Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3122BBA4CBF911EEB70A1DBF775412E6.roa
File: 3122BBA4CBF911EEB70A1DBF775412E6.roa (raw, json)
Hash identifier: K+wFUV1afgTkUCgf7b+r4JIu7unGqSGJmvrhhitjw2E=
Subject key identifier: E1:D2:0D:D7:17:23:50:C7:BD:11:74:AC:76:D6:08:3A:F3:7F:51:22
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 14B3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3122BBA4CBF911EEB70A1DBF775412E6.roa
Signing time: Thu 15 Feb 2024 11:56:03 +0000
ROA not before: Thu 15 Feb 2024 11:55:59 +0000
ROA not after: Sun 15 Feb 2026 11:55:59 +0000
asID: 834
IP address blocks: 154.16.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 10:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5299 (0x14b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 15 11:55:59 2024 GMT
Not After : Feb 15 11:55:59 2026 GMT
Subject: CN=65cdfbd3-5ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:3a:a9:c7:5c:cc:94:bf:bd:fd:cd:e2:68:
85:eb:0f:b8:d6:bc:3a:9c:48:2a:c8:6b:60:ca:60:
c7:12:68:c4:2d:bf:fd:97:7a:94:0f:9e:3b:d4:f5:
eb:4b:7a:44:cc:e5:f3:53:02:98:cd:e8:d8:dc:6a:
04:e0:d8:79:00:84:b9:af:6d:20:f2:da:f3:28:94:
24:09:c8:d3:21:06:31:82:a8:2e:d4:88:5e:d8:6f:
f9:f9:e3:6c:b8:4d:00:91:a2:27:31:27:1e:7d:03:
04:52:e0:41:de:0a:dd:6d:c0:10:b0:1e:93:15:7c:
49:32:09:ad:37:e0:cf:91:ea:1d:c7:a3:bd:2f:04:
8e:0b:34:95:81:42:d0:18:69:a3:22:66:01:cb:9d:
2a:28:51:9f:06:bf:eb:dc:f1:39:f1:c7:d5:14:28:
a6:9e:6c:5e:31:99:0c:14:b5:35:61:9c:c0:4a:ac:
68:78:f1:33:b3:17:97:52:e4:a1:65:20:ff:e9:8d:
9a:88:9f:ed:01:a4:a7:df:f1:f5:39:37:f1:46:6f:
be:68:9f:cc:02:92:39:12:b6:ce:c0:ce:8d:c6:6b:
47:e6:6c:c3:44:7b:74:e0:d0:78:44:87:44:e2:d6:
8f:96:5c:ad:33:6f:04:14:90:71:a1:31:5e:80:77:
a5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D2:0D:D7:17:23:50:C7:BD:11:74:AC:76:D6:08:3A:F3:7F:51:22
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3122BBA4CBF911EEB70A1DBF775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.167.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:53:60:1a:7b:3b:c0:9e:96:55:f2:84:cb:05:a1:2f:9d:5e:
ce:dd:81:a6:44:5b:0a:e5:db:2f:73:c5:54:5c:34:7e:9a:11:
f3:39:41:f2:02:1c:65:55:d7:5b:e8:d2:11:cb:59:e2:c3:7a:
1e:57:26:76:1f:a0:e3:6a:34:12:b8:3f:6b:e3:28:31:a5:a1:
5d:d4:69:e4:45:2f:5d:a9:28:05:38:08:5e:5f:4f:70:0d:38:
b2:9a:34:45:70:7a:4f:0b:e9:94:d0:77:7b:79:45:64:b5:30:
79:12:bd:8b:41:c1:9d:06:3a:9e:bd:40:c6:94:20:09:da:0b:
53:fb:a6:33:86:a6:b1:5b:6a:72:9d:4e:fc:e5:a3:22:cc:1e:
8b:98:bf:1c:34:e4:c0:73:25:18:d3:41:09:71:02:0e:d5:b4:
7a:cd:f0:18:25:25:de:c6:fd:ba:7b:f8:54:62:23:fa:c7:6b:
c0:56:79:4c:da:e1:d8:fd:02:69:61:2b:c9:86:a6:4d:8f:44:
18:92:2a:61:46:b8:f3:c6:70:05:7d:25:45:91:33:d0:a8:00:
18:31:f2:09:de:52:70:1b:4e:16:27:14:3f:07:fb:c0:34:84:
08:39:b3:82:d2:3d:c0:9d:85:1d:46:2b:f1:c1:23:d9:8f:6e:
ef:3d:97:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 14:06:33 2024 by rpki-client on console-ams.rpki-client.org