Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3B5B59F847ED11EFB0E4DF67762E951A.roa
File: 3B5B59F847ED11EFB0E4DF67762E951A.roa (raw, json)
Hash identifier: /0XUU5x3bHWztzVCl36fsFOOFqdiH8zylGNA0oJ2c8s=
Subject key identifier: 17:F5:19:CC:D2:66:12:35:E9:13:EA:C8:87:71:D7:82:E0:20:B9:51
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1750
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3B5B59F847ED11EFB0E4DF67762E951A.roa
Signing time: Mon 22 Jul 2024 05:42:50 +0000
ROA not before: Mon 22 Jul 2024 05:42:47 +0000
ROA not after: Sat 25 Jul 2026 05:42:47 +0000
asID: 834
IP address blocks: 154.16.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 07:42:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5968 (0x1750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 22 05:42:47 2024 GMT
Not After : Jul 25 05:42:47 2026 GMT
Subject: CN=669df15a-99c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ef:25:7b:e1:54:24:18:6d:69:6e:f9:b0:c2:
02:ab:f8:27:70:bd:5b:7a:07:49:2c:6e:b6:6f:b0:
20:41:4d:9d:d4:75:47:8a:13:20:68:9f:8f:46:99:
8a:fc:91:e9:32:79:3b:e0:9f:37:b7:73:1b:00:98:
77:5e:98:b4:25:a8:00:21:5b:1d:ad:2d:a6:08:81:
15:61:8c:f8:72:2b:a5:18:a4:a6:3e:f2:4e:25:5d:
34:c5:48:2d:98:66:c1:d2:ad:b2:57:30:38:97:16:
88:21:62:35:4b:17:05:53:49:7d:09:21:01:c2:26:
34:0c:d9:07:52:70:85:30:93:bd:c0:ac:20:74:03:
94:f3:14:16:b8:fe:11:d8:d6:7c:1c:9e:b9:0d:97:
e4:85:33:26:f8:c5:aa:ed:7e:ae:62:3a:cf:16:e7:
af:88:84:02:a2:83:ea:11:58:92:7e:65:69:82:d3:
66:5d:2f:9c:1f:33:5d:1a:3d:89:50:33:c6:7e:ca:
4e:5f:fb:71:3f:9c:32:6c:e6:0f:ab:f2:a7:d2:fe:
c8:52:08:60:48:26:9d:81:de:56:78:8e:1a:8c:33:
f2:33:fe:05:ee:27:11:ce:6f:85:4a:2e:9c:c1:69:
bb:03:02:b1:48:5f:c9:71:24:28:ea:cc:27:cd:4b:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F5:19:CC:D2:66:12:35:E9:13:EA:C8:87:71:D7:82:E0:20:B9:51
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3B5B59F847ED11EFB0E4DF67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.66.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:82:8e:c5:42:27:5b:fc:83:9f:f6:ad:60:44:a7:71:22:9e:
5d:0f:05:fe:2e:50:b9:68:80:8d:ab:2e:8d:d4:5b:fc:8e:67:
a4:31:f8:03:c8:ef:a6:8a:87:9d:2f:c9:1b:b8:6f:cd:0b:55:
d3:d7:c5:f3:81:9c:a0:0a:1e:7a:b8:5b:f7:23:3c:66:75:eb:
4f:d4:48:2a:17:a6:1d:d1:a9:1f:bb:62:a9:7e:f0:dd:8f:31:
58:5f:9a:62:42:67:31:85:10:b6:1a:90:ad:62:58:83:8e:46:
39:c4:8b:07:03:9e:93:55:71:f4:b5:8d:d4:63:07:12:0f:68:
68:51:c8:da:0c:d7:dd:fa:5e:df:94:bb:96:a1:48:d3:9a:44:
43:f3:9c:42:7f:5e:c5:74:d1:d7:4b:9d:83:65:00:85:9c:a4:
ea:81:5f:42:92:f9:63:46:f0:90:e9:11:5a:e2:f2:1e:47:4e:
c9:a5:a1:74:31:7b:03:1c:81:e1:fe:c3:d4:b2:d8:49:cf:21:
39:b0:82:17:c3:03:1a:4c:d4:50:51:d0:98:31:7d:00:73:cb:
8f:01:d3:13:ef:ac:26:14:d3:c2:5b:22:44:66:80:cc:81:3e:
cd:e6:1a:c3:52:41:30:94:9c:9d:07:00:fa:b9:c5:7c:06:a1:
04:e9:61:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 09:47:44 2024 by rpki-client on console-fra.rpki-client.org