Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/876505EE7A3B11EFA1FF146C762E951A.roa
File: 876505EE7A3B11EFA1FF146C762E951A.roa (raw, json)
Hash identifier: 0fhkCPL0ANmgU56SXkJLlgYf2hbXiULqCkdqZ1PJjtk=
Subject key identifier: FB:05:FC:07:BA:48:B5:91:21:2F:8E:FD:92:D6:36:CB:3E:D7:FF:EE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1829
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/876505EE7A3B11EFA1FF146C762E951A.roa
Signing time: Tue 24 Sep 2024 06:09:17 +0000
ROA not before: Tue 24 Sep 2024 06:09:12 +0000
ROA not after: Thu 24 Sep 2026 06:09:12 +0000
asID: 834
IP address blocks: 154.127.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 09:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6185 (0x1829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Sep 24 06:09:12 2024 GMT
Not After : Sep 24 06:09:12 2026 GMT
Subject: CN=66f2578c-35e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:29:dd:74:30:1d:95:3a:c7:e2:fe:8a:8e:
34:2f:14:97:e2:97:42:cc:97:2a:00:ea:3c:68:c2:
2c:79:27:f3:74:b2:2b:bb:7c:63:21:9c:6b:27:9b:
8f:0f:fa:b5:f9:7c:6a:1a:b4:b6:09:b4:85:37:49:
cb:69:85:2e:18:eb:a3:d1:5f:1e:2c:ae:a8:50:09:
66:7f:77:2f:2f:db:f3:2a:3e:50:8e:a1:d8:2f:a0:
ed:90:ca:35:a7:2f:c0:99:1a:19:44:3f:51:c8:ba:
51:d7:8c:8d:54:8a:4f:b6:8c:5d:7b:68:49:75:0e:
f9:05:3e:35:f3:2a:b8:3d:ac:32:aa:03:55:ff:5b:
ea:1d:fa:65:78:22:ae:8f:a1:01:13:4c:f2:d4:2a:
59:a3:da:5d:e7:b0:66:90:46:fa:ef:14:85:91:12:
43:b1:5f:38:d7:11:f3:bd:84:b5:90:c9:6a:e6:d1:
3d:c2:3c:fe:3a:c9:da:e3:1a:ee:5a:cc:58:51:b5:
59:41:59:58:fb:2e:c4:db:e3:8a:46:8b:00:f6:c4:
df:65:a2:c9:ed:ce:fc:3e:a4:53:b5:2b:d7:18:27:
da:7c:9f:3c:b8:ac:0e:ab:a7:1c:b0:07:fd:0f:77:
53:16:02:47:1c:ba:21:99:3d:f1:d8:82:ce:ce:44:
16:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:05:FC:07:BA:48:B5:91:21:2F:8E:FD:92:D6:36:CB:3E:D7:FF:EE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/876505EE7A3B11EFA1FF146C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.59.0/24
Signature Algorithm: sha256WithRSAEncryption
27:0c:0f:e2:0f:67:1c:32:7a:1c:e1:a7:b6:4a:f5:ed:62:3a:
2d:67:bd:13:62:c4:33:bf:4f:34:16:1a:2e:82:9b:19:1d:51:
8c:19:e2:1c:d1:26:78:a4:03:e9:4d:c1:2d:c8:0f:57:23:4f:
6b:66:9e:6d:fb:2b:d3:ac:86:4c:69:87:32:11:e1:e8:a1:06:
67:1c:99:34:05:6d:9f:7c:6a:a1:a4:3b:c2:b2:4e:93:3c:b7:
98:df:80:15:9c:56:9b:6d:f0:bc:78:61:7b:3e:4e:ed:56:4b:
4b:1f:0c:85:a8:7b:74:a7:6a:ab:6f:82:52:41:e8:d8:e9:9e:
f8:70:90:a0:2e:4d:f5:eb:45:5b:40:24:70:d7:97:ae:61:e3:
8b:8c:63:d7:41:77:e6:65:99:44:41:a9:f1:aa:4e:73:9a:2a:
36:b2:1b:6d:7a:2b:6f:d5:e4:aa:a1:98:30:00:a7:49:22:86:
b5:3b:58:63:3c:d8:73:e6:0a:73:76:08:4e:f7:39:2a:05:ed:
ff:9c:00:cb:89:92:d5:6b:49:25:18:29:56:be:8d:c7:0a:1d:
fc:4a:34:e8:3a:27:4c:4b:25:96:f6:c1:c8:13:a3:c0:27:df:
b7:f3:87:6e:42:4b:15:b4:8b:61:72:31:e6:97:7d:28:09:ee:
95:28:44:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:58 2025 by rpki-client