Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/04A579E4B43B11ED893E62A3F1222468.roa
File: 04A579E4B43B11ED893E62A3F1222468.roa (raw, json)
Hash identifier: dbOLbmuDlmoebyZ+8UueluBuJ6jBGSJYCo08Qbb5X2A=
Subject key identifier: E9:60:11:02:F7:CD:BA:A7:85:84:D8:E4:E3:32:37:E3:2F:EC:45:76
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0BFD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/04A579E4B43B11ED893E62A3F1222468.roa
Signing time: Fri 24 Feb 2023 12:01:49 +0000
ROA not before: Fri 24 Feb 2023 12:01:46 +0000
ROA not after: Sat 22 Feb 2025 12:01:46 +0000
asID: 61317
IP address blocks: 154.16.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 14:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3069 (0xbfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 24 12:01:46 2023 GMT
Not After : Feb 22 12:01:46 2025 GMT
Subject: CN=63f8a72d-a143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:7d:ca:bf:29:fe:d3:be:3c:03:d1:55:c1:
93:42:c2:91:27:3d:e7:98:3d:74:2f:5b:f4:e4:7a:
35:04:18:02:91:14:18:82:bb:2c:57:8c:0b:17:76:
c3:bf:ff:20:5b:16:fc:63:90:9c:6a:6c:3c:40:ad:
7e:ff:8a:37:25:98:2d:4b:6a:87:16:ef:ee:a3:2b:
76:c3:84:01:ca:f1:fc:97:31:86:49:43:54:df:4f:
32:9f:e4:d4:35:e8:f6:1a:2e:27:93:c6:73:a0:c3:
d6:f5:7d:e9:0a:f2:7b:41:fc:3a:d8:9a:2f:ec:84:
49:50:fd:b0:0d:16:61:c5:80:e0:50:a5:b2:84:c6:
f7:61:8f:ce:91:b2:38:67:79:6f:3f:8c:c2:bf:ea:
ba:94:76:45:0d:4d:ba:ae:8b:fb:1f:2c:47:9d:a0:
ec:06:cf:b6:2c:3b:6f:ca:ca:95:a1:6d:b2:40:26:
3d:ed:ba:e7:1c:f7:59:c6:d8:fc:36:93:09:aa:2a:
eb:0c:7f:4d:c4:c1:25:71:d9:d4:e1:f0:dc:91:4f:
cf:6a:e5:0b:d2:15:76:f6:16:bb:1e:86:f7:9c:51:
c4:fd:03:a5:b1:b4:46:8d:86:5a:38:cc:2c:03:ea:
f2:2e:6f:03:58:ba:fa:31:0f:6d:9a:e7:89:16:a5:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:60:11:02:F7:CD:BA:A7:85:84:D8:E4:E3:32:37:E3:2F:EC:45:76
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/04A579E4B43B11ED893E62A3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.30.0/24
Signature Algorithm: sha256WithRSAEncryption
97:bc:1b:92:a9:89:a5:0f:6a:fa:4f:3a:f4:cd:87:ed:7f:01:
a2:ef:c6:35:03:7f:14:d5:50:41:6e:56:58:c0:81:1b:5f:eb:
d6:f2:5c:1b:2b:d2:ce:14:35:9f:1e:6e:c4:18:a9:2b:00:4b:
db:72:ec:ab:04:32:e2:9d:bb:1f:c8:18:7e:35:fd:b4:be:0f:
db:20:41:72:84:f9:ce:53:1c:71:c6:23:3b:fa:96:4c:16:da:
0a:6b:ff:07:d1:8c:7f:b2:07:8c:de:72:26:67:af:57:38:27:
5b:57:38:7c:00:81:fb:52:c1:51:c8:da:2b:b9:e5:f8:00:b7:
f7:3f:30:6a:34:b4:4a:ef:83:f5:51:d5:2c:7e:40:ff:9f:04:
3d:26:71:6f:5e:f7:ab:39:9e:a8:82:21:c8:6c:8a:8b:97:3d:
9e:db:17:4f:ce:6a:42:35:03:b7:94:b7:01:44:18:06:ce:c4:
dc:38:51:62:e0:73:c1:e4:8b:c2:36:97:c7:d7:31:59:9f:70:
42:f9:51:96:f5:6a:20:8d:bc:0d:d2:60:a8:69:d8:43:72:e5:
da:a6:b9:6c:27:a9:54:5e:43:37:51:44:62:bb:72:1c:f7:c3:
e5:41:03:b1:2d:a3:a7:52:cc:59:f2:2f:95:38:dc:fb:4d:02:
9c:6a:83:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:45:58 2025 by rpki-client