Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/63E4F6C6B43D11ED870A4EAAF1222468.roa
File: 63E4F6C6B43D11ED870A4EAAF1222468.roa (raw, json)
Hash identifier: Zrse7gspVkmmul5iZgeCzO0TE3fjh2xZCzJC/fal9Nw=
Subject key identifier: 37:B3:DB:6F:95:5B:68:5A:9A:66:63:2E:58:67:6B:EB:C6:04:C6:FE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C0D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/63E4F6C6B43D11ED870A4EAAF1222468.roa
Signing time: Fri 24 Feb 2023 12:18:48 +0000
ROA not before: Fri 24 Feb 2023 12:18:43 +0000
ROA not after: Sat 22 Feb 2025 12:18:43 +0000
asID: 61317
IP address blocks: 154.16.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 07:35:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3085 (0xc0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 24 12:18:43 2023 GMT
Not After : Feb 22 12:18:43 2025 GMT
Subject: CN=63f8ab28-3380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:2d:c4:66:4d:f5:5f:e4:0c:d9:8c:e6:87:
f4:c4:bb:af:3c:cc:a7:88:3f:23:40:cf:6e:4d:b7:
66:48:af:d7:ef:3a:03:d1:f5:43:4e:ca:46:90:6f:
80:cb:26:ec:f2:94:e0:74:b4:63:2e:9b:78:39:c7:
dd:b6:25:5d:b6:e1:fa:f8:6f:bc:23:51:b6:c5:13:
e4:8c:6a:19:9b:28:bf:36:23:bd:2e:4b:24:cd:48:
bb:0a:7d:98:2f:74:da:d9:17:ac:25:2a:41:83:81:
88:73:ea:bb:7c:5c:74:e0:08:a6:c5:d3:72:79:b3:
6d:7e:6b:95:c2:d4:0b:6f:cb:85:ad:2d:7e:6c:25:
26:ca:18:2b:58:8b:a8:48:4b:84:4f:27:49:83:84:
b3:ea:2c:fc:c1:4f:8a:68:ca:fd:13:0f:ab:ff:75:
3a:d6:82:29:75:8e:64:fb:37:c5:c5:49:71:3c:77:
44:a8:33:1f:27:8a:9c:f8:f0:de:b5:ef:8e:62:7e:
1a:c8:e6:ae:d0:26:e5:f2:07:0e:97:f2:dd:9d:19:
1c:28:8c:1f:4f:95:b0:e9:bc:02:96:f7:21:2d:fc:
bc:e9:67:2e:31:08:7d:1d:ad:f6:0c:eb:db:a9:97:
cc:46:72:b0:c8:55:0b:ac:fb:d6:f5:1f:58:c9:49:
83:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B3:DB:6F:95:5B:68:5A:9A:66:63:2E:58:67:6B:EB:C6:04:C6:FE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/63E4F6C6B43D11ED870A4EAAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.44.0/24
Signature Algorithm: sha256WithRSAEncryption
84:e3:07:46:50:bc:f1:57:55:bb:bf:28:6d:42:90:67:b3:c6:
71:96:04:1f:57:d4:0e:9c:66:8c:5c:67:0a:19:45:75:c6:2b:
62:8b:b6:8d:15:2a:78:a7:74:65:8d:f7:85:97:b1:c2:7b:28:
1e:95:77:86:54:dd:fc:75:43:47:82:3a:11:c3:33:c8:64:e4:
39:a2:ae:fc:85:3d:8a:75:85:c7:da:aa:74:ba:9a:bb:86:04:
29:d9:b9:d4:6b:fc:71:93:99:62:20:9b:62:e6:a2:9b:e7:a1:
01:07:68:ce:15:d1:59:8d:da:d4:0a:65:ec:7e:d0:1c:ab:a6:
2a:33:88:6d:89:3d:86:2c:a8:dc:59:05:17:c7:9d:23:55:6a:
af:63:63:a2:0b:f6:d3:62:d8:32:50:15:36:47:1e:9f:cf:e4:
d4:00:8a:23:b7:63:85:5c:c8:e0:cc:9b:d8:81:6e:98:72:79:
68:f2:cc:91:b9:e2:26:3e:99:27:d4:47:6f:65:4a:55:5b:f0:
38:e1:09:8a:98:72:9c:95:cd:02:fa:74:70:df:b2:74:bc:36:
37:91:37:27:dc:5b:42:86:6a:5a:9b:7b:d3:da:31:12:3f:01:
8a:ce:26:36:0c:43:3c:ea:a9:f5:61:80:4f:c8:8a:71:7d:a4:
d7:51:31:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:41:11 2025 by rpki-client