Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0C441FC4FB1211EE8E6A7B30017001B1.roa
File: 0C441FC4FB1211EE8E6A7B30017001B1.roa (raw, json)
Hash identifier: nFBvhagrAAGSJ5T54rp/Vu+JwOYY9tpMx6W8yXtMihA=
Subject key identifier: 73:B2:1E:4F:45:EA:FA:C6:ED:BB:06:77:6F:47:29:84:25:FF:2A:B6
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 15B8
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0C441FC4FB1211EE8E6A7B30017001B1.roa
Signing time: Mon 15 Apr 2024 10:22:23 +0000
ROA not before: Mon 15 Apr 2024 10:22:19 +0000
ROA not after: Wed 15 Apr 2026 10:22:19 +0000
asID: 834
IP address blocks: 154.16.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Apr 2024 17:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5560 (0x15b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 15 10:22:19 2024 GMT
Not After : Apr 15 10:22:19 2026 GMT
Subject: CN=661cffdf-0223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:68:52:94:02:e9:f5:17:ac:ae:55:ea:cd:
70:df:71:ba:18:c5:e9:21:08:4e:80:89:cc:25:8a:
5b:ab:95:b2:fa:9d:c8:52:57:e7:fc:ef:01:3e:92:
38:57:b7:78:56:6a:fe:23:17:8c:3d:99:1f:de:37:
99:34:ff:35:50:41:73:c7:62:42:dc:08:c2:4e:22:
2f:79:46:41:99:3f:35:68:4e:02:d9:44:91:9e:4f:
b4:26:ad:16:5a:4e:54:ba:0f:5d:05:9f:22:9c:05:
b1:00:25:f2:d2:d0:ee:5b:8d:9d:34:d2:60:f3:d2:
c3:9e:cb:44:14:75:61:1c:2b:29:d1:f6:2f:77:a2:
d7:a1:5e:c1:ef:be:71:36:7d:07:00:d4:24:a6:e8:
99:a3:1f:bb:ea:91:e2:4e:ef:89:b2:43:29:4d:a4:
9a:81:ae:7e:a0:7d:6d:a8:e5:d5:77:63:f6:e8:24:
31:ea:b6:d6:e1:6d:c3:94:e1:8c:e9:ff:43:f1:ec:
8d:e9:6f:79:eb:dc:0d:cd:75:d7:86:b2:60:94:90:
df:f8:ed:84:77:49:ec:14:70:0f:69:90:de:61:2d:
c3:1c:5e:6d:20:f8:9d:be:5e:b1:9e:e7:e9:79:2e:
11:4b:0e:4c:9f:a8:e7:f2:fc:c9:ec:61:5f:7a:36:
85:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B2:1E:4F:45:EA:FA:C6:ED:BB:06:77:6F:47:29:84:25:FF:2A:B6
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0C441FC4FB1211EE8E6A7B30017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.240.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:1f:f8:30:cb:26:b5:63:5f:5e:c1:6f:23:d2:b6:66:6f:05:
a5:74:e0:81:67:d9:ae:25:42:5e:82:90:d5:a7:ff:4f:2c:0f:
3f:84:bf:8f:ea:be:5b:ff:90:6f:c6:84:93:60:74:8a:e3:bc:
e5:73:82:c4:cc:29:22:08:34:cc:2f:3b:f2:a4:f8:31:8b:b3:
ad:b4:9e:79:7d:76:5c:7f:af:41:c9:09:29:95:60:d1:6a:9a:
1d:89:62:47:a2:62:bc:20:0b:97:da:bd:64:f2:9e:06:f1:19:
4e:1f:b7:ce:1b:95:ad:63:29:2f:87:cf:e7:56:b8:1c:b6:c9:
68:0a:fb:22:36:9a:ba:96:b2:a0:69:4c:e5:71:20:c5:47:84:
21:25:51:cd:3e:8f:f0:33:fd:8f:44:a7:25:52:b8:dd:38:a5:
e1:15:2a:8e:98:28:3c:c6:6a:4f:c1:1d:ce:21:ec:c1:7a:a2:
c6:09:8d:1a:b6:c3:0a:17:73:25:10:82:a7:12:f8:76:c8:ac:
6b:9d:9f:ac:ef:2e:27:f1:09:e6:cb:19:14:27:aa:04:a2:fb:
1e:41:47:66:8c:1c:e2:9a:99:9a:cd:4c:09:d3:30:99:05:87:
c7:d8:cc:ba:6f:b7:3e:1a:ed:5a:34:aa:2c:e2:6d:8c:34:55:
b6:a0:f5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 20:33:04 2024 by rpki-client on console-ams.rpki-client.org