Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/292FFE14596D11EF98E55877762E951A.roa
File: 292FFE14596D11EF98E55877762E951A.roa (raw, json)
Hash identifier: zJrxwJbok2g1rY7bKMFDTvuKKYMxWZWdfl90lJcGSo4=
Subject key identifier: F2:34:A8:E5:E7:DB:BC:7D:A2:F7:1E:06:61:A1:C3:82:70:34:01:5D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 17A5
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/292FFE14596D11EF98E55877762E951A.roa
Signing time: Tue 13 Aug 2024 12:11:25 +0000
ROA not before: Tue 13 Aug 2024 12:11:22 +0000
ROA not after: Thu 13 Aug 2026 12:11:22 +0000
asID: 60117
IP address blocks: 154.16.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Aug 2024 05:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6053 (0x17a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Aug 13 12:11:22 2024 GMT
Not After : Aug 13 12:11:22 2026 GMT
Subject: CN=66bb4d6d-85d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:5d:e2:e6:e9:55:0d:1b:28:e7:d1:98:28:
08:df:39:3c:73:5c:e2:4d:d1:cd:e2:36:67:3a:53:
ab:b4:4d:19:fb:61:27:45:9e:0c:6a:f2:a7:9b:ad:
f2:85:64:de:1c:8f:61:4c:30:78:9c:81:d6:fd:9a:
5b:46:2f:f9:ac:87:4e:10:16:27:50:a4:19:e8:ce:
e0:f1:1d:16:ab:38:d8:9e:c7:41:fb:9b:64:44:09:
e8:d3:29:2f:17:e3:b6:2c:e3:bb:d3:52:b4:5a:16:
6f:1b:a2:e1:cb:aa:54:1b:c4:74:51:0f:0e:ab:2d:
ed:5a:17:b2:40:25:0f:6a:7a:a4:ee:0b:16:83:99:
9c:99:ec:0f:b2:36:64:62:41:9e:8c:98:d5:17:c7:
3d:7f:d2:d2:51:89:ee:26:9c:8e:c4:e7:e3:6b:73:
54:94:79:4e:05:1c:87:09:9f:ef:36:ea:33:65:44:
50:c3:83:86:a6:2c:4a:5a:5b:59:98:e2:82:4f:81:
c1:39:57:2f:e6:ea:1a:f6:80:22:4a:00:d1:e3:92:
94:3f:af:19:9f:8c:ae:90:5f:09:66:ca:55:59:f4:
27:17:b0:a7:25:9f:9a:c3:05:0e:81:d5:ec:c0:9b:
07:f3:76:2f:6f:b2:21:01:cd:0d:91:68:ef:ac:2e:
bd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:34:A8:E5:E7:DB:BC:7D:A2:F7:1E:06:61:A1:C3:82:70:34:01:5D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/292FFE14596D11EF98E55877762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.241.0/24
Signature Algorithm: sha256WithRSAEncryption
95:e4:3d:3b:7e:fc:ce:e8:4f:dd:a2:56:2e:d7:2f:0a:8c:51:
3e:f3:5c:8d:e6:35:97:6e:08:f0:d9:25:c7:27:b0:ae:a0:52:
ec:0b:b1:6c:8f:c4:85:93:d6:4e:12:f4:7f:14:55:dd:e4:90:
31:44:aa:48:91:57:96:72:e7:57:20:42:e9:9f:e3:06:ac:a4:
08:7e:07:c6:73:43:ee:63:24:c2:41:00:64:15:d3:59:b8:ee:
32:f1:39:7c:ca:ca:84:72:84:0d:8f:dc:9c:d2:a5:02:7d:00:
d1:f7:95:9f:34:a5:37:d1:80:50:0c:aa:67:64:a4:d8:2e:6e:
55:5a:d6:20:71:3a:2a:ff:68:9d:a2:88:87:17:f7:88:76:03:
37:bf:2a:7f:95:02:22:ed:f4:b1:92:21:43:f0:bb:64:9e:c6:
f0:a9:2b:c4:dd:1e:f8:8c:bf:9c:b4:60:fe:52:d9:eb:22:dc:
a4:f8:18:83:09:bc:9b:8f:53:b5:c4:59:0e:54:f2:f1:0d:ef:
30:91:5b:22:8f:0f:4b:9f:73:24:42:70:5b:2d:b4:2f:6f:ec:
72:97:cd:51:81:5e:aa:a7:6c:61:a7:64:36:28:56:29:d4:ea:
db:3e:25:8d:83:c8:e9:66:af:75:1a:0a:cc:60:7d:21:2c:92:
96:3e:24:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:51:01 2025 by rpki-client