Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/31641BB4FFD311ED8C29EA804AD9E6FC.roa
File: 31641BB4FFD311ED8C29EA804AD9E6FC.roa (raw, json)
Hash identifier: qEXB7bXKiiP/GQTttdIJi7AkjyAfnV8Pno/WXb7LaNg=
Subject key identifier: A5:2C:67:23:CC:FE:DE:0A:5C:96:6F:5A:F2:1B:90:B1:A4:E6:84:0E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E34
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/31641BB4FFD311ED8C29EA804AD9E6FC.roa
Signing time: Wed 31 May 2023 16:50:05 +0000
ROA not before: Wed 31 May 2023 16:50:01 +0000
ROA not after: Sat 31 May 2025 16:50:01 +0000
asID: 834
IP address blocks: 154.16.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Jun 2023 14:23:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3636 (0xe34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 31 16:50:01 2023 GMT
Not After : May 31 16:50:01 2025 GMT
Subject: CN=64777abd-e46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5f:6a:de:60:1b:88:6c:e0:37:95:2e:c7:77:
a4:6c:2e:a1:d7:a3:f3:2d:e3:42:26:69:8f:cd:66:
c9:a2:1c:e2:2e:db:de:84:b7:15:c2:1f:f3:f0:eb:
15:cc:a5:68:36:8b:fa:66:80:fd:da:3f:72:ef:00:
41:1a:f9:0d:10:fb:e8:8a:cf:ae:72:c8:d7:08:59:
4b:99:05:1e:cb:ac:79:bb:3d:6e:e5:e9:86:1f:16:
f6:7f:cf:71:43:7e:79:c7:f5:9c:96:15:49:d7:b1:
ce:f6:63:c2:65:50:d0:48:8c:a5:2f:de:77:56:a2:
9f:51:fe:76:1a:49:35:d3:01:e9:71:4f:db:26:5a:
8e:e7:6c:10:d0:ae:40:cf:a3:e3:4f:f3:25:36:c6:
d1:34:c2:ea:5b:3b:1b:8e:e2:d2:bf:91:c2:66:a2:
30:9f:20:e0:bd:74:37:89:02:59:cc:74:a5:5a:4f:
9b:27:17:93:71:9f:f9:ef:22:82:e7:80:69:57:1d:
61:e1:85:17:66:4d:29:0e:bd:41:ed:e4:e1:64:94:
33:b5:a6:1a:8c:c2:e7:73:e9:12:d2:a9:44:ff:69:
73:1e:ea:2b:04:4a:4f:5c:e5:47:bc:aa:3e:bc:1d:
6a:eb:1d:ac:86:00:76:f5:cb:bd:e1:19:0d:2c:a9:
3a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2C:67:23:CC:FE:DE:0A:5C:96:6F:5A:F2:1B:90:B1:A4:E6:84:0E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/31641BB4FFD311ED8C29EA804AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.225.0/24
Signature Algorithm: sha256WithRSAEncryption
94:38:9f:c8:66:35:33:bb:37:1a:ed:8e:b7:c8:3e:b1:28:ec:
7c:cc:23:3d:82:d9:95:eb:88:ad:64:ff:bf:7a:88:db:01:86:
57:cd:44:f3:9b:4a:7b:4e:0f:6d:38:69:d0:bf:01:bb:a4:59:
3c:92:da:a0:a7:79:98:22:70:a4:c0:d1:f6:31:48:4b:02:d4:
db:9a:71:55:47:cf:62:0c:06:4c:32:e2:a9:32:db:74:36:1f:
a0:b5:ff:00:82:06:7b:14:ad:4c:16:d3:49:5f:ff:80:51:ab:
f0:d5:4c:54:ec:2b:eb:cd:52:eb:e6:9f:a3:af:5b:f7:bf:23:
fb:29:d5:c7:e1:c2:45:ee:3c:32:3f:a1:3a:82:81:47:c5:b0:
ac:64:95:b5:34:3c:09:13:e6:3d:a9:ec:57:8f:a6:49:0a:93:
f4:6a:00:b2:c4:a3:70:53:3c:31:74:fb:2b:be:56:39:f8:df:
6f:66:55:ec:ab:55:b3:ae:88:87:de:75:80:3c:88:4e:df:7e:
e1:08:27:de:0e:39:10:c4:18:2e:63:ea:1a:85:cc:51:37:63:
d8:8c:9b:6e:7a:0f:2c:be:ad:63:be:4a:37:e1:5d:35:51:eb:
dd:3f:12:15:b4:9a:03:94:f7:46:a1:9c:8c:7f:83:8d:81:fb:
e4:e2:9c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:11 2024 by rpki-client on console-fra.rpki-client.org