Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/17ACB37A223311EEA88E7E554AD9E6FC.roa
File: 17ACB37A223311EEA88E7E554AD9E6FC.roa (raw, json)
Hash identifier: ktJ3KX9tZfLDsfJxebdfWu9h8+v4TVONPPvHT4/KOgI=
Subject key identifier: C6:31:39:54:C2:17:A4:EF:B4:A1:D9:27:71:33:01:13:9B:B2:82:0A
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: 87
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/17ACB37A223311EEA88E7E554AD9E6FC.roa
Signing time: Fri 14 Jul 2023 10:42:13 +0000
ROA not before: Fri 14 Jul 2023 10:42:09 +0000
ROA not after: Sun 14 Dec 2025 10:42:09 +0000
asID: 15964
IP address blocks: 154.72.128.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Jul 14 10:42:09 2023 GMT
Not After : Dec 14 10:42:09 2025 GMT
Subject: CN=64b12685-160b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:59:00:ca:bf:9b:3e:b3:7c:46:f6:b1:08:ae:
f6:e6:63:ee:01:f1:a9:7b:54:0e:38:77:a9:32:95:
6c:4c:73:77:47:e0:d6:4c:e3:67:2d:79:f5:0e:1e:
07:ef:8d:a6:d3:5d:87:6f:31:ee:2e:2f:ed:f3:01:
ce:bd:17:16:89:2a:e5:15:7c:72:c5:c8:39:30:41:
c7:1f:68:bb:06:20:8e:96:0a:23:0a:54:ae:9e:aa:
6d:1f:6d:86:33:cc:2e:53:3f:a3:dc:a2:e3:f3:09:
19:01:d0:c5:f7:1c:80:2a:23:c4:28:4e:3c:8a:f9:
40:23:5a:e4:d2:ab:09:49:49:ac:41:82:1a:7a:dc:
af:74:8c:92:4e:68:23:ae:1f:22:4d:03:2f:3f:bb:
c7:ca:3a:ea:7c:b4:f6:bb:a8:0c:e2:30:45:4f:e9:
7b:c5:9e:b2:48:18:3a:61:97:3c:fc:d6:6a:4b:2e:
4b:55:4a:51:a2:15:c8:8d:67:8f:83:0d:80:86:bc:
a7:6e:da:e4:2f:af:8f:eb:46:0c:4d:0d:b5:52:69:
da:3b:fa:51:fb:ac:72:04:a5:de:a3:07:58:52:52:
1b:05:d8:10:94:4b:ea:8d:54:7b:31:fc:ab:ab:c5:
40:19:29:fc:fb:0c:e3:11:e3:3a:61:ae:17:77:b8:
3e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:31:39:54:C2:17:A4:EF:B4:A1:D9:27:71:33:01:13:9B:B2:82:0A
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/17ACB37A223311EEA88E7E554AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.128.0/18
Signature Algorithm: sha256WithRSAEncryption
b4:b6:08:cd:cc:f8:a2:d6:37:3f:5c:8e:00:b7:48:87:25:ae:
8c:1a:93:47:78:70:ac:82:e1:18:ce:23:85:a9:b0:bf:8e:eb:
43:7b:56:28:78:ef:c4:c8:fd:75:12:3d:6d:a2:db:03:e7:9d:
d6:11:cc:b1:52:71:56:72:d0:11:da:3a:0b:32:e9:60:6c:e6:
05:d4:57:da:17:0c:a3:e7:ee:1d:19:d9:89:59:d0:81:3b:28:
11:e0:4c:38:0f:38:48:48:f4:4e:9f:1e:6f:79:7e:04:ae:09:
fe:4f:78:3a:81:85:40:2d:c9:75:25:df:d9:60:ae:7d:80:c0:
a2:bd:d9:d3:7a:70:e9:8c:0f:da:66:9d:9a:41:57:e7:c4:1c:
79:e5:52:ea:79:ca:b7:da:d7:3a:d6:d3:26:20:7e:87:a4:82:
9b:3b:8e:f4:03:bf:45:59:03:d6:ef:92:44:59:41:68:20:b3:
e3:4d:b0:38:a6:62:71:b1:0d:20:a4:92:1d:2b:f0:8c:ee:b6:
62:1b:a5:63:63:35:42:29:c5:6d:39:62:5f:27:c5:0a:d8:55:
da:59:a0:6a:a1:bb:58:0c:4c:a7:40:bc:a2:d8:13:05:ff:e7:
45:5f:db:5c:c8:6f:86:0b:44:31:b8:40:eb:69:8e:1a:c3:0b:
9a:b1:dc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 08:35:49 2023 by rpki-client on console-ams.rpki-client.org