Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/778978948C1C11ED82FF81BAF1222468.roa
File: 778978948C1C11ED82FF81BAF1222468.roa (raw, json)
Hash identifier: 2wZ0uewQunuvi/8JCSBKJ4DmkNipeyC4QHowH6jdITU=
Subject key identifier: 37:EC:86:F6:80:17:D9:73:A1:01:73:8A:48:E4:09:B8:D2:81:D4:80
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0B40
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/778978948C1C11ED82FF81BAF1222468.roa
Signing time: Wed 04 Jan 2023 10:42:21 +0000
ROA not before: Wed 04 Jan 2023 10:42:17 +0000
ROA not after: Sat 04 Jan 2025 10:42:17 +0000
asID: 54252
IP address blocks: 154.16.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 12:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2880 (0xb40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 4 10:42:17 2023 GMT
Not After : Jan 4 10:42:17 2025 GMT
Subject: CN=63b5580d-4101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:cf:70:00:ab:0d:f1:b7:da:57:86:8e:eb:
3d:b8:42:66:f0:cd:ab:2e:df:8e:a3:9f:12:f6:7b:
b7:11:fb:50:ad:93:0b:5e:d4:ac:89:c2:ca:6d:6d:
e1:92:0b:44:50:d9:ed:8a:46:83:be:1c:21:2c:5d:
13:42:a2:43:78:83:98:4e:ab:e1:3b:04:85:c8:3f:
2f:6c:8f:2f:27:43:10:34:68:1f:2a:b1:62:c9:ea:
de:4a:ff:ee:8a:9d:54:89:55:4f:13:9a:b1:8c:48:
fb:8f:31:02:4e:7b:df:81:b8:ea:1b:83:d6:f5:60:
75:17:2d:78:30:94:7a:bc:a2:79:48:f4:f1:02:60:
44:89:9b:db:3b:84:97:49:43:0b:bb:79:d4:ea:2a:
6c:51:9f:d9:3d:d0:c0:5a:f9:ea:83:7c:df:18:da:
ed:c7:98:1f:99:6b:ac:d1:11:1c:d1:30:2b:ab:fd:
b7:21:64:ee:32:07:14:28:94:3e:23:27:ef:d3:a5:
67:68:13:1b:78:3d:02:97:cf:cd:87:77:a1:fa:40:
da:8c:c4:fd:d0:98:a7:c8:37:d7:de:cf:29:1c:b6:
1b:02:93:7c:4c:66:80:17:11:0b:5b:bb:ce:0b:d3:
7d:05:4d:73:6f:83:d1:2d:a1:23:c5:13:18:a0:86:
54:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EC:86:F6:80:17:D9:73:A1:01:73:8A:48:E4:09:B8:D2:81:D4:80
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/778978948C1C11ED82FF81BAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.233.0/24
Signature Algorithm: sha256WithRSAEncryption
03:95:f3:84:7d:0d:f8:33:71:1c:ce:54:51:53:59:8e:e5:83:
ca:c1:7a:72:85:7f:84:46:6c:ce:79:ab:da:20:18:d7:e8:87:
4f:14:07:c8:96:5e:72:9f:3e:3e:9f:67:e8:c4:2f:90:a0:9b:
9e:f7:dd:48:99:e6:97:df:2d:2a:68:94:3e:c8:ba:05:b6:49:
46:fa:a0:d8:53:69:56:9c:b3:cd:36:ea:fb:6e:ed:3a:2a:2b:
04:ef:74:ce:76:1b:2c:1c:fe:ce:e4:e2:2d:38:d2:2c:07:2d:
50:7c:fc:9b:48:df:e0:ec:fe:49:96:05:dc:32:48:3b:27:90:
39:a0:fc:4f:1f:5a:4e:9d:42:c9:4f:72:f6:c8:a3:bb:e4:02:
ac:c7:30:a7:d1:fa:9f:39:57:ed:12:90:5d:e5:b7:30:dc:7f:
b5:b2:66:72:f5:ce:d3:f7:f4:42:47:71:0e:be:0f:d1:7d:88:
38:e8:a4:c0:65:4d:4b:d7:d3:ce:53:43:51:e6:95:62:7e:00:
b4:63:d3:99:8e:7a:33:a7:a7:8c:be:fb:16:89:42:5c:b8:bd:
f9:cc:01:ae:c3:3c:16:8c:1e:5c:25:7a:8d:11:ef:98:e2:d9:
6d:e6:cb:77:ba:1c:da:3a:52:73:fc:53:0c:64:fb:c7:eb:7c:
1e:2e:a6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 17:38:46 2024 by rpki-client on console-ams.rpki-client.org