Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7209CCACB18111EFB1F08951762E951A.roa
File: 7209CCACB18111EFB1F08951762E951A.roa (raw, json)
Hash identifier: QXbwC5biYeN1d3zwyqzNyYfZzG/SgMB+YheNjQB+C3M=
Subject key identifier: 46:E2:31:F1:4C:CE:8A:18:E6:4F:5D:0E:6A:7A:CD:D6:4B:DE:79:7C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1928
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7209CCACB18111EFB1F08951762E951A.roa
Signing time: Tue 03 Dec 2024 14:18:19 +0000
ROA not before: Tue 03 Dec 2024 14:18:16 +0000
ROA not after: Thu 03 Dec 2026 14:18:16 +0000
asID: 32181
IP address blocks: 154.16.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Dec 2024 06:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6440 (0x1928)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Dec 3 14:18:16 2024 GMT
Not After : Dec 3 14:18:16 2026 GMT
Subject: CN=674f132b-0317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e5:21:df:ff:61:5b:7b:ec:49:96:21:2b:ea:
67:ff:bd:7a:6b:9f:88:3e:a7:4e:5f:2a:55:03:8c:
04:aa:75:cf:a2:e3:ab:e7:72:ca:e1:72:7e:6d:2b:
d5:98:0a:e7:0b:81:53:e6:2e:cd:ef:81:43:62:e8:
3f:72:bb:ad:15:2f:ce:3b:53:ab:f5:67:a2:4f:93:
69:c8:01:85:7a:e5:f4:82:b4:04:5a:09:ba:af:1e:
4d:0d:13:37:e7:87:48:ad:e7:ed:dd:f5:8c:29:45:
d2:e3:19:a5:a4:c9:9b:2b:9c:3e:88:87:52:17:48:
84:e4:90:b4:66:15:4c:2d:55:2d:f1:f7:4f:10:ca:
b1:c3:67:d7:14:4f:2f:25:b3:d9:a4:4d:e0:5d:6d:
02:6f:e1:af:52:3b:c3:b1:a2:5e:f9:95:c7:92:0e:
df:1e:c8:f4:4a:11:3b:3d:df:03:bb:9e:2f:17:54:
19:69:df:9d:55:58:89:87:99:a5:6c:de:c3:e7:c6:
5b:b2:15:4c:d0:2e:50:e8:10:a7:98:67:e9:ea:40:
a7:17:8b:1c:b5:5f:88:af:57:d5:6f:d8:3c:3f:ed:
59:bf:70:a6:cb:e7:88:ea:5c:da:6f:b4:a7:18:a7:
0c:28:07:86:3b:6a:ea:8b:83:23:0d:7f:ff:f6:46:
b3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E2:31:F1:4C:CE:8A:18:E6:4F:5D:0E:6A:7A:CD:D6:4B:DE:79:7C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7209CCACB18111EFB1F08951762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.59.0/24
Signature Algorithm: sha256WithRSAEncryption
56:61:93:d9:b6:7a:ee:ec:59:3d:f7:f0:46:87:7b:f1:2f:7b:
3a:c3:5e:a7:2b:a5:ab:5f:c0:51:1f:30:5a:31:86:37:74:b4:
e0:55:9e:48:8a:56:82:e0:39:81:66:73:2b:d0:26:df:4d:0a:
89:b6:f8:df:aa:69:75:a9:ab:63:b9:f6:23:52:6e:cc:1b:2e:
1b:5e:4d:58:a8:75:48:e0:1d:9a:8c:e2:a2:2d:28:08:18:da:
27:c3:ed:b0:44:30:33:a8:00:80:98:3f:af:9a:9e:85:dc:b3:
07:36:81:81:e9:15:09:cd:10:06:5b:6f:88:49:f1:8a:a8:66:
4a:12:9f:ef:85:21:61:8d:84:4f:52:19:b1:88:f2:8b:ad:b2:
c5:a8:ae:a3:55:fc:16:6f:a0:68:2d:1c:d9:cc:db:0d:18:0c:
b6:74:c3:e5:3b:31:dd:08:c5:2a:16:2b:94:e4:75:86:78:d7:
c2:ef:26:0c:53:29:60:65:0e:0a:1b:e3:c1:0c:84:92:a6:68:
c4:d6:79:24:59:fa:bc:2a:8f:5f:80:cd:12:16:59:d6:be:32:
fb:9a:37:78:de:30:6f:47:36:00:f0:63:64:d8:a4:18:28:62:
d0:8b:3f:6b:77:c9:54:1b:7e:ef:5c:4b:59:39:1b:5f:9d:64:
09:6d:00:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:56:46 2025 by rpki-client