Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/05411D50B8F911ED978CF3F6F1222468.roa
File: 05411D50B8F911ED978CF3F6F1222468.roa (raw, json)
Hash identifier: 0Gzn35sBAt8qs/li24bebaVlDSKiU3BP5T2HgoTN4DA=
Subject key identifier: D7:98:30:CE:AB:BE:6C:B7:BC:C7:F4:22:B5:61:30:AE:16:8B:F4:15
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0CB6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/05411D50B8F911ED978CF3F6F1222468.roa
Signing time: Thu 02 Mar 2023 12:51:59 +0000
ROA not before: Thu 02 Mar 2023 12:51:56 +0000
ROA not after: Sat 01 Mar 2025 12:51:56 +0000
asID: 61317
IP address blocks: 154.16.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 18:18:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3254 (0xcb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 2 12:51:56 2023 GMT
Not After : Mar 1 12:51:56 2025 GMT
Subject: CN=64009bef-0543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:e9:88:72:b6:d5:db:8a:3b:6b:00:be:aa:
99:50:34:04:94:ac:2d:85:37:71:fb:60:62:08:8f:
c1:2f:b6:bb:6d:4c:77:d0:a8:a7:d6:ff:1d:34:6b:
7c:af:97:05:e4:4f:81:eb:23:77:07:cd:1f:43:a5:
1d:ff:ea:f4:ec:db:c5:e0:89:f4:51:b7:c1:d4:3d:
a0:b5:73:83:bd:49:da:0a:32:de:c9:2f:85:f9:60:
b7:a9:be:98:39:eb:86:7f:17:21:d2:44:0d:fe:ad:
1d:4c:de:4f:ca:9d:8c:09:05:e4:82:d5:c5:18:3c:
e5:63:7c:26:ee:67:7a:ef:64:47:36:e7:f4:e2:c8:
d0:97:83:dc:8a:44:4d:62:0e:59:3b:4e:68:c1:f5:
e6:85:f8:68:11:df:e6:4c:3f:ad:70:10:18:f6:81:
81:99:e1:6f:04:78:7e:78:19:d1:d0:5b:87:a6:e7:
41:a4:75:40:19:d5:9c:63:1c:46:eb:ea:8a:09:c7:
81:74:1d:5c:76:61:a9:0e:8a:7e:a4:5b:91:e4:38:
8a:36:a5:3c:bf:05:81:9b:d3:52:63:57:61:19:28:
5c:39:63:93:cb:f6:c3:c6:96:38:6b:ff:25:59:40:
d3:0b:5f:9c:c4:ac:ec:5a:81:fe:0d:e7:c3:c9:e7:
af:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:98:30:CE:AB:BE:6C:B7:BC:C7:F4:22:B5:61:30:AE:16:8B:F4:15
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/05411D50B8F911ED978CF3F6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.234.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f1:99:01:78:ae:10:84:bf:39:2c:6d:b2:db:5a:c9:be:23:
d9:9d:9e:6d:a7:b0:4b:69:29:1c:cf:11:10:83:5f:34:3e:7c:
7f:f3:52:82:ae:c9:82:52:71:29:98:e1:07:4d:96:bd:ee:83:
07:de:f9:5c:2a:02:38:73:a9:de:aa:73:cf:90:e8:51:0e:b4:
c9:41:58:94:d2:e7:ff:03:65:85:58:2e:96:0a:29:7d:06:b2:
df:c0:87:c8:3d:fb:1f:ed:68:cb:d7:cc:0b:d1:62:da:20:9f:
09:79:8f:42:ba:d4:f1:3a:aa:05:79:d3:24:1c:59:08:02:82:
39:91:f8:c2:16:13:4c:da:36:ab:7e:18:af:5f:64:26:1a:a5:
2d:62:5d:66:7d:ca:f6:39:6c:53:ba:dc:47:ff:8f:84:19:b5:
db:71:37:b7:ab:5c:54:c0:12:dd:95:c8:70:d1:38:0c:16:9e:
e8:a8:b7:fa:dd:d5:84:29:bc:cd:da:1a:6e:42:77:09:9b:ba:
05:35:77:ef:f8:23:e8:9d:6d:d4:31:f8:5e:ea:2a:95:87:08:
94:d8:fd:64:51:01:25:4a:57:76:3a:b4:f9:ee:77:1a:12:5b:
e2:23:52:80:d9:48:85:58:66:73:e2:53:c0:d8:1c:1d:57:23:
e6:60:71:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 21:32:34 2024 by rpki-client on console-ams.rpki-client.org