Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3B16CB22B45311EE9A732358775412E6.roa
File: 3B16CB22B45311EE9A732358775412E6.roa (raw, json)
Hash identifier: S1j4xKJCLUcFxe6MLs2NOYH69a+I8Xi13ABFVWUYxq4=
Subject key identifier: 9B:EA:A5:3E:9F:C9:FD:69:DB:50:5C:1D:5D:F6:B8:10:F2:9D:17:EA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 145A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3B16CB22B45311EE9A732358775412E6.roa
Signing time: Tue 16 Jan 2024 09:40:06 +0000
ROA not before: Tue 16 Jan 2024 09:40:03 +0000
ROA not after: Fri 16 Jan 2026 09:40:03 +0000
asID: 20473
IP address blocks: 154.16.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 10:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5210 (0x145a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 16 09:40:03 2024 GMT
Not After : Jan 16 09:40:03 2026 GMT
Subject: CN=65a64ef6-7063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:41:58:4a:5b:0b:62:91:ac:93:f5:bb:2a:
1d:1c:95:e8:b9:d0:91:64:19:dc:dc:08:0c:38:2e:
68:a9:49:dd:b9:df:9e:07:ed:e7:06:cc:75:04:64:
f1:b2:d0:d0:79:fb:dc:e4:9a:60:8a:bf:96:87:b9:
05:e0:a8:5b:76:c4:b5:8b:87:5b:0f:59:77:1c:0d:
37:be:c3:1c:de:ad:f4:d5:a7:67:9a:40:39:e2:ce:
74:9f:bf:93:41:84:c8:10:1d:db:94:3c:03:40:39:
c9:2a:2d:70:4d:48:92:bc:af:1f:ed:d3:0d:8a:fe:
04:14:5b:5f:54:b5:9a:74:7b:dd:6e:b1:e1:a9:2f:
73:78:14:44:06:b4:ef:c1:8e:fb:8a:70:5e:cf:e5:
cf:f2:eb:b7:02:90:82:5c:ce:24:95:80:0c:2d:73:
e0:3f:78:20:11:58:f2:5f:24:e1:e4:15:08:56:42:
d2:d3:58:f1:cb:3d:ec:b4:86:53:b7:7f:1c:e5:cd:
21:c0:60:d1:e4:2b:cc:48:ec:aa:d2:32:2e:d0:ec:
92:8b:c7:b8:9e:22:f5:90:94:da:00:25:5d:ef:84:
f3:6a:1c:88:72:7d:79:b2:47:8c:b5:71:c9:64:ba:
d3:6e:c2:95:5c:e5:79:fc:53:d8:30:30:81:16:e9:
9d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EA:A5:3E:9F:C9:FD:69:DB:50:5C:1D:5D:F6:B8:10:F2:9D:17:EA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3B16CB22B45311EE9A732358775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:75:d5:a7:d5:82:ac:71:d3:f3:2f:41:18:00:4d:14:2e:f2:
9e:0d:c6:ae:fb:75:1c:44:d7:f2:eb:ba:f2:0e:8c:41:7f:c7:
6c:6b:e2:02:09:58:c2:c5:99:f0:e0:25:97:60:35:7c:ce:9b:
60:82:82:79:51:39:54:8b:e9:69:56:52:67:a8:ea:76:fe:24:
bf:ec:eb:5e:b2:53:f9:2c:0d:49:86:a1:f3:a2:7f:c9:11:af:
01:f2:ff:f0:61:52:6f:d1:8e:14:3b:20:59:aa:46:90:6b:14:
83:51:cb:f0:59:c6:05:3b:ba:4a:32:1a:ad:aa:f6:40:ef:cd:
ad:b9:5a:ed:37:9d:ed:a6:b3:51:f1:db:cf:e4:4e:17:85:c3:
07:01:31:0d:f9:f5:c7:be:b1:dd:e2:5e:b3:38:4b:e7:e8:61:
f1:2b:8b:01:94:7c:5f:1e:d6:47:c6:db:63:1a:63:fa:7d:be:
d3:18:b5:93:18:51:d5:b4:bc:84:27:05:4a:ea:94:13:a7:00:
b5:a5:d8:0a:f8:ed:11:4c:ea:4f:92:f2:6a:61:72:5c:75:c9:
53:78:cc:11:56:7a:ab:a6:f2:d0:4d:f3:7e:f4:83:b3:6c:d3:
0d:d4:3e:3a:92:1c:2b:ab:2d:a3:42:90:58:22:d5:82:04:66:
a3:5c:66:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 13:25:27 2024 by rpki-client on console-fra.rpki-client.org