Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/56E12230F67A11EEA71908C1775412E6.roa
File: 56E12230F67A11EEA71908C1775412E6.roa (raw, json)
Hash identifier: MysqhNgBbgbLBpOimkUZj4JUQYVKgPYF+PXX7NF0teI=
Subject key identifier: F8:C2:31:E1:21:0F:13:72:B6:32:B0:41:B3:5A:55:AF:79:9B:AE:C1
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 159B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/56E12230F67A11EEA71908C1775412E6.roa
Signing time: Tue 09 Apr 2024 14:06:20 +0000
ROA not before: Tue 09 Apr 2024 14:06:17 +0000
ROA not after: Sat 11 Apr 2026 14:06:17 +0000
asID: 834
IP address blocks: 154.16.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 12:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5531 (0x159b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 9 14:06:17 2024 GMT
Not After : Apr 11 14:06:17 2026 GMT
Subject: CN=66154b5c-a85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:3e:65:94:0a:bc:8b:d8:16:8e:64:55:2d:
83:b9:60:dd:ad:1a:ea:c8:b2:fc:a5:0e:16:c8:a0:
7e:fe:30:58:7b:61:7e:94:88:6a:36:9e:f0:e8:97:
d9:f2:96:ab:b6:2e:45:ac:69:e9:91:1a:29:a5:8a:
f9:c4:47:ff:e7:ab:c9:36:bc:6a:f9:1c:df:d7:a3:
5f:bb:5f:56:b9:b3:84:99:7d:92:7b:aa:f0:16:d3:
8a:84:a4:d9:d9:97:d5:37:f2:71:56:78:b4:8e:a9:
a9:5e:19:84:f2:65:e0:03:7e:3d:09:5d:fd:81:1a:
35:2b:8f:89:af:56:86:9b:16:82:b7:54:07:15:4d:
b9:45:3f:7b:c0:0c:d4:7d:3a:f1:7b:6a:94:41:07:
cf:ec:ec:34:ed:2b:da:9f:6b:c9:fa:f4:b2:86:f6:
f5:4e:85:b7:38:57:eb:1f:91:06:24:21:95:5f:92:
bf:44:68:f0:f3:99:1f:3b:25:83:cb:71:8b:6d:a0:
b4:c7:ba:b3:7c:73:d8:43:94:67:1c:c9:0c:86:c4:
df:35:18:4f:4d:38:f4:fc:51:a6:93:22:4c:7a:b2:
90:06:b1:5b:82:a2:e1:f4:f9:f3:63:99:9b:af:26:
52:f4:c0:6a:e5:7b:a0:1c:0d:7a:fb:20:f4:c3:76:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C2:31:E1:21:0F:13:72:B6:32:B0:41:B3:5A:55:AF:79:9B:AE:C1
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/56E12230F67A11EEA71908C1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.0.0/24
Signature Algorithm: sha256WithRSAEncryption
27:26:57:45:96:71:42:42:a5:0f:33:0f:b1:54:88:7b:18:86:
f5:4b:83:27:ee:6f:32:1f:93:0a:2e:e6:a0:a9:04:2b:ee:3b:
35:b5:fc:19:db:45:0b:d3:cf:a3:26:ec:e2:3d:e8:aa:f9:1d:
65:11:d8:7f:6a:b5:b9:1e:8d:69:2f:fe:b9:cc:d6:ee:67:b4:
86:21:37:2d:c9:b8:0e:88:6b:09:03:9d:15:0b:92:66:b3:2f:
04:d1:49:0f:bf:50:39:52:47:7c:0d:76:c0:13:8f:69:98:7c:
51:bd:34:f7:75:68:1c:f6:e9:24:2a:c7:d9:a4:8d:03:2d:b2:
7e:f6:e6:b0:3b:04:67:80:76:ff:12:d7:ab:c3:35:61:2c:5b:
14:4c:60:a6:7e:73:1f:d2:cb:7f:d3:06:23:55:37:c7:00:3a:
97:c9:30:b0:8e:72:aa:2f:0c:6c:09:ed:66:b2:06:c5:6c:c2:
04:f9:64:24:43:a9:29:f5:19:2d:d9:3d:0a:48:74:ff:e9:10:
05:df:cf:3c:3d:b7:4a:be:82:90:34:30:33:96:7f:a2:86:5c:
82:14:54:3b:3f:b4:06:4e:31:a0:c3:ee:a7:27:3e:f4:81:96:
58:1d:1d:43:0f:a1:af:ce:5f:4f:e2:e3:bf:98:15:c2:cb:6c:
db:e1:8e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 16:38:10 2024 by rpki-client on console-fra.rpki-client.org