411EEB39A0F2E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.78.0/24
Signature Algorithm: sha256WithRSAEncryption
12:a2:83:da:f9:7e:82:94:70:b9:5d:9b:0e:ef:9c:94:1e:4a:
39:57:9e:fa:cd:95:9d:8b:42:d7:85:a8:85:bc:f6:8f:3f:66:
a6:87:ea:0f:c9:98:24:eb:d4:21:98:b7:e6:fb:c5:0f:e1:b8:
08:7a:83:1c:53:d4:71:ef:60:d1:f6:bc:e0:e5:99:eb:e3:f8:
0d:69:d7:21:7a:b5:41:6b:ce:a7:ae:cc:d1:a5:48:5a:ad:ed:
41:03:82:a7:05:0f:a1:44:f6:61:5c:fe:6c:02:0f:29:75:55:
cf:75:e0:e9:8d:c3:90:2c:06:4b:cd:a4:76:92:52:b5:15:3b:
14:00:1a:5c:a9:5c:53:58:c3:83:5f:d8:83:bc:80:7b:93:5d:
b3:a8:bf:73:d5:e5:e5:fc:56:bf:07:00:b5:ea:1d:af:c0:76:
cd:e5:ff:81:9c:05:f0:e1:01:95:3a:68:71:c0:b8:8a:b5:ca:
56:1f:4e:68:a3:cf:71:9c:98:3f:a3:4e:2f:1b:0b:29:8c:91:
5f:02:5b:49:12:2a:77:49:5e:0c:50:86:89:a1:59:07:dc:44:
ec:c0:5b:19:ac:a2:a4:e2:2d:b4:68:49:18:dd:0a:12:cf:80:
79:05:88:27:c3:3a:f5:21:90:8e:63:61:0f:67:b0:fd:4e:60:
8f:91:d5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-ams.rpki-client.org