Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5CBB7CE23F4E11EF9183F09E762E951A.roa
File: 5CBB7CE23F4E11EF9183F09E762E951A.roa (raw, json)
Hash identifier: JDmbEQhIg63ylBDD4LqvHHh2BTu37l8vvJn7rFE1Qvw=
Subject key identifier: 40:BC:B8:6F:7E:48:97:A7:56:AE:27:14:48:FB:EC:7B:44:D7:31:FE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1723
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5CBB7CE23F4E11EF9183F09E762E951A.roa
Signing time: Thu 11 Jul 2024 06:25:27 +0000
ROA not before: Thu 11 Jul 2024 06:25:23 +0000
ROA not after: Sat 11 Jul 2026 06:25:23 +0000
asID: 834
IP address blocks: 154.16.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Aug 2024 08:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5923 (0x1723)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 11 06:25:23 2024 GMT
Not After : Jul 11 06:25:23 2026 GMT
Subject: CN=668f7ad7-00f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:15:41:6e:48:89:b5:86:2b:f1:6c:09:00:4c:
1b:c4:12:74:66:58:af:04:cc:87:1d:fc:bf:86:f5:
0a:62:00:0c:fd:47:00:07:99:f7:89:10:f1:e9:d8:
bf:5b:42:4f:f2:a7:44:6c:98:c2:2f:f3:ff:db:90:
e7:de:af:c3:d5:0b:25:1f:84:74:3e:5b:49:0a:9d:
0a:01:d6:95:94:06:17:ad:96:a0:95:4e:37:57:96:
3a:41:14:96:bd:46:48:45:9a:5a:8f:e8:8f:c7:14:
da:ee:e2:10:98:e1:0d:08:4c:e3:cc:71:46:bb:3c:
30:00:8c:c0:14:c8:e6:2d:e1:e7:ae:e1:ca:ff:a1:
d7:fd:d1:02:88:ba:92:0d:d7:0e:cb:79:79:a5:01:
a4:f6:40:80:eb:07:de:dd:23:ff:69:26:c9:d5:03:
e3:d7:bc:84:c9:ff:86:48:ec:5a:9e:d5:64:a0:fb:
f9:36:3c:87:d7:1b:63:f4:22:22:bd:e9:05:35:e5:
cc:26:a7:3b:ff:4e:00:c3:05:53:49:8a:d8:03:8c:
39:b5:9c:19:62:6c:34:ef:cd:6b:f8:7e:04:92:d2:
c5:9c:11:2b:79:97:1a:cc:c6:84:06:de:19:c7:f4:
84:c5:e2:0c:2b:db:ed:1c:c4:a2:9a:58:02:a7:0a:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BC:B8:6F:7E:48:97:A7:56:AE:27:14:48:FB:EC:7B:44:D7:31:FE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5CBB7CE23F4E11EF9183F09E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.56.0/24
Signature Algorithm: sha256WithRSAEncryption
83:6b:81:4f:fd:d7:71:3a:ec:77:bc:31:82:06:12:d4:2c:f4:
7b:e2:e5:fd:3f:1e:8e:7f:66:b1:3e:7a:5b:12:78:49:51:d0:
cd:06:57:6d:77:4e:ab:2d:ac:60:0c:19:db:09:50:88:e7:ee:
fd:26:5c:1e:ad:93:5a:03:5b:98:61:78:aa:45:04:ef:9b:94:
1a:db:71:17:24:97:ba:cc:7b:65:9b:03:eb:b8:ea:4e:7f:74:
b6:aa:12:bf:ce:99:fc:74:2d:01:30:73:71:cc:7b:52:6d:50:
8f:00:f0:6f:90:48:45:70:2d:82:bf:e9:62:cd:48:ab:d7:a6:
d9:46:ad:27:1c:09:24:24:75:55:db:69:ff:9d:d1:dd:fc:df:
30:c6:1f:5f:6d:8b:11:b7:a9:ca:4c:e6:aa:6e:dc:db:e2:fc:
38:43:40:e5:89:d9:a2:6a:b1:1a:be:55:8f:e0:e4:78:2e:a2:
77:b1:bb:0d:dc:5a:59:d2:3e:49:b1:1e:97:90:db:c4:ab:91:
77:6c:cc:98:43:98:f3:21:da:d8:15:5c:26:be:aa:08:4b:2d:
92:02:c3:c2:17:10:bc:81:dd:0a:cf:95:2a:96:59:d9:16:1f:
0a:b1:6e:bc:58:4d:26:7f:94:e1:5e:b0:11:aa:0c:e3:9a:19:
a9:1a:0d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 3 11:38:01 2024 by rpki-client on console-ams.rpki-client.org