Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5C1A10DAADED11ED8FD2EBB0F1222468.roa
File: 5C1A10DAADED11ED8FD2EBB0F1222468.roa (raw, json)
Hash identifier: ePAlpmd+1Z29PTwlVqcccQK4gOmiseh81kUu2Ua8Owc=
Subject key identifier: 13:87:D7:CD:F5:21:95:41:8C:39:6D:C0:16:FF:56:A1:F1:77:69:8C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0BBA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5C1A10DAADED11ED8FD2EBB0F1222468.roa
Signing time: Thu 16 Feb 2023 11:30:48 +0000
ROA not before: Thu 16 Feb 2023 11:30:43 +0000
ROA not after: Sun 16 Feb 2025 11:30:43 +0000
asID: 147176
IP address blocks: 154.16.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Apr 2023 13:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3002 (0xbba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 16 11:30:43 2023 GMT
Not After : Feb 16 11:30:43 2025 GMT
Subject: CN=63ee13e8-b0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:94:6f:77:a8:a1:03:f4:ab:3c:04:2c:cb:13:
a2:ae:b7:13:04:54:4b:7e:6a:a2:f0:0f:0c:87:36:
52:bf:ab:5f:8c:27:ed:10:2b:70:38:d3:4b:5c:f0:
4d:ab:b3:b1:6f:20:12:ef:35:79:68:f9:b8:07:92:
08:b2:dc:4d:da:d4:17:20:23:32:f6:73:b0:dc:e1:
c7:af:17:54:c2:1b:4c:b5:a4:4a:1f:ad:0b:22:06:
03:7a:9a:7d:82:47:16:c7:4b:7a:18:ac:f2:d0:79:
2c:1d:67:8b:16:22:8c:be:c5:06:36:0f:e4:d4:41:
6e:94:57:37:df:b6:54:cc:a1:cf:70:c1:0f:44:52:
92:eb:ea:0e:1a:28:90:a6:d1:94:b5:a8:a8:38:20:
80:41:de:63:41:9b:6a:ae:4f:ea:5c:52:37:11:32:
9e:48:3e:86:45:cb:18:40:5a:a2:95:da:43:9e:26:
7a:98:2b:29:9e:b0:83:3e:e5:fc:12:62:b8:6f:a1:
d4:db:4c:22:18:0f:c9:73:1b:63:d2:07:70:89:54:
f3:18:9c:ae:36:88:83:5d:6d:09:b2:b2:aa:5f:53:
35:cc:de:37:32:f1:0f:98:22:63:02:49:38:b4:73:
f5:cf:b0:01:b7:4d:65:5a:99:5b:1f:b1:a1:ae:7d:
9c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:87:D7:CD:F5:21:95:41:8C:39:6D:C0:16:FF:56:A1:F1:77:69:8C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5C1A10DAADED11ED8FD2EBB0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.156.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ba:6d:12:0f:3e:d5:a6:a6:36:e9:db:93:da:b0:11:37:6b:
aa:b5:0f:f4:c4:5e:0f:ca:bc:f7:8a:19:da:1d:47:78:4d:1f:
2a:d6:02:a8:0f:80:ae:fe:b1:25:73:35:19:7e:90:b6:d7:ce:
7a:2b:e5:4d:6b:4a:fd:bb:14:fb:2a:1e:cf:c9:31:9f:3f:ba:
7b:41:06:83:ff:77:8d:a8:a9:43:db:91:2e:20:06:77:0e:1e:
3d:f8:51:00:bb:8c:37:3c:2a:50:2a:14:03:01:32:59:c0:d0:
ef:b0:81:18:1a:05:64:6e:7f:9c:58:a8:b4:ff:c8:e9:ff:33:
14:6e:27:3a:51:bc:1e:c8:ed:ea:0d:18:a6:a2:16:96:d6:8c:
b1:9b:75:36:56:d9:d3:67:7e:50:14:52:06:9b:06:d8:b4:99:
73:2e:50:9f:0e:31:cd:6c:8e:c3:85:8d:42:20:4d:53:f2:61:
b3:cc:ea:3d:e8:89:9d:6e:43:9a:9d:3b:fe:34:92:51:a3:5a:
ec:55:54:53:1b:4a:45:b8:37:88:25:22:fa:b4:da:56:43:2e:
c0:3c:a5:09:4a:48:39:d3:7d:02:7e:10:ab:7b:17:1b:1d:5f:
16:db:90:48:b1:4d:1f:42:e4:58:14:66:68:69:b8:bf:e0:68:
89:09:26:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:54:35 2025 by rpki-client