Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0658BEF653DE11EFBFC91CB4762E951A.roa
File: 0658BEF653DE11EFBFC91CB4762E951A.roa (raw, json)
Hash identifier: yk3i8ZaXKtA08BeX+icwSf21nMs8FTBGnwtjB5PdxgU=
Subject key identifier: 4C:5F:50:F9:C6:45:15:91:EE:D4:6B:BB:76:17:68:A2:D9:42:D6:84
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 177A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0658BEF653DE11EFBFC91CB4762E951A.roa
Signing time: Tue 06 Aug 2024 10:24:13 +0000
ROA not before: Tue 06 Aug 2024 10:24:09 +0000
ROA not after: Thu 06 Aug 2026 10:24:09 +0000
asID: 21859
IP address blocks: 154.16.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 06:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6010 (0x177a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Aug 6 10:24:09 2024 GMT
Not After : Aug 6 10:24:09 2026 GMT
Subject: CN=66b1f9cc-6f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:28:2c:2b:33:b0:85:3b:97:4e:f6:2a:a6:
c9:07:71:62:ab:f7:26:f5:cc:04:a3:a3:83:38:06:
f7:32:6d:1d:c0:a4:9a:30:b0:7d:a6:c2:05:c4:ef:
d2:38:91:84:ad:41:f8:54:4c:84:66:50:91:68:16:
07:a6:90:fe:2c:db:b5:0d:70:f6:b6:59:ae:c5:00:
ae:45:f4:94:42:69:89:07:5d:3e:a7:2d:14:f9:65:
38:3f:0f:9f:40:d6:47:a6:3f:60:16:e3:10:fe:a5:
2c:82:62:cc:47:af:ce:56:52:43:18:5a:c2:6c:5b:
f6:fe:5b:d7:8c:be:db:d2:1f:13:51:41:2e:0e:75:
d3:79:ea:76:70:89:38:4c:ff:b3:ec:7f:fc:bd:e8:
54:b0:44:10:64:5c:d0:41:11:80:ea:3e:c8:0c:ab:
13:ea:e6:4e:e6:90:ed:fc:0a:3a:97:91:5c:88:70:
37:b7:a8:91:16:95:bf:6a:c0:06:05:02:20:0e:d2:
37:3e:e4:22:53:77:0e:94:18:98:78:cd:20:9f:d4:
15:21:19:c9:1d:d9:15:86:ce:76:ae:bd:2a:96:6d:
a0:3f:70:eb:04:af:37:3b:31:d2:67:9e:c2:e2:31:
f1:13:46:b4:38:67:65:9c:05:08:ba:a7:f8:85:90:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5F:50:F9:C6:45:15:91:EE:D4:6B:BB:76:17:68:A2:D9:42:D6:84
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0658BEF653DE11EFBFC91CB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.26.0/24
Signature Algorithm: sha256WithRSAEncryption
40:87:19:1d:e7:07:5a:e0:c7:53:31:8a:bb:48:af:3c:ab:98:
ca:71:ab:8d:58:50:3f:24:55:38:85:ae:9c:73:e2:46:87:c6:
9c:f9:05:3f:d1:a2:a9:4a:f7:a6:87:35:20:1b:a9:b1:cc:52:
35:2e:98:f4:ce:5d:4e:78:8d:10:b3:09:99:1e:c9:d9:f2:aa:
c9:7f:6d:a8:cf:85:ad:37:31:57:9b:84:5a:a2:42:57:75:f7:
de:92:86:79:9f:fa:09:65:cc:a7:33:ef:27:81:d1:f7:ab:11:
80:1b:e6:95:eb:09:21:ff:cc:47:22:1d:ef:6a:b2:2e:62:f9:
ca:88:ff:df:5f:49:a1:3d:ff:cd:a0:ad:41:72:6c:04:ae:94:
72:31:3f:6d:a4:8b:ea:75:28:1a:97:b0:ee:b3:e2:e8:18:be:
c4:90:6b:3a:84:b6:34:e7:a6:a1:61:74:d9:62:e3:04:df:07:
e6:1f:63:cc:30:64:70:e6:c3:97:22:37:76:76:d1:6e:4b:11:
25:ee:7c:30:ac:7e:45:e4:9b:07:e2:46:b0:4f:45:fc:9f:1b:
c9:96:a2:dd:4c:05:33:18:20:45:cf:00:c6:d9:6d:38:7c:52:
d5:93:43:2e:1f:29:b1:53:c2:8b:15:e0:d6:7e:d7:a3:56:c2:
fc:c6:2a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:44:31 2025 by rpki-client