Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/55EBCC5AFDEB11ED8409B4404AD9E6FC.roa
File: 55EBCC5AFDEB11ED8409B4404AD9E6FC.roa (raw, json)
Hash identifier: 6y1xLZ3Pwn+ifPY4uHZtTSYes9coNRSbneK53XXc/wI=
Subject key identifier: A0:32:1B:EA:EF:BB:53:AC:82:8D:07:71:DF:BD:E3:8E:B6:AE:57:CE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0DEC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/55EBCC5AFDEB11ED8409B4404AD9E6FC.roa
Signing time: Mon 29 May 2023 06:37:52 +0000
ROA not before: Mon 29 May 2023 06:37:48 +0000
ROA not after: Wed 28 May 2025 06:37:48 +0000
asID: 208948
IP address blocks: 154.16.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jul 2023 06:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3564 (0xdec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 29 06:37:48 2023 GMT
Not After : May 28 06:37:48 2025 GMT
Subject: CN=64744840-af2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:87:0a:9d:30:36:98:28:7a:c5:77:64:27:
38:56:06:bd:ed:03:94:64:af:cd:d2:f9:92:4d:d0:
b4:bc:dd:88:a4:3e:d0:85:5c:e0:96:ae:60:7a:f7:
ac:2b:01:24:71:33:76:f0:78:d0:87:12:d1:1a:2b:
53:89:d4:7c:45:8e:76:9a:f3:35:27:7b:57:b2:88:
2c:9d:29:9c:7c:d4:3d:f7:bb:42:f4:26:70:78:1f:
9f:63:35:14:16:76:4a:6b:3d:4c:d1:9a:ea:02:96:
f0:58:53:11:78:22:2d:21:4e:b1:be:91:c2:8c:15:
bc:97:7d:9f:b0:c1:9d:4f:59:aa:e9:42:4a:23:4d:
fd:d2:0a:fb:ed:e2:dc:15:0b:ca:01:ea:18:13:2e:
4e:9d:83:dc:95:e3:97:8a:1a:8a:c1:35:76:35:da:
eb:be:84:49:d6:c0:63:f1:5d:15:e3:ce:51:e3:3a:
f6:d1:f4:60:42:80:da:7d:48:d9:2e:16:8f:95:ba:
08:ec:8a:1d:c7:61:b5:4f:c9:b7:a2:ab:e0:c0:ce:
4b:25:fa:26:ec:0b:e7:c6:6a:10:03:59:43:11:cb:
a1:bf:18:28:f8:ed:c5:96:f6:22:48:84:72:30:fe:
37:88:d0:12:14:c1:b7:6e:4d:89:c7:a6:d7:80:3f:
a6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:32:1B:EA:EF:BB:53:AC:82:8D:07:71:DF:BD:E3:8E:B6:AE:57:CE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/55EBCC5AFDEB11ED8409B4404AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.23.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:43:db:1d:88:3c:88:d0:45:09:4d:7e:d3:91:ce:a4:16:68:
44:e7:63:8f:8d:e8:bc:bf:26:f2:d9:04:74:06:b4:f9:2d:00:
d9:3b:c5:0f:9d:ac:f0:6f:bf:f5:49:93:0e:b5:5c:62:8b:7f:
67:e4:32:7d:40:8b:fb:80:29:d9:8a:6d:76:cd:0c:b5:94:dc:
78:a3:8b:00:a1:81:e8:e7:83:21:15:24:24:bd:9d:1f:7a:c3:
9d:0b:7c:67:c5:b8:a4:a0:ef:3c:e0:3c:d3:ee:02:ee:90:ba:
e3:59:3f:de:83:79:83:44:ff:a0:d5:5a:e4:1e:92:6c:76:c3:
36:b6:bd:8b:0a:69:c3:ec:01:50:00:b1:d4:22:57:19:ea:b9:
78:bf:1d:26:0b:a4:4b:bf:19:02:0b:71:9c:c0:73:0b:df:7d:
88:36:fd:7b:83:f5:1e:46:21:7c:c7:91:f7:db:db:56:72:7f:
26:0e:08:62:31:bd:a9:ff:d9:22:85:db:ad:b5:69:9a:0d:6c:
21:3c:2c:34:db:12:13:82:b2:f6:96:4e:18:fd:32:40:71:9b:
a5:e5:61:ad:1a:67:7d:f1:f3:fb:ea:72:19:af:d1:b9:04:e6:
19:52:d5:22:c1:a5:df:71:c4:31:8e:94:8a:f3:9d:9a:0c:ea:
b9:12:00:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:12 2024 by rpki-client on console-fra.rpki-client.org