Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1B072CAC53DE11EF9BBB29B4762E951A.roa
File: 1B072CAC53DE11EF9BBB29B4762E951A.roa (raw, json)
Hash identifier: qaHRPvJjpLpuopKlRn/U4H57KSKGuERwRbndkvAiZoE=
Subject key identifier: 20:CB:6E:CE:9D:8D:57:A0:A2:39:48:98:7C:89:A8:E5:F0:FE:9C:38
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 177C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1B072CAC53DE11EF9BBB29B4762E951A.roa
Signing time: Tue 06 Aug 2024 10:24:47 +0000
ROA not before: Tue 06 Aug 2024 10:24:44 +0000
ROA not after: Thu 06 Aug 2026 10:24:44 +0000
asID: 21859
IP address blocks: 154.16.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 06:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6012 (0x177c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Aug 6 10:24:44 2024 GMT
Not After : Aug 6 10:24:44 2026 GMT
Subject: CN=66b1f9ef-238f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ef:e0:2d:71:c6:cf:c9:d5:03:45:6c:76:34:
4f:b0:02:93:ae:d8:5d:81:fe:71:22:e6:13:2a:e9:
52:a5:5b:27:5f:1b:0f:20:52:3f:71:c5:6a:13:62:
b0:57:98:91:b7:87:ac:3a:c6:90:2c:d0:17:53:5d:
9e:67:ec:9a:64:93:c4:22:6f:8e:19:ab:63:22:d8:
1b:3b:27:fa:90:4d:8f:f6:2b:10:d8:7b:d9:e6:26:
3a:b7:0b:2f:01:4a:3c:8f:9d:e9:5c:66:eb:d9:ba:
ad:0f:59:d6:d3:02:c5:98:3c:56:0f:80:7d:55:df:
df:c8:bd:bb:4f:75:eb:1b:3e:f4:92:3f:59:c4:36:
f1:68:c0:a8:30:d9:b3:17:0e:41:a9:0f:15:76:b1:
5f:02:61:a4:b2:77:4a:25:2f:d6:48:46:67:2e:db:
95:6a:74:0e:37:af:07:2c:6e:d4:23:ef:51:55:f9:
1c:e7:f9:50:a1:9f:0d:62:d2:c9:00:6f:08:16:05:
b4:ab:97:0e:4b:bd:8b:43:0b:48:5e:90:95:cc:15:
30:d0:9f:d0:0a:70:d0:c7:10:6f:0d:6f:71:e5:ea:
5c:61:8f:23:62:06:0c:c5:3e:4b:ed:6b:5c:7f:79:
7d:40:5f:59:00:a3:ac:60:e9:ec:2a:c0:3c:19:67:
78:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CB:6E:CE:9D:8D:57:A0:A2:39:48:98:7C:89:A8:E5:F0:FE:9C:38
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1B072CAC53DE11EF9BBB29B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.9.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a3:e7:76:a3:10:29:7d:52:3d:94:35:77:b4:63:f6:28:8a:
8c:5e:d6:60:2b:15:dc:c8:b5:0b:df:40:45:1e:d3:af:45:3d:
43:05:ec:93:ff:62:45:c4:27:46:9f:43:f3:a1:c7:db:18:f2:
6e:ac:1e:31:72:fb:20:12:a4:1f:c0:c8:3b:fa:35:61:ad:a6:
79:63:68:28:a2:38:e8:d5:37:2e:35:57:78:fd:cd:e2:b7:d3:
59:7e:a6:b6:af:75:2c:a3:ef:45:35:23:7d:9f:7f:f2:d1:e5:
f1:6a:43:6b:bd:00:8a:99:ed:4a:cc:82:ad:05:74:87:62:e3:
b5:76:1c:f0:5b:3d:8d:02:e7:f5:b2:74:0c:44:ac:15:79:6a:
6a:28:b4:25:cd:4e:36:a8:ae:88:b9:bb:a5:d8:90:c7:7b:89:
30:1d:8e:be:25:22:06:fe:d4:9f:11:49:dc:65:1c:27:35:e1:
9b:62:0a:c9:fe:1d:35:a4:49:88:54:0c:7a:ce:40:7e:fb:f6:
07:1e:ac:8e:ba:a9:8d:aa:df:67:e5:11:12:35:ea:65:ea:53:
a2:5e:3a:f6:2c:1e:28:ef:3c:7e:72:2d:29:51:68:a2:9b:e1:
0b:25:35:59:a9:bc:d5:35:44:cd:23:d1:75:32:b2:1d:e5:ee:
d1:f0:84:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:59:55 2025 by rpki-client