Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/189C7F26F8CB11EE8834D321017001B1.roa
File: 189C7F26F8CB11EE8834D321017001B1.roa (raw, json)
Hash identifier: dtfPCIg9t+yuzReewIdfGTF8/dtFW7gUK8mq238pWwM=
Subject key identifier: 3B:DF:06:AD:A0:ED:2B:14:3E:1C:19:FA:4A:D7:94:6D:9B:B6:50:9A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 15AE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/189C7F26F8CB11EE8834D321017001B1.roa
Signing time: Fri 12 Apr 2024 12:49:27 +0000
ROA not before: Fri 12 Apr 2024 12:49:24 +0000
ROA not after: Sun 12 Apr 2026 12:49:24 +0000
asID: 834
IP address blocks: 154.16.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 11:59:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5550 (0x15ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 12 12:49:24 2024 GMT
Not After : Apr 12 12:49:24 2026 GMT
Subject: CN=66192dd7-00cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a5:67:06:42:89:8f:51:91:ed:a3:d5:cb:71:
44:3b:23:82:36:01:d1:53:c9:c8:91:16:97:9c:af:
59:c4:b7:e8:bc:94:2b:be:4d:6c:31:aa:cb:14:c3:
89:96:45:7b:ff:34:49:01:82:5f:a7:1a:27:39:08:
c9:82:ea:48:43:4f:d0:ef:1b:30:7d:90:3b:6a:7b:
ef:12:a8:a8:ec:0d:c0:6b:49:b4:8d:85:cb:e8:8e:
b7:b0:6f:fc:50:07:e8:5d:c4:22:6a:3f:18:13:b5:
6c:53:0e:4d:d8:36:0c:30:20:2d:59:c3:23:7b:b0:
13:03:ea:76:58:15:c0:ab:2c:7a:a0:7c:c5:f5:6f:
c3:db:56:10:dc:9f:cb:02:09:8f:3a:7f:c0:37:b4:
41:1e:84:c1:ec:ed:ef:a8:56:b7:60:2c:e1:27:58:
bb:29:ec:fb:85:35:65:8a:d2:f6:1c:4d:b0:99:1b:
ec:60:0d:68:e6:c7:76:47:59:ff:23:f4:75:b3:a9:
8a:4f:e7:79:b9:6d:0b:e1:16:72:0e:1d:47:ab:72:
25:b0:f3:d1:15:19:5f:73:21:68:c5:ff:e9:1c:d3:
99:3e:43:75:ee:14:b8:07:05:4d:fe:32:0f:27:2a:
d2:d6:ed:c1:b4:16:fd:db:29:8c:3b:e3:de:d7:68:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DF:06:AD:A0:ED:2B:14:3E:1C:19:FA:4A:D7:94:6D:9B:B6:50:9A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/189C7F26F8CB11EE8834D321017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.233.0/24
Signature Algorithm: sha256WithRSAEncryption
77:72:5e:dc:a0:d1:cd:41:0e:f8:85:be:03:97:24:ca:f5:a8:
2a:94:e3:1e:a6:11:87:b2:97:00:8d:2d:88:74:13:8e:61:38:
2b:78:cb:04:c8:8b:47:b6:76:f6:ec:30:08:24:26:df:1d:37:
a6:69:d5:85:31:05:90:19:e6:d7:c7:77:22:79:97:d3:2c:67:
63:ab:c6:09:78:c6:8e:06:2d:ce:90:50:ce:84:94:76:4b:15:
0d:40:41:98:69:ad:de:9d:2e:4c:99:1e:ee:85:20:e0:73:89:
8e:1b:86:84:51:73:82:ec:a6:c4:13:0f:9a:97:e8:e4:fe:0d:
e8:49:97:2a:1b:e1:7f:4b:54:e9:8e:d2:07:d8:42:cc:c8:d4:
6d:6a:6b:90:35:b8:2b:a7:15:3b:e0:36:33:36:a5:b4:e8:11:
02:2c:e0:70:11:d1:b7:6f:33:31:a0:63:01:78:1b:f5:d7:02:
82:36:ef:b7:89:14:72:e3:73:94:b2:c3:ce:89:7e:23:6e:59:
a1:83:6c:e2:b3:67:0d:e6:9c:81:95:86:43:8a:09:49:a2:59:
78:aa:03:0f:76:1e:30:7a:7d:13:94:ff:4e:f0:e7:91:e7:6e:
ba:92:42:0a:ae:33:db:16:3f:a1:7b:9d:c8:85:44:6e:ef:22:
3c:10:e9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 14:49:14 2024 by rpki-client on console-ams.rpki-client.org