Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/66F65276AEF411EEABA783A2775412E6.roa
File: 66F65276AEF411EEABA783A2775412E6.roa (raw, json)
Hash identifier: tzuoIwkrf+VGjzwrtsi3g15VSvAYdnP52MKWUoEwIOc=
Subject key identifier: ED:7A:43:6C:B8:0B:AF:B3:25:83:63:63:5B:3B:A8:C3:3B:A1:22:72
Certificate issuer: /CN=F3652C3AAF/serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
Certificate serial: 1E
Authority key identifier: 3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/66F65276AEF411EEABA783A2775412E6.roa
Signing time: Tue 09 Jan 2024 13:38:42 +0000
ROA not before: Tue 09 Jan 2024 13:38:38 +0000
ROA not after: Sun 31 Dec 2028 13:38:38 +0000
asID: 37523
IP address blocks: 154.65.64.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 11 Jan 2024 06:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3652C3AAF/serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
Validity
Not Before: Jan 9 13:38:38 2024 GMT
Not After : Dec 31 13:38:38 2028 GMT
Subject: CN=659d4c62-ece2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:4c:bd:41:93:99:70:3b:e3:e9:fa:c6:92:
6a:9a:77:7c:5f:99:27:ba:dc:6f:08:a3:52:ce:f9:
06:90:9c:9e:30:90:cc:78:d4:64:f8:b6:32:62:bc:
7f:44:b9:3d:87:2a:f6:f4:1f:d6:cf:10:dd:a6:f7:
47:f3:5e:20:ce:1e:b1:ce:22:66:2e:f9:f0:b4:3f:
4a:00:c6:d4:05:eb:42:10:2a:11:9e:d2:09:9b:8e:
cc:ce:b4:53:cd:98:85:b2:a0:4c:99:60:f2:ac:55:
cd:2a:7c:0a:d0:86:28:e2:57:73:da:27:56:1d:3d:
97:36:26:5b:ab:28:6d:ad:18:e6:50:48:a9:b9:3b:
b5:88:56:a0:c4:6d:91:5d:be:d8:86:07:a6:7c:53:
f0:1b:a6:fd:ab:8a:f6:de:25:2c:05:6d:39:3d:9f:
fd:57:9b:be:3b:e1:34:59:42:44:6e:13:1f:89:23:
12:97:c0:0b:89:0d:f2:63:9d:73:58:d1:8c:75:09:
f4:01:bb:d2:a7:40:07:08:31:27:dc:ca:2e:af:ef:
36:40:96:b8:be:67:d5:91:1d:cc:2f:21:83:ec:7f:
f4:30:87:fe:08:35:d1:45:fa:61:ea:99:bf:00:dd:
b3:ae:44:7a:97:14:74:b8:8e:23:45:2d:95:a0:d0:
dd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7A:43:6C:B8:0B:AF:B3:25:83:63:63:5B:3B:A8:C3:3B:A1:22:72
X509v3 Authority Key Identifier:
keyid:3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/66F65276AEF411EEABA783A2775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.65.64.0/23
Signature Algorithm: sha256WithRSAEncryption
93:79:38:0d:0a:e0:9b:ad:18:fc:83:e6:8a:e1:f7:26:a0:ad:
ba:7d:1b:4b:01:7d:c1:91:4f:f1:1a:60:1a:c5:ba:41:d0:61:
6e:7f:b8:19:61:ce:dc:48:36:4a:af:12:55:07:b8:21:86:07:
f3:84:18:96:c8:4c:cc:36:59:7c:34:f0:41:f6:14:fc:41:8b:
e6:54:fc:14:e3:0c:65:64:82:0e:89:52:83:18:b2:c4:d1:7d:
b5:47:1f:41:0a:98:21:76:59:7f:1f:3d:9e:55:f8:e3:e7:4c:
30:80:d6:82:30:71:7d:e1:fc:f2:77:70:14:ab:c5:c2:9a:f2:
18:ad:72:2a:ef:c6:83:07:eb:46:4a:2b:1b:12:32:fc:b1:3b:
33:3a:7c:0e:86:bc:05:67:09:46:d7:d0:17:1b:9b:c3:6e:31:
bd:38:47:d1:e0:b0:e3:91:3b:74:b2:14:7d:00:4f:7a:bf:2a:
0e:2a:d8:3d:0f:8f:78:f0:01:f0:64:03:63:6c:19:88:a5:e5:
ea:0c:ac:3f:02:a3:86:04:43:97:05:76:35:4c:49:db:c1:45:
d2:c2:8f:6b:4f:53:39:36:a7:da:de:6d:4c:c3:a5:bd:e1:2a:
60:4d:38:77:24:20:0e:7f:73:6b:5f:7a:60:b7:e0:5f:95:35:
dd:58:1c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org