Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/01482184045E11EEB16C785D4AD9E6FC.roa
File: 01482184045E11EEB16C785D4AD9E6FC.roa (raw, json)
Hash identifier: ZGTfPk3Uq3zC6TzBLrypf4JxVb/aMSzt+GYbXhQ3/VY=
Subject key identifier: 95:5E:ED:33:1D:E2:15:9F:DF:4B:13:6E:0C:C0:7C:EC:11:B6:20:2D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0EC9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/01482184045E11EEB16C785D4AD9E6FC.roa
Signing time: Tue 06 Jun 2023 11:33:49 +0000
ROA not before: Tue 06 Jun 2023 11:33:45 +0000
ROA not after: Tue 10 Jun 2025 11:33:45 +0000
asID: 6939
IP address blocks: 154.16.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Sep 2023 11:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3785 (0xec9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 6 11:33:45 2023 GMT
Not After : Jun 10 11:33:45 2025 GMT
Subject: CN=647f199d-6447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:30:94:3c:20:0f:82:9b:e4:60:f4:21:97:
a1:da:e6:a5:01:22:8e:13:3d:ac:c1:d8:cc:98:92:
61:7d:78:f7:2d:d9:b7:84:df:d6:87:c9:37:40:bd:
db:ac:78:bb:5d:f2:8d:4c:cc:b2:aa:9b:b3:c1:86:
59:aa:fa:18:d6:30:77:b3:a9:90:a9:1d:38:bb:5e:
b7:eb:b6:8c:c9:b4:56:eb:fc:e3:17:5e:06:95:97:
c0:bf:93:d4:fd:53:16:6b:bd:87:25:03:aa:2e:ba:
8c:7b:c7:2f:9e:b9:a4:8a:7c:99:6b:b7:b8:a9:ed:
ba:56:ab:4f:e8:a3:34:10:3f:03:14:44:e1:03:b5:
7f:c0:4b:c9:25:47:70:7c:c7:d5:7d:24:d7:96:05:
57:b5:b1:3f:bc:bf:3f:26:2c:d9:a1:68:aa:1b:8c:
2d:a3:f7:76:0f:27:7c:e1:de:a3:e9:f3:8b:59:d7:
71:d7:99:a6:c1:91:33:ba:a0:f3:57:cb:10:c8:28:
0e:58:27:00:b5:2b:b3:d1:48:2c:48:cf:28:fc:19:
c3:67:ab:3c:51:fc:ab:49:72:8e:d0:9f:15:21:55:
e8:14:d2:ea:15:8f:12:f3:77:ff:fd:a0:06:11:3d:
25:76:ad:3a:01:05:54:85:4b:c7:77:2f:d8:03:53:
93:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5E:ED:33:1D:E2:15:9F:DF:4B:13:6E:0C:C0:7C:EC:11:B6:20:2D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/01482184045E11EEB16C785D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.231.0/24
Signature Algorithm: sha256WithRSAEncryption
22:12:25:ea:33:c9:00:56:fa:e9:38:c9:34:93:9e:01:8d:83:
02:e2:08:a3:f8:2a:da:c0:c6:64:e5:15:a3:c6:c0:8e:c1:bb:
18:25:23:ca:14:b0:6c:d6:ce:ef:8f:b0:16:e1:6e:f0:af:e4:
89:58:24:14:69:45:0e:4a:63:93:ec:cc:6e:93:4a:a1:72:9b:
74:4c:36:f0:f9:d1:ef:49:4d:48:b7:98:e0:12:b2:a4:0a:06:
50:f4:8f:be:3b:a6:bb:1e:19:c0:02:74:b1:b0:59:e2:89:ad:
a5:77:75:8d:13:bf:7a:bf:ed:d0:ba:98:5e:cc:84:b1:13:60:
27:25:46:ea:c1:83:3d:be:48:a6:f9:bf:2d:86:d5:49:df:46:
f1:ed:5e:4e:30:e9:5f:2f:25:ea:a1:4a:a4:18:84:0c:1f:ac:
c1:6c:62:e9:56:27:07:fb:68:cf:80:cb:f4:1a:79:39:e4:1c:
20:be:d4:11:2f:53:cf:af:c6:a5:e2:58:34:2d:ed:52:73:28:
60:c3:6d:d9:bc:d0:63:4b:9d:66:40:5a:f1:43:c1:82:77:e0:
4e:50:05:12:34:f6:ac:ed:4b:96:7a:2d:b0:23:ac:f5:2a:72:
80:fe:21:bf:62:3a:4b:da:59:33:1a:fd:ee:c8:e0:6e:54:c0:
74:83:34:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:10 2024 by rpki-client on console-fra.rpki-client.org