Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/6279592CC99E11EEA774156B775412E6.roa
File: 6279592CC99E11EEA774156B775412E6.roa (raw, json)
Hash identifier: xka9gdRn+YgDdCCk9AaWA/aaupBzyrxzGdBzkcytBVE=
Subject key identifier: 73:A8:58:4B:F1:1C:E4:60:17:D7:6C:65:C7:5F:16:8D:07:6C:65:80
Certificate issuer: /CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Certificate serial: 0595
Authority key identifier: 3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/6279592CC99E11EEA774156B775412E6.roa
Signing time: Mon 12 Feb 2024 12:00:59 +0000
ROA not before: Mon 12 Feb 2024 12:00:55 +0000
ROA not after: Wed 12 Feb 2048 12:00:55 +0000
asID: 37098
IP address blocks: 154.66.120.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 13:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1429 (0x595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Validity
Not Before: Feb 12 12:00:55 2024 GMT
Not After : Feb 12 12:00:55 2048 GMT
Subject: CN=65ca087b-db23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:62:6c:dc:de:6b:87:b6:15:53:b4:2c:17:
55:e4:44:72:85:29:d0:90:32:32:7e:73:7f:33:49:
77:f7:3e:d1:7d:d8:0b:b7:ff:d4:77:cb:2d:4b:dd:
8f:1e:cf:01:36:83:63:9d:db:ab:2d:f5:12:dc:a0:
22:26:df:74:b4:ec:49:cf:be:0d:42:d4:7a:cc:01:
f9:06:98:12:dc:09:30:f7:56:49:b3:6b:15:88:be:
bf:1c:51:37:2d:ea:32:74:74:20:38:fd:f3:7a:2e:
cc:42:11:50:86:dc:c0:dd:a2:a2:13:0c:43:aa:b9:
dd:cb:5c:6e:5e:1f:a9:1b:40:bf:f7:e7:27:76:a4:
5f:f1:07:35:2c:30:cc:8e:cf:72:8d:8d:ae:10:cb:
2a:24:eb:e2:c6:10:a4:5f:0d:6d:7e:4f:62:4e:47:
e4:ee:6e:4c:8a:17:4b:07:d9:c9:a3:de:e3:bb:a4:
72:32:e1:1b:e1:5c:e3:17:aa:2a:c1:48:91:44:f1:
16:29:7e:b6:5e:55:41:5b:dc:32:7e:29:65:31:2b:
d1:88:d3:f6:49:68:01:74:f9:a4:b2:cc:ad:60:ea:
80:43:ea:84:fe:f1:94:19:1c:e4:c5:74:34:81:2a:
5a:49:25:ae:f2:5c:23:d5:2b:35:11:c4:88:26:ae:
95:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A8:58:4B:F1:1C:E4:60:17:D7:6C:65:C7:5F:16:8D:07:6C:65:80
X509v3 Authority Key Identifier:
keyid:3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/6279592CC99E11EEA774156B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.66.120.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:ba:80:af:be:e7:b2:72:2b:e5:89:c4:27:a2:7b:ff:84:51:
d7:37:36:58:fa:a1:54:aa:ca:fb:db:da:76:d5:09:4b:47:f1:
bc:eb:8e:35:d2:0e:e7:96:f0:c0:29:2f:0d:d5:ff:90:2a:20:
8e:95:05:e9:24:74:2c:ed:3d:51:a1:82:b0:00:16:3d:3d:de:
c6:86:ba:4a:98:43:b1:eb:6d:ac:4b:53:19:03:04:19:a5:60:
32:60:ee:2d:69:73:17:d0:07:f7:86:36:15:1c:8c:71:90:bb:
70:da:58:95:77:db:ac:7c:cc:d9:21:b0:65:02:ff:51:c9:84:
50:8a:fe:cb:10:8e:4d:58:5a:12:44:dd:70:a5:53:c2:6d:33:
60:d1:59:5d:20:4d:90:bc:7b:e7:43:1a:cc:63:91:80:1c:eb:
5d:90:ea:cb:36:f1:29:8f:67:50:c4:2a:66:50:d2:cc:12:ae:
04:95:94:64:02:e6:d3:86:1d:26:a0:99:9b:1c:87:ff:13:20:
ca:eb:1d:31:1d:1b:c9:67:45:69:73:eb:67:ea:75:82:eb:15:
d8:20:d9:73:76:29:a2:4e:42:13:47:46:0e:49:5a:73:b1:7d:
29:50:78:b9:f4:d8:21:74:72:9d:d0:7a:13:3b:15:6b:6f:1e:
82:2e:5f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 16:48:13 2024 by rpki-client on console-ams.rpki-client.org