Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/11A30022C1BD11EE99844768775412E6.roa
File: 11A30022C1BD11EE99844768775412E6.roa (raw, json)
Hash identifier: BL3DjDmBkQrN41zSTy2JNY25BE2LnR6g88ctKgt6ESY=
Subject key identifier: D6:6D:1F:23:21:0B:0C:5B:FD:A4:BA:AC:59:B2:D3:70:22:14:61:F3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1495
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/11A30022C1BD11EE99844768775412E6.roa
Signing time: Fri 02 Feb 2024 11:20:28 +0000
ROA not before: Fri 02 Feb 2024 11:20:25 +0000
ROA not after: Mon 02 Feb 2026 11:20:25 +0000
asID: 834
IP address blocks: 154.16.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 19:41:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5269 (0x1495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 2 11:20:25 2024 GMT
Not After : Feb 2 11:20:25 2026 GMT
Subject: CN=65bccffc-1eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fb:d4:dc:51:17:c3:2c:20:f0:dd:9d:b1:09:
01:ad:cf:ae:1e:57:cb:cb:3c:58:22:d5:17:c2:09:
82:2e:c0:c9:a5:3b:0a:ef:28:75:75:3d:23:09:a6:
cb:c7:e9:88:7a:36:97:e0:21:cb:80:41:15:a8:9e:
ec:5a:f0:77:4c:cb:90:47:ba:1c:47:35:8f:13:f5:
92:48:db:08:8c:3b:ed:6c:bc:ef:64:05:94:c7:1d:
f7:bf:84:e1:92:e0:53:1a:5b:c1:7c:f4:b3:e3:58:
c9:48:94:d9:01:69:30:08:4a:63:f1:b6:89:ff:05:
6a:37:58:44:42:e2:95:f4:77:d9:47:8c:2b:9a:40:
c1:90:c9:4f:70:05:85:4b:00:9b:91:ac:73:83:3b:
a0:a0:eb:2d:de:68:4d:e2:30:b0:76:ec:6f:c2:03:
1c:8a:c7:f0:2b:2f:de:d3:41:77:72:ef:95:86:a2:
93:2b:52:aa:17:38:b0:bd:85:4a:bf:54:01:b6:6d:
43:ea:a6:bf:63:22:71:33:24:ce:6a:f3:ae:cb:c4:
03:fa:4e:a3:31:f9:05:fd:fc:e2:2e:db:76:ae:e6:
b8:42:e0:3e:f0:96:66:d5:6b:42:ac:98:ad:56:9c:
1a:dd:59:1e:70:e7:02:32:8a:86:bf:1c:88:2b:d6:
e2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6D:1F:23:21:0B:0C:5B:FD:A4:BA:AC:59:B2:D3:70:22:14:61:F3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/11A30022C1BD11EE99844768775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.214.0/24
Signature Algorithm: sha256WithRSAEncryption
30:29:b9:c6:d7:a4:7a:1c:9c:c3:f5:cf:ec:b0:53:e2:51:e7:
6f:36:6b:20:7a:84:a5:97:71:14:5e:c6:f4:f2:8f:7b:68:af:
6a:55:d8:0a:20:b7:d9:27:27:2b:4b:54:24:43:d2:71:2f:24:
08:11:33:4e:56:3e:60:d9:e3:f5:1d:56:db:21:ff:69:5d:eb:
b5:ae:7a:83:d2:bc:ae:25:18:d0:47:02:00:ef:ff:68:4f:d7:
7c:f1:70:2d:00:c7:55:6d:a9:00:26:6c:64:af:db:ed:3a:ed:
f4:e4:1a:af:4e:b4:27:02:b5:e3:4a:2d:d8:2d:3e:7b:f3:e4:
4b:b1:d5:cc:94:7f:9a:b4:7c:9e:d5:43:ec:b3:ae:59:f3:67:
17:33:9a:32:33:17:d4:a6:d7:05:f1:2f:f8:73:7d:54:cc:54:
22:d2:15:0b:5c:96:c7:e5:33:03:6e:1f:89:8e:35:8c:ba:aa:
ee:f7:5b:b0:d6:28:d8:34:43:20:20:e5:ff:b2:b0:21:a3:8e:
95:54:5f:2f:74:71:e0:aa:72:8e:2a:5a:a8:cd:05:5c:bd:b2:
df:e8:13:4a:8b:43:3d:fc:1e:64:22:7d:67:ea:96:07:1f:e8:
a1:f1:6a:35:e9:73:96:11:d1:7b:64:be:11:4c:48:2d:ad:19:
09:79:26:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 23:23:08 2024 by rpki-client on console-fra.rpki-client.org