Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5EE592A2C77011EDBCB5EED2F1222468.roa
File: 5EE592A2C77011EDBCB5EED2F1222468.roa (raw, json)
Hash identifier: 0loUz8xAso1tGDhjGuY1zKJxhdufSDv66hkxGGSIzy8=
Subject key identifier: 9B:D5:F5:C4:7A:2D:58:3B:EE:57:EE:D0:EB:08:16:74:F0:EC:ED:82
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D03
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5EE592A2C77011EDBCB5EED2F1222468.roa
Signing time: Mon 20 Mar 2023 22:41:36 +0000
ROA not before: Tue 21 Mar 2023 22:41:30 +0000
ROA not after: Sat 22 Mar 2025 22:41:30 +0000
asID: 60707
IP address blocks: 154.16.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Apr 2023 07:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3331 (0xd03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Mar 21 22:41:30 2023 GMT
Not After : Mar 22 22:41:30 2025 GMT
Subject: CN=6418e120-98b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:09:9b:d0:14:02:37:1d:04:a4:da:15:d7:
93:ca:91:39:18:4c:29:1e:3b:0c:2b:86:36:e8:f0:
2d:a3:29:28:15:94:73:0e:6f:d3:b5:86:36:53:c1:
35:d0:91:0a:78:35:b4:56:11:6c:da:0a:57:c6:c7:
17:56:d3:16:c3:ed:bb:8a:cc:d1:0a:74:af:05:79:
16:98:de:e5:5a:84:6b:78:1e:d0:b2:ef:13:c4:9e:
b1:4b:e7:71:86:57:77:c0:49:14:14:e9:d1:70:ac:
fd:c7:f9:6f:4e:6e:90:ad:e4:76:ce:30:db:18:21:
c6:24:2c:2a:8f:3f:a8:5c:00:81:62:e6:b5:6e:97:
87:32:91:d6:7d:70:8c:51:88:65:83:62:76:da:20:
35:37:64:b9:b9:f5:42:b1:85:50:e5:18:0d:a0:74:
db:de:54:9c:ff:d5:e6:02:b9:80:81:f8:95:78:1c:
d4:0f:c2:fd:a8:c6:9b:a2:42:fd:83:3b:4c:f6:7c:
88:99:f9:0f:76:bb:d2:c8:e8:56:2f:87:7e:86:a6:
8b:be:b0:42:d4:1f:01:5c:9b:fd:c1:44:a2:29:ca:
11:a5:1f:dd:83:08:b4:ee:ba:3b:51:72:a8:ab:6b:
fa:d1:f9:d4:02:58:5d:05:f3:9f:dc:92:fb:82:7c:
4e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D5:F5:C4:7A:2D:58:3B:EE:57:EE:D0:EB:08:16:74:F0:EC:ED:82
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5EE592A2C77011EDBCB5EED2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.254.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f7:90:b1:3c:a3:84:79:e4:13:c8:04:b9:3f:55:49:63:1a:
31:fe:29:54:9e:2e:ae:83:52:0d:7c:49:2c:1b:88:b7:28:d7:
d2:50:ef:d4:49:62:e7:db:d3:3f:da:65:5b:4b:8e:49:ee:e6:
78:1b:dd:42:36:a6:1b:85:a1:e0:51:38:95:6f:e4:3c:1e:95:
ab:fb:73:54:5a:29:4d:47:c4:04:18:bc:a4:b7:8d:d1:0d:20:
3d:7e:1b:0d:4a:ef:f2:75:16:01:82:10:64:ef:1f:46:79:6d:
e0:ed:97:3b:1c:57:21:d1:d1:ff:9b:c6:9e:49:55:d2:73:8a:
77:e3:af:5a:ad:be:d5:a1:2a:ff:a9:e0:19:ae:a1:65:fe:e3:
0d:68:3f:c4:29:2a:40:a3:db:63:44:e1:7c:73:99:2b:31:62:
54:64:40:dd:9a:6d:4b:35:76:6b:7a:1b:4a:42:6f:9a:db:56:
18:c7:7f:75:bd:95:b3:f6:b4:aa:c8:6c:c3:7f:65:74:8e:c4:
a4:32:3a:4c:36:0f:f9:4f:3f:e8:d6:d2:eb:68:f5:b7:cb:41:
9b:b1:b0:a2:46:62:99:41:91:f0:d8:21:94:72:25:20:0e:04:
2c:90:9a:4f:49:1e:ae:6a:da:af:1e:c2:28:ba:bf:10:52:12:
66:9a:5f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:48:29 2025 by rpki-client