Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/069142BED72211EEAC576B96775412E6.roa
File: 069142BED72211EEAC576B96775412E6.roa (raw, json)
Hash identifier: WTs9cjbqQsizRmycN9LkqeU/U2dIL+V2FHyi31/lxvM=
Subject key identifier: 6F:30:C5:96:D8:E1:FE:D9:44:D8:1D:56:90:00:1D:7B:C3:CB:3F:4E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1511
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/069142BED72211EEAC576B96775412E6.roa
Signing time: Thu 29 Feb 2024 16:46:03 +0000
ROA not before: Thu 29 Feb 2024 16:46:00 +0000
ROA not after: Sat 28 Feb 2026 16:46:00 +0000
asID: 329403
IP address blocks: 154.16.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 14:05:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5393 (0x1511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 29 16:46:00 2024 GMT
Not After : Feb 28 16:46:00 2026 GMT
Subject: CN=65e0b4cb-3793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:a4:e9:37:7a:54:f3:19:f8:2c:ce:a0:42:
ca:2f:43:6f:b2:fc:50:ee:76:49:35:a7:fa:29:c5:
e5:d1:5a:d4:4b:76:5a:32:59:a2:30:80:3a:5e:46:
37:a3:48:5d:0e:12:d6:e0:fd:64:0f:e9:77:de:64:
dd:c4:9a:8f:61:85:ae:fa:b0:fc:29:1b:5d:55:09:
eb:0a:20:2f:84:f6:52:b4:6b:6a:bd:ef:7d:a3:6a:
36:b8:0a:2b:84:2d:6f:bc:ed:ee:18:0a:12:41:45:
ff:a3:07:44:85:bd:21:cd:df:b3:fa:ea:33:2d:23:
ef:f8:63:d3:83:f1:85:f2:10:19:fc:67:b8:9f:0e:
12:5e:6b:05:19:45:75:32:f3:24:7c:93:f0:3d:34:
b3:d8:77:d2:16:10:7d:6f:eb:29:fe:c0:1d:21:36:
9f:dc:c6:28:f9:a1:ff:dc:01:1c:36:f0:bf:3f:81:
d2:7a:61:c1:39:92:0c:36:fe:a9:d3:08:9c:29:ca:
89:2f:dc:dc:ef:5a:84:c9:18:1f:54:78:8a:f8:d7:
8e:f9:54:3b:d9:cc:6c:da:5e:51:c0:9f:68:e6:2c:
cf:3d:b4:ea:dd:24:19:fb:58:b6:ec:a4:58:d3:78:
ec:2d:94:51:49:03:4d:9c:58:83:da:8a:11:24:99:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:30:C5:96:D8:E1:FE:D9:44:D8:1D:56:90:00:1D:7B:C3:CB:3F:4E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/069142BED72211EEAC576B96775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.0.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d7:95:fd:70:24:50:7f:6f:b1:e8:ed:f3:be:b4:fa:f2:81:
3c:ba:1f:65:d0:68:3d:b0:1e:9f:3e:9b:61:1d:27:90:60:63:
f8:01:04:27:12:45:2b:e1:e2:d7:3c:27:72:ca:7b:f3:43:ce:
b8:7c:ef:1e:19:53:0b:42:95:4f:1c:9c:22:f3:a9:86:24:db:
75:41:c7:b0:c1:c9:ff:5c:48:2e:e9:9a:43:af:3a:ca:2e:fe:
76:34:e3:0b:93:f0:a0:91:0b:dd:65:b2:7b:96:94:16:be:57:
2e:5c:df:57:ae:86:d0:b0:0a:2e:b5:4f:80:66:03:3e:ee:8f:
79:e3:14:e0:4f:1a:ba:b0:f2:b0:9c:92:80:0b:7d:54:80:06:
3f:bd:85:96:39:64:e0:e0:bf:d7:31:13:b3:49:6e:16:da:2a:
c9:bd:94:c9:ce:44:9d:10:b4:5c:26:3b:64:e4:16:97:e6:c2:
b9:7f:79:7f:a3:dc:26:ec:43:9f:dc:a1:34:fc:80:5b:2b:80:
e4:75:c3:83:3f:f8:16:70:04:d9:fc:0c:e4:9b:d5:6d:cb:f5:
a2:45:4c:5a:85:c9:9a:46:fe:8c:0a:31:66:72:ed:86:16:dd:
7f:4f:0f:dd:62:73:ac:e9:8b:cc:74:0a:83:26:f7:4c:16:cb:
2d:03:98:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 17:28:21 2024 by rpki-client on console-fra.rpki-client.org