Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/58CF43D0CBFD11EE9DE164C5775412E6.roa
File: 58CF43D0CBFD11EE9DE164C5775412E6.roa (raw, json)
Hash identifier: +SCNkOO/SqPHqAZJvAPd7TrTNamuI0A3y3Ni5M1L10g=
Subject key identifier: 6F:D8:58:E2:36:0F:ED:89:85:E5:31:A9:28:87:05:9D:40:0D:96:21
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 14B9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/58CF43D0CBFD11EE9DE164C5775412E6.roa
Signing time: Thu 15 Feb 2024 12:25:47 +0000
ROA not before: Thu 15 Feb 2024 12:25:44 +0000
ROA not after: Sun 15 Feb 2026 12:25:44 +0000
asID: 834
IP address blocks: 154.16.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 10:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5305 (0x14b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 15 12:25:44 2024 GMT
Not After : Feb 15 12:25:44 2026 GMT
Subject: CN=65ce02cb-e29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:a6:33:38:c4:a4:87:f2:66:0b:79:6b:22:
b8:bc:65:3a:af:58:14:a4:12:e3:c4:d1:40:dd:bc:
41:c1:2a:8c:8d:04:7a:49:16:eb:2d:6f:62:cb:b9:
23:fa:aa:d3:ff:9b:a7:2a:45:68:58:f6:fb:2f:08:
91:72:aa:ea:25:4a:26:bf:6b:ce:06:ce:18:71:bc:
84:88:62:0b:93:e7:5d:4c:28:dc:41:b1:e7:8e:f9:
97:32:c9:0a:a9:55:50:87:c1:2f:27:a5:9f:1d:fb:
4b:aa:f6:7f:98:93:72:05:5e:bf:f9:41:c7:d2:50:
55:d5:05:45:85:41:9a:47:73:12:fc:58:75:c6:f2:
60:63:d6:8a:2d:aa:32:da:e1:64:68:81:37:5c:9e:
0c:a2:ec:93:de:f8:84:ba:7c:b0:68:d9:23:ed:10:
4c:4e:59:f2:08:e4:11:b3:d2:0f:05:02:f1:b2:9b:
ba:ab:b2:2f:9f:ef:34:1a:e3:ec:7f:22:1a:76:cf:
c6:34:07:be:13:d0:c4:7a:cf:b0:8d:03:37:e2:ee:
3b:86:00:28:a8:47:44:f3:a0:c0:b6:b0:03:a7:f5:
81:11:c0:c5:0d:00:58:a7:99:d0:a1:94:c6:a6:94:
af:76:2c:3c:ff:cd:98:a5:61:e3:70:7e:d9:80:ab:
79:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D8:58:E2:36:0F:ED:89:85:E5:31:A9:28:87:05:9D:40:0D:96:21
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/58CF43D0CBFD11EE9DE164C5775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.123.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:72:c1:77:ce:67:38:06:40:92:55:c9:b2:26:a2:70:2c:9a:
44:87:37:ff:18:bb:1c:bf:aa:e1:3e:cb:25:44:8d:98:f1:c5:
c4:b6:33:d5:7d:08:1a:36:fa:5c:1f:07:3c:85:4f:65:ac:41:
f6:d5:ab:aa:5c:58:92:94:c2:05:f7:9d:63:5b:23:40:f0:7d:
3f:09:ed:da:96:da:6b:ed:70:27:c9:b4:04:40:22:c6:1b:a4:
68:39:49:02:94:14:66:70:e4:20:ec:02:c7:be:8d:ad:f6:5b:
53:d0:82:6b:ed:3e:08:ca:69:bb:b6:cb:78:7c:b6:1f:25:29:
97:e8:c8:f7:79:60:64:96:c1:75:de:f8:80:0a:74:59:f4:94:
22:0b:c2:e2:32:ea:0a:c1:76:bc:90:7b:87:31:73:65:07:9d:
f7:50:22:fe:00:09:63:c1:61:05:3e:a4:17:c3:d8:4a:a9:35:
73:f5:bd:e8:09:fe:24:12:24:06:ac:a8:03:db:47:be:4a:8f:
34:5a:07:11:43:b4:dd:5c:67:c7:b1:c6:62:a9:aa:73:70:b5:
d8:2b:af:c9:49:52:a9:50:71:f1:34:ae:8d:41:6c:fd:38:51:
0d:66:63:65:03:e1:91:40:bd:49:37:e4:08:92:2b:7b:aa:0b:
9e:2d:fe:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 15:26:29 2024 by rpki-client on console-ams.rpki-client.org