Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4AFC36BABCED11EE8CB2B49C775412E6.roa
File: 4AFC36BABCED11EE8CB2B49C775412E6.roa (raw, json)
Hash identifier: UWMCTkdJaW9mJY64+2reMh+0ctc5oYZ/okxAhaoyGio=
Subject key identifier: D2:F1:E2:7B:6F:C6:47:C9:D2:01:A7:4A:5B:0A:A3:B1:1A:54:EB:E5
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1480
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4AFC36BABCED11EE8CB2B49C775412E6.roa
Signing time: Sat 27 Jan 2024 08:23:05 +0000
ROA not before: Sat 27 Jan 2024 08:23:01 +0000
ROA not after: Fri 30 Jan 2026 08:23:01 +0000
asID: 834
IP address blocks: 154.16.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Feb 2024 08:57:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5248 (0x1480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 27 08:23:01 2024 GMT
Not After : Jan 30 08:23:01 2026 GMT
Subject: CN=65b4bd69-b2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5b:d3:9d:eb:83:07:01:cc:2f:23:d2:9e:d2:
28:5d:4c:01:b8:26:16:dc:28:c4:78:b2:5a:60:9d:
ad:b1:6c:6a:5c:db:fc:ef:92:21:3d:b3:d1:17:dc:
6d:1c:7c:4f:eb:76:c5:58:a8:5c:a5:12:06:e4:42:
78:ef:81:49:e9:12:f7:f3:6e:e5:46:78:c5:19:60:
07:e8:80:07:6e:d4:9b:26:a4:c6:13:96:aa:d2:93:
21:0a:af:5c:0e:a3:c7:db:32:11:c8:62:0b:02:b6:
2f:7b:08:42:aa:14:f7:cc:cc:b8:58:2d:5d:8f:52:
9e:98:a4:09:d0:ac:50:28:39:26:a9:f4:1a:29:dd:
ab:0b:13:50:51:a5:1a:de:3f:d9:3b:a6:13:2f:bf:
7d:ee:43:01:2c:91:74:0d:a5:40:fe:71:b8:e6:25:
3f:2d:2d:a9:f3:3a:76:62:49:91:1e:46:44:cf:12:
e9:1a:f8:61:ed:39:7a:c8:cf:57:9f:f7:59:c5:71:
7a:3e:c6:17:01:87:98:80:56:1b:27:fb:a8:dd:a5:
f7:5f:5b:a3:c1:95:5f:58:fe:de:be:dd:76:be:d4:
cb:9b:2e:8d:75:e7:4c:80:2d:1b:8b:7c:9b:e7:1b:
72:15:d1:11:c1:d6:79:6d:10:32:72:65:8a:e2:1c:
1a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F1:E2:7B:6F:C6:47:C9:D2:01:A7:4A:5B:0A:A3:B1:1A:54:EB:E5
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4AFC36BABCED11EE8CB2B49C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.33.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:3d:f2:11:76:eb:51:f2:ec:d6:8d:e9:ef:60:81:7b:2f:04:
f0:45:9e:e6:68:34:72:40:a5:22:de:fa:9d:e1:f2:d4:f8:89:
13:77:78:42:41:a0:df:46:f5:10:68:49:ec:28:16:ee:42:61:
03:1a:1e:9c:b0:fe:ca:d9:18:bf:5f:27:01:94:23:2c:bf:12:
0f:69:d7:25:ae:14:7b:19:01:a8:57:f4:63:d4:6a:4a:52:ec:
3e:dd:25:9a:0d:b3:51:02:42:54:a3:dc:7f:b4:52:ee:4a:26:
25:4a:87:8c:05:41:e2:5c:60:e9:3d:9c:56:5e:e4:f0:82:02:
a8:66:4a:1d:e4:f1:c4:0d:f2:4b:16:29:b8:2a:49:bb:02:3d:
28:cf:0d:bb:46:e9:86:f5:96:1b:c0:7f:48:07:1f:20:30:4c:
09:3a:89:1b:80:e2:ef:a6:39:c2:11:54:a7:6c:18:91:1f:9b:
05:c2:28:33:57:12:b6:b4:8b:11:8a:c1:9a:d4:f1:1e:ef:c2:
7f:04:b1:84:6d:c2:c4:17:04:5e:62:d7:26:c3:67:b7:b2:c1:
65:60:81:2d:73:fb:01:f6:8d:6d:a2:4b:c5:99:38:1b:e3:6b:
23:6d:ee:aa:73:4d:50:12:1e:4d:a7:16:64:af:46:1e:91:69:
4b:17:e8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 11 10:16:08 2024 by rpki-client on console-ams.rpki-client.org