Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0B424A80296E11EFB52DB60C7DDC24C2.roa
File: 0B424A80296E11EFB52DB60C7DDC24C2.roa (raw, json)
Hash identifier: yDiOP0Za74K2HHTD+etCHkKdoiIIFdjMlXK2IVECeNo=
Subject key identifier: C5:EF:67:34:09:C7:F6:55:6B:DE:D6:9C:E9:42:D8:CB:37:8C:B5:DB
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 16E6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0B424A80296E11EFB52DB60C7DDC24C2.roa
Signing time: Thu 13 Jun 2024 10:16:49 +0000
ROA not before: Thu 13 Jun 2024 10:16:45 +0000
ROA not after: Sat 13 Jun 2026 10:16:45 +0000
asID: 834
IP address blocks: 154.16.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 10:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5862 (0x16e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 13 10:16:45 2024 GMT
Not After : Jun 13 10:16:45 2026 GMT
Subject: CN=666ac710-bc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:73:f4:53:1d:21:59:b3:95:45:f6:e8:9c:
fb:c4:38:12:86:05:1e:43:3c:e1:8f:b7:d6:13:36:
b0:3b:86:89:6d:1a:ad:20:7a:60:93:e7:e3:f7:36:
6e:1e:c9:f5:83:65:94:21:aa:2d:44:05:dc:45:bf:
e6:2a:84:39:8e:f7:b7:c0:62:b4:b1:37:97:8c:be:
a9:c8:37:5d:9b:50:88:ed:44:cf:78:69:b0:7e:36:
e9:58:0c:2c:ee:df:8a:e1:f3:42:7f:c6:d2:67:80:
12:6d:79:b3:e7:ae:6f:50:ce:39:f0:46:7b:98:a6:
13:1c:16:46:0f:56:e2:e6:54:26:30:53:b7:28:6e:
3f:05:d5:61:15:0b:17:c9:31:fb:c9:af:96:c5:6c:
bf:26:61:8c:92:99:3e:89:bf:5d:30:12:45:f5:c5:
2f:87:3e:4e:8f:96:00:a7:53:b7:bb:84:c2:4d:e1:
a7:e3:e1:bc:34:30:bd:3c:1f:b7:1f:f0:ec:57:2b:
7c:cc:9c:1d:31:f1:00:71:16:eb:99:eb:48:b2:3a:
ea:12:9f:d9:cd:39:eb:a9:ae:77:7b:89:bd:ff:b0:
ef:7c:39:49:00:0d:04:49:80:48:28:57:37:d7:85:
96:4c:41:74:66:a3:29:a3:c5:8b:31:ed:43:64:c5:
29:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EF:67:34:09:C7:F6:55:6B:DE:D6:9C:E9:42:D8:CB:37:8C:B5:DB
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0B424A80296E11EFB52DB60C7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.26.0/24
Signature Algorithm: sha256WithRSAEncryption
43:90:95:f7:60:c9:96:7e:f9:82:c0:0a:b6:06:28:fd:d8:40:
19:04:47:26:c8:7c:5e:9d:de:78:65:b1:e6:9c:1e:c5:90:3e:
36:08:73:89:ea:78:7a:58:96:08:a2:43:10:41:f6:99:20:4e:
31:27:53:f5:dd:aa:c0:66:67:b6:82:b5:3c:72:ac:32:a4:8d:
a2:37:07:17:4d:63:aa:b1:ba:1e:61:26:6c:ae:4d:e2:99:9a:
88:ad:36:90:2d:0f:c0:8c:f9:71:1d:66:20:12:c1:d6:1b:86:
b9:df:53:60:79:bc:75:48:24:c0:f2:49:c6:64:09:c8:e6:00:
59:0a:14:41:18:9f:80:01:6c:5b:bc:cd:50:62:60:09:33:bd:
2b:8c:25:47:93:d7:9f:12:42:22:ea:13:8e:9f:1e:8d:67:d4:
cb:69:75:26:12:fa:e3:5c:78:27:9c:c7:a7:17:1d:7f:e0:13:
0a:39:7f:3d:98:6b:35:09:7a:9c:6c:89:2b:5e:2d:be:c4:6f:
af:03:9e:a2:bb:fe:53:60:21:f9:70:6b:56:e1:64:d2:4d:8e:
95:f5:1d:2b:31:b7:ba:73:9a:d0:8e:b3:a0:7b:62:4b:bf:c8:
1a:0d:b5:9c:00:d3:a6:b1:27:5d:80:e1:bb:bb:d9:3a:5e:b9:
7b:80:84:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 15:08:08 2024 by rpki-client on console-ams.rpki-client.org