Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4E48A964143411EE92AFE3454AD9E6FC.roa
File: 4E48A964143411EE92AFE3454AD9E6FC.roa (raw, json)
Hash identifier: fgTFWAW5gUCRjMIjFGJFc/jn9elY+Jb1sHF6yP+F1wQ=
Subject key identifier: 59:A1:5B:8E:0A:D3:72:A4:13:32:27:06:56:B6:98:36:4C:3B:5A:CB
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 100C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4E48A964143411EE92AFE3454AD9E6FC.roa
Signing time: Mon 26 Jun 2023 15:15:38 +0000
ROA not before: Mon 26 Jun 2023 15:15:33 +0000
ROA not after: Tue 17 Jun 2025 15:15:33 +0000
asID: 62943
IP address blocks: 154.16.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 11:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4108 (0x100c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 26 15:15:33 2023 GMT
Not After : Jun 17 15:15:33 2025 GMT
Subject: CN=6499ab9a-72fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:7c:47:c0:92:f3:a2:22:6a:b0:3f:95:c9:
6f:c2:9d:1e:b4:19:9b:de:80:40:29:89:2b:d9:ff:
5a:ae:45:3e:ce:9b:33:dc:db:c7:17:28:fb:d0:18:
66:2d:cd:1f:30:ad:06:39:fc:0f:d5:e1:c1:a2:66:
e4:1b:33:8e:3a:87:d6:fe:d0:6d:3f:a5:97:be:a1:
17:32:04:5e:97:0d:27:e7:eb:fa:97:79:26:61:f3:
9f:c1:f4:d0:4a:cd:89:e8:c2:3d:d6:06:cd:ad:b4:
c2:25:89:54:18:07:2d:39:9c:28:df:20:e3:80:a2:
1d:e5:88:12:89:e5:c6:6b:d2:9a:19:c4:f7:4a:bb:
a9:a2:25:09:88:9f:82:cd:3c:ea:ee:b0:69:ec:b3:
07:aa:a1:a0:98:7f:7b:8d:ea:db:6b:3f:fe:a1:cb:
4b:b4:bf:fc:e4:36:43:74:b4:d2:c1:d4:b4:ab:8d:
88:18:64:f6:60:9c:02:e7:b8:8f:95:9a:9e:a2:ca:
f8:53:2f:d9:a8:aa:a0:3b:55:50:cf:3b:03:c0:d9:
49:52:f1:61:1c:bd:e5:15:0a:50:11:f0:7d:5c:bc:
dd:72:3d:d0:65:90:08:1f:34:7f:e1:1e:ba:ec:d1:
6e:13:a1:91:f2:36:76:40:32:f0:0b:03:cf:5c:b4:
a2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A1:5B:8E:0A:D3:72:A4:13:32:27:06:56:B6:98:36:4C:3B:5A:CB
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4E48A964143411EE92AFE3454AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.214.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:9f:04:bc:37:d0:ed:b0:8d:ac:3e:ac:15:cd:13:9b:fc:9b:
59:26:a0:2b:1c:56:64:16:0e:eb:2e:ad:63:29:4e:3a:19:41:
82:d7:2e:42:f8:7a:b9:78:46:28:31:92:60:11:f4:28:88:d3:
b8:c1:8d:6c:e2:17:97:e2:89:95:20:1d:c0:34:55:18:d5:8a:
6e:55:84:01:92:87:b2:73:a5:bc:a5:89:da:dc:15:07:a9:a3:
8e:08:2f:ae:58:88:d4:d9:fb:32:5b:46:d5:98:84:77:de:09:
62:a4:78:5e:94:5a:eb:23:99:ad:df:ce:a3:87:df:72:b7:4c:
c7:9f:39:ab:12:7e:8a:9e:68:f2:48:6a:ba:36:91:00:57:25:
5b:88:db:33:37:95:67:95:9f:2c:94:7c:f2:59:9a:82:5d:7d:
47:ad:70:04:59:e2:43:18:de:c6:1e:92:2a:f4:a5:75:e1:fd:
57:fa:b6:fa:05:ad:76:c3:cc:15:01:cc:f4:c0:eb:bd:f4:7d:
ad:ad:9b:ec:60:3b:94:a0:f6:b5:e3:70:1c:6b:12:18:c0:fc:
37:57:c8:39:19:ed:89:6a:de:03:20:d8:15:1e:01:02:04:8c:
5e:79:39:76:28:e8:82:4d:7f:68:20:88:cf:e7:16:40:e2:9c:
28:78:4b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 14:46:15 2024 by rpki-client on console-fra.rpki-client.org