Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/604BC648D47111EEB487B9AA775412E6.roa
File: 604BC648D47111EEB487B9AA775412E6.roa (raw, json)
Hash identifier: go8E8YChULVlb24rcaykEvswx5QEZfizmNudh9i+Jzw=
Subject key identifier: 84:B3:FA:B9:53:63:9B:EA:91:E9:CD:48:D7:20:59:7F:93:25:E3:0D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 14D7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/604BC648D47111EEB487B9AA775412E6.roa
Signing time: Mon 26 Feb 2024 06:36:31 +0000
ROA not before: Mon 26 Feb 2024 06:36:27 +0000
ROA not after: Thu 26 Feb 2026 06:36:27 +0000
asID: 834
IP address blocks: 154.16.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 10:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5335 (0x14d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 26 06:36:27 2024 GMT
Not After : Feb 26 06:36:27 2026 GMT
Subject: CN=65dc316f-eb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:28:aa:58:67:cb:06:56:8d:dc:b0:1e:df:
63:04:f7:bd:2c:36:48:8a:93:58:26:b2:a6:9a:48:
6a:d1:42:d5:41:6d:7e:05:e2:07:10:67:d6:69:74:
42:ee:eb:b4:e1:44:5f:02:b5:85:1a:bf:ec:5c:7d:
19:d0:73:6d:e0:7d:88:5a:48:ea:a6:a0:67:45:0c:
60:f3:af:b0:8f:64:da:f1:6a:92:69:0b:1f:b7:f4:
02:e1:00:eb:b4:99:9a:95:c9:82:fe:a9:e5:a6:29:
d9:6d:df:bd:01:11:83:63:e4:fa:6d:ab:18:43:6c:
44:14:74:af:43:bc:d1:73:92:ca:19:57:51:77:2d:
fe:8a:e9:7a:58:20:9a:a3:66:0f:b6:43:93:e4:25:
f4:9e:ee:5d:86:36:66:a9:70:b3:e0:05:bb:8a:3e:
ab:03:c6:6b:e4:9f:dd:59:95:5c:4a:06:74:c6:01:
34:a3:f4:80:dc:81:f9:cd:e7:f1:f3:c6:a3:f4:bf:
12:90:32:92:5a:11:0f:55:0b:17:f0:96:45:2d:a4:
21:10:06:b8:7e:ce:05:93:29:af:1b:27:0a:27:0b:
d7:51:3d:fe:f3:ba:08:98:d9:74:c2:21:30:58:0c:
7a:62:fa:42:35:83:e1:9b:21:f9:56:2d:3a:d0:f8:
1b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B3:FA:B9:53:63:9B:EA:91:E9:CD:48:D7:20:59:7F:93:25:E3:0D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/604BC648D47111EEB487B9AA775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.52.0/24
Signature Algorithm: sha256WithRSAEncryption
89:91:10:a3:1a:2e:a0:86:c8:b3:de:b3:38:a6:24:72:46:30:
e3:7d:73:ce:a6:83:83:7e:32:28:1b:3a:c8:0d:64:a0:68:97:
7b:85:04:32:42:a9:a9:9c:7f:68:8d:c8:d7:a9:c1:7c:43:08:
78:2e:fa:0c:30:6a:7e:41:be:38:a9:2d:c0:95:9e:eb:55:8c:
4d:70:e9:54:58:72:84:8b:7a:3b:08:86:77:bd:08:bc:8e:13:
37:25:a5:23:68:c9:1a:bc:02:5c:5e:08:97:bc:75:a0:c5:23:
e6:d2:0f:cb:b8:a3:76:14:ac:32:c7:7d:94:a3:59:17:ae:28:
c2:77:cc:21:48:ac:6f:1b:54:04:f4:88:1d:e5:4f:7f:d9:01:
29:e8:83:7c:8c:96:d4:e3:77:e4:fd:36:90:e2:20:f5:ef:a8:
ad:b3:12:d0:bc:68:e5:eb:db:ad:0a:4f:b7:e3:3b:16:a9:a3:
e3:9d:b5:90:0b:1e:e1:66:36:98:eb:14:c9:ba:d3:ac:42:2e:
5f:89:a3:7e:b8:3f:cd:cc:ef:34:c7:79:86:89:9c:e3:31:ad:
de:63:1a:aa:3d:33:83:cc:5f:55:33:4d:39:d0:72:4a:4e:34:
67:9d:a5:d2:5c:94:50:f8:08:57:28:ca:3b:47:48:12:41:b4:
8e:8a:2a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 13:25:27 2024 by rpki-client on console-fra.rpki-client.org