Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4AA979EE8E8411EE901337DF7D84E21B.roa
File: 4AA979EE8E8411EE901337DF7D84E21B.roa (raw, json)
Hash identifier: aTZ1ziSFO3145wZVV/OQ4737L8BSDn50P/I7yP3YIB0=
Subject key identifier: 08:C0:BA:41:A8:CC:02:CE:E8:13:DC:51:FD:17:E8:B8:53:89:B7:F6
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 13AB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4AA979EE8E8411EE901337DF7D84E21B.roa
Signing time: Wed 29 Nov 2023 06:55:34 +0000
ROA not before: Wed 29 Nov 2023 06:55:30 +0000
ROA not after: Sat 29 Nov 2025 06:55:30 +0000
asID: 3356
IP address blocks: 154.16.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 11:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5035 (0x13ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 29 06:55:30 2023 GMT
Not After : Nov 29 06:55:30 2025 GMT
Subject: CN=6566e065-76c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:4c:da:db:0b:9f:7a:21:2b:c2:76:29:91:
c6:3a:2f:6e:c1:4f:04:72:ed:3b:61:6d:24:24:0b:
56:7a:ad:9e:38:8d:41:8d:a3:2c:3b:83:bc:c2:93:
02:3e:43:f6:03:6b:5f:a1:c4:f6:f6:e8:cb:bb:29:
c0:58:53:6b:c8:34:8c:29:c9:45:dd:0a:b2:63:7c:
43:83:20:7d:4e:9b:56:ed:27:ec:27:4c:b5:06:49:
ad:d7:cb:c6:cd:36:70:55:42:88:8f:45:96:5a:df:
b3:54:d1:6e:d4:da:21:47:6e:1b:15:79:86:d4:8e:
c4:e9:8e:41:e7:e1:84:73:b5:3c:7d:3d:02:0d:61:
db:10:4b:f5:b7:54:90:ac:c8:cf:0c:32:0a:81:8f:
86:97:63:54:ce:05:be:7c:97:a3:70:ed:d8:2a:0c:
cf:8e:d3:46:53:96:4c:b2:ed:c5:f4:ca:00:37:90:
f4:16:82:b2:d1:30:44:19:70:7c:4a:d0:87:ba:cc:
31:e2:6c:50:4c:8f:5f:89:1b:0b:07:66:74:03:28:
a0:65:70:78:e9:52:35:71:80:a9:10:da:69:ed:c4:
c1:d4:c1:a3:d2:5a:f0:ce:46:7c:a5:66:04:70:5f:
da:90:56:07:d1:42:ad:cd:29:4d:cc:e4:3c:fb:d0:
43:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C0:BA:41:A8:CC:02:CE:E8:13:DC:51:FD:17:E8:B8:53:89:B7:F6
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4AA979EE8E8411EE901337DF7D84E21B.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.167.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:49:93:03:20:46:aa:a2:08:8c:25:41:10:0d:60:a5:8c:a4:
1b:ce:e2:cc:55:f6:41:89:5d:f6:65:65:b6:bb:d0:e9:28:b9:
f6:46:a8:17:7f:eb:09:86:d9:16:4e:15:d8:ad:c8:b1:9e:94:
ad:09:24:64:25:59:45:b8:a5:95:19:27:8e:36:28:03:a2:13:
71:15:4b:b1:32:b7:af:9e:8a:ec:48:25:46:64:7b:33:d8:69:
21:01:b8:b0:15:3e:02:34:39:87:90:c9:45:3c:8f:7a:7d:2a:
4a:81:d4:70:8c:fa:88:4a:9d:fe:72:2f:db:fc:16:c9:98:81:
d6:bd:47:ed:28:51:55:63:87:a8:3f:60:46:a3:07:c7:ef:f4:
72:9a:d3:f2:9a:d1:5d:e4:0e:b0:52:8a:0b:53:33:8e:dc:36:
fe:3e:fd:84:de:da:d9:62:60:67:bf:fe:bb:c7:25:3d:73:2c:
b5:20:db:26:a4:a7:fa:4e:03:d4:a3:25:b8:ff:36:c3:e4:0d:
50:99:e6:cd:a6:7c:fe:6d:0d:86:17:bb:3e:2e:c1:17:60:7b:
73:ee:11:2a:ad:27:84:ca:0c:04:45:c7:e9:b3:dd:86:80:ff:
5d:6d:a8:9e:9f:3e:02:5e:3c:96:5f:eb:86:19:8d:f4:d8:c4:
69:05:ba:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 15:51:00 2024 by rpki-client on console-fra.rpki-client.org