Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7E6DBE82D7B011EE95D9A788775412E6.roa
File: 7E6DBE82D7B011EE95D9A788775412E6.roa (raw, json)
Hash identifier: vmbFcyFWpBxANJIyorUHqvXhwqva3j8xN7GsgHUfD8k=
Subject key identifier: EF:08:C0:1B:49:35:1C:87:C6:0C:66:19:5F:4C:CE:63:C1:E5:74:91
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 152E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7E6DBE82D7B011EE95D9A788775412E6.roa
Signing time: Fri 01 Mar 2024 09:45:53 +0000
ROA not before: Fri 01 Mar 2024 09:45:50 +0000
ROA not after: Mon 02 Mar 2026 09:45:50 +0000
asID: 834
IP address blocks: 154.16.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 17:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5422 (0x152e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 1 09:45:50 2024 GMT
Not After : Mar 2 09:45:50 2026 GMT
Subject: CN=65e1a3d1-a76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:13:f5:36:f3:af:41:70:2a:5e:5a:22:23:0c:
73:49:77:4d:19:97:5a:a7:78:05:0f:ce:fb:bf:28:
3f:d5:74:49:5f:31:39:59:92:96:82:1e:fc:af:cb:
12:87:cd:64:7c:62:89:01:85:95:24:c6:75:a6:ce:
7e:19:f2:d8:b3:71:ea:4a:1f:4d:77:9b:96:74:34:
eb:c1:e5:9a:39:01:c8:40:a5:05:db:54:82:2a:8e:
20:d7:c7:da:d3:3a:6b:8a:81:10:8b:bd:ea:67:64:
3e:52:cd:8e:1a:5c:48:72:e6:54:27:e9:65:45:09:
a3:3e:42:a9:ea:0a:d6:18:1d:ce:9d:c5:f9:01:39:
0a:ec:a8:f6:ff:8c:52:57:56:56:ef:78:ed:24:df:
26:cc:6a:7a:48:1c:52:39:5a:9b:04:93:ed:26:f6:
08:2b:16:40:6b:36:9a:91:87:a1:d6:61:5b:a2:7a:
67:79:c1:1f:d2:87:43:8c:47:09:91:56:39:d0:cd:
02:a1:92:47:8f:6c:f8:96:0e:1d:79:45:21:37:12:
36:46:c8:80:23:64:93:5f:16:04:7f:90:8a:57:d7:
4f:89:b2:4d:a0:42:e1:9a:dd:64:87:83:3b:a2:4d:
0b:30:8f:fe:94:7e:e7:00:52:73:c7:7f:07:a8:15:
3f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:08:C0:1B:49:35:1C:87:C6:0C:66:19:5F:4C:CE:63:C1:E5:74:91
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7E6DBE82D7B011EE95D9A788775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.181.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e7:34:cc:dc:92:91:7f:0e:68:cf:54:c8:22:b3:b6:2e:69:
b1:03:e0:74:4b:76:1c:97:83:e4:ba:68:bb:b5:74:54:cf:20:
b1:3d:86:eb:70:53:98:85:d0:2d:10:b9:eb:76:37:65:22:e3:
a4:b9:e8:b9:8e:69:51:cb:b5:fb:54:0e:00:5e:05:4e:7d:de:
6d:ce:a8:5e:3a:f0:2c:67:cf:71:bb:d0:0d:1d:b7:5d:e2:62:
0a:f8:1b:81:88:ba:be:39:91:2b:46:ba:d5:dd:d4:3d:8f:54:
f1:c1:5c:d2:32:fa:0b:93:a8:42:7f:47:50:a3:a7:ec:a6:f5:
ca:1f:96:ae:b2:21:56:97:91:02:60:02:3d:06:63:4b:15:ff:
15:53:89:7a:b3:fa:c1:3f:db:12:a7:8d:79:76:31:f6:d7:90:
91:d4:21:c1:d4:3f:8b:59:1f:87:f8:67:05:6f:00:ed:59:ac:
6a:53:47:cf:3d:ec:a1:d3:e9:95:e9:e9:d2:d4:72:9f:bb:c4:
59:80:99:c8:83:c5:43:db:01:bf:cf:82:25:68:8f:c2:c2:60:
d1:03:2f:4d:b0:00:a2:91:82:73:19:c9:cc:77:52:ae:e3:8e:
92:a0:b7:96:9b:77:18:83:27:74:e6:31:81:1c:ee:13:b0:9c:
91:f5:ae:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 19:49:52 2024 by rpki-client on console-ams.rpki-client.org