Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6BD231CCB43911EDAD6EC99EF1222468.roa
File: 6BD231CCB43911EDAD6EC99EF1222468.roa (raw, json)
Hash identifier: InCY4AfuRR7oDLD3N2x3xwimj7JOrlIIfMGdKwGHpvM=
Subject key identifier: FD:B2:6D:35:BA:38:EB:A6:5C:A3:15:AF:98:9A:DB:F8:25:5F:02:EA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0BEF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6BD231CCB43911EDAD6EC99EF1222468.roa
Signing time: Fri 24 Feb 2023 11:50:23 +0000
ROA not before: Fri 24 Feb 2023 11:50:20 +0000
ROA not after: Sat 22 Feb 2025 11:50:20 +0000
asID: 61317
IP address blocks: 154.16.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 17:17:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3055 (0xbef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 24 11:50:20 2023 GMT
Not After : Feb 22 11:50:20 2025 GMT
Subject: CN=63f8a47f-bd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:3e:58:ef:76:18:e8:5a:ce:9b:81:1d:ee:
00:ce:19:ef:fc:5d:1b:e6:e0:2f:06:57:71:f4:5a:
dd:a0:40:bc:b7:03:27:5a:1a:1a:1f:fd:b6:ef:ea:
07:de:37:c3:97:8f:31:d7:65:ad:65:d7:06:9a:a4:
3f:95:65:92:f3:c3:8b:53:df:60:98:73:60:78:b6:
c0:9d:cb:da:ff:6d:ce:a7:42:e8:bb:35:c3:cc:ca:
61:91:45:5d:d6:e6:61:b8:1f:f7:30:e1:1b:5f:ad:
c1:77:d5:40:ce:b3:c4:16:c8:f9:89:ce:67:6b:46:
21:53:bb:28:89:b1:f7:4c:32:f4:a2:4c:2c:27:10:
af:91:7e:ef:54:f5:1c:75:91:33:c6:de:13:0f:19:
79:7e:99:32:9d:90:2d:94:04:42:d7:54:3f:a0:ec:
22:3f:08:0f:41:8a:5e:97:46:62:ca:ac:f8:14:1e:
bb:0b:d9:6a:38:17:ac:1c:fc:45:32:5b:ff:93:5e:
37:67:19:62:c3:b1:1e:9f:d5:15:51:7c:90:82:bf:
3a:bd:b2:a4:ff:af:19:6f:15:32:c5:d2:44:d6:52:
07:19:2d:1d:66:e6:06:e3:aa:bf:2f:ea:57:04:cb:
bf:19:bb:39:e1:b2:77:8c:1f:79:5d:7f:a5:06:27:
25:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B2:6D:35:BA:38:EB:A6:5C:A3:15:AF:98:9A:DB:F8:25:5F:02:EA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/6BD231CCB43911EDAD6EC99EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.18.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:dc:59:34:0c:85:af:af:bb:db:87:5f:f3:b1:88:b8:90:07:
a8:ee:19:e4:80:a8:d9:e8:e0:a4:ba:55:40:19:76:a9:fb:d8:
b4:ab:79:ae:56:ab:65:fd:40:a3:e1:82:20:58:41:07:0a:c6:
48:a5:08:9f:86:e1:d6:1c:56:21:a0:f2:11:e3:1c:87:16:d3:
ac:34:54:5b:96:de:8a:ef:ec:0a:3b:28:f0:49:9c:0a:f8:ac:
c4:a7:68:7c:75:92:16:31:0c:19:32:13:35:e8:ac:58:92:5d:
06:4c:59:b7:5e:8d:d9:9b:e7:95:92:7b:9d:cb:ae:f0:17:e0:
e2:c9:4c:f6:d1:29:6f:ed:c2:d0:25:e3:e0:95:86:56:1a:df:
c6:eb:10:76:22:37:0b:95:4e:b8:f7:98:2e:13:b7:c4:f7:7c:
7c:84:d1:37:97:ea:38:03:54:af:1f:cf:fb:2f:3c:63:4f:49:
4b:13:30:d9:3b:ff:ee:5e:5f:96:c6:3c:dc:9d:49:c6:5d:9f:
04:6d:20:e9:4d:86:4f:83:ca:9a:e3:cd:c7:47:f7:37:fc:42:
02:b4:9d:fa:5b:4f:54:36:83:b5:6a:24:46:ec:f9:a7:ce:c1:
02:9b:55:94:8a:36:87:b3:9c:47:1e:4a:75:9a:3a:e3:6c:ab:
d6:08:7b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:42:37 2025 by rpki-client