Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/31641EC6005411EE962627114AD9E6FC.roa
File: 31641EC6005411EE962627114AD9E6FC.roa (raw, json)
Hash identifier: ckd3ijJ6JWlA2kmmm4IaQhJmI3njZYkXs5DkEx5xzqU=
Subject key identifier: E0:DC:76:26:9B:7F:88:6B:DC:06:D7:CE:A4:BF:93:A7:6B:7C:C6:63
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E9B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/31641EC6005411EE962627114AD9E6FC.roa
Signing time: Thu 01 Jun 2023 08:13:30 +0000
ROA not before: Thu 01 Jun 2023 08:13:26 +0000
ROA not after: Sun 01 Jun 2025 08:13:26 +0000
asID: 834
IP address blocks: 154.16.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Jun 2023 15:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3739 (0xe9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Jun 1 08:13:26 2023 GMT
Not After : Jun 1 08:13:26 2025 GMT
Subject: CN=6478532a-5e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:e5:82:52:03:ca:27:d3:16:a3:f9:f4:51:
00:18:6c:e0:cc:88:18:79:a1:f4:14:eb:33:7b:a7:
ee:19:1d:6f:48:e4:9f:f1:ff:e2:a4:b5:a7:7e:50:
fa:35:3f:ab:e1:14:9e:5f:e1:9f:1a:2f:43:7c:1f:
36:7a:e6:ed:94:9b:dd:96:0d:70:fe:3b:82:22:79:
be:4c:21:8c:a9:26:16:82:68:d6:ba:3c:12:9d:22:
23:80:98:6e:d7:bc:ee:34:7a:df:12:27:e3:53:31:
93:aa:9c:10:04:4b:bb:b2:7c:68:54:8e:a4:04:f1:
17:3f:f1:80:54:f7:9f:b5:e4:40:15:6b:13:62:6b:
09:e6:5e:1b:ee:5d:59:9e:9a:d9:dd:ac:f5:10:0a:
a3:c7:76:5f:f7:0c:a9:9f:c1:61:b7:3f:8e:78:83:
cd:df:8d:7d:34:d8:f8:5f:04:cc:42:d7:89:4a:23:
f5:79:b3:66:38:80:ec:ad:b6:34:2c:5b:0a:83:06:
35:0b:ae:15:c5:93:2a:7b:43:0e:c1:b0:63:0c:d2:
a2:e5:b5:44:e2:e9:fe:9f:7a:d0:ef:49:7f:b9:f1:
11:21:5c:84:65:b9:12:6c:0f:8a:b2:1e:9b:f8:21:
0f:06:69:06:53:43:69:23:2e:f2:b7:a3:ba:06:ec:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DC:76:26:9B:7F:88:6B:DC:06:D7:CE:A4:BF:93:A7:6B:7C:C6:63
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/31641EC6005411EE962627114AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.84.0/24
Signature Algorithm: sha256WithRSAEncryption
02:30:c8:26:bf:97:0e:df:d8:ea:51:1c:ca:31:1e:3b:c0:16:
76:c1:b1:ed:25:fa:c6:80:7b:60:a3:c0:74:67:cf:83:c1:1a:
ff:fd:eb:74:b9:70:29:21:a0:3f:b8:aa:ad:ac:76:50:c8:52:
1c:a2:99:0d:ae:69:70:83:72:a3:b0:60:f0:3b:03:73:93:92:
5c:2f:9e:fd:89:64:0d:f4:be:b5:de:85:8f:b4:77:b5:db:e3:
04:9c:b6:f5:e9:2f:93:73:e5:fb:39:82:ec:20:2f:69:9e:fc:
38:d2:4c:3e:93:8e:47:87:2d:de:f7:48:2b:17:0f:68:2f:bc:
51:f3:bc:45:b2:99:43:44:97:96:e9:a7:2e:5e:53:18:66:22:
cf:1a:2f:4b:a7:d1:c5:be:7b:08:e7:c3:49:8a:84:f6:3f:0f:
5a:a9:42:e1:ba:82:1c:22:a0:05:35:d2:3b:3c:18:49:27:20:
99:a3:99:34:08:26:ff:06:2e:0e:b4:96:5d:5d:83:c9:94:28:
20:3f:bf:6b:99:86:75:d1:bb:e5:51:be:40:8f:8e:b7:3f:1e:
a3:c2:01:ed:a1:f5:76:78:bd:f4:ed:29:fe:91:b3:1c:7d:0d:
87:3f:a7:cc:8c:58:d1:be:25:54:2f:c1:53:2f:ed:4c:79:9b:
87:3c:ba:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:57:51 2025 by rpki-client