Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8D969FD6110E11EFB4A7516C017001B1.roa
File: 8D969FD6110E11EFB4A7516C017001B1.roa (raw, json)
Hash identifier: 941e5k4IReTDNzRhQ+GBJTSzhxp4Zc+ZQGZDHc406u0=
Subject key identifier: 11:16:AB:99:4C:AA:63:F9:63:67:44:2C:BC:59:42:A7:1B:D1:F5:DB
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1647
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8D969FD6110E11EFB4A7516C017001B1.roa
Signing time: Mon 13 May 2024 09:52:47 +0000
ROA not before: Mon 13 May 2024 09:52:44 +0000
ROA not after: Wed 13 May 2026 09:52:44 +0000
asID: 3320
IP address blocks: 154.16.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jun 2024 09:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5703 (0x1647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 13 09:52:44 2024 GMT
Not After : May 13 09:52:44 2026 GMT
Subject: CN=6641e2ef-3861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:f2:2f:b2:9d:a4:0b:c3:f8:fa:24:12:5c:
8a:12:f8:07:8e:ed:56:d3:3d:e0:80:a0:72:4d:35:
83:ad:d3:84:44:fe:1c:9f:b2:15:d7:cd:31:b2:07:
4b:46:ad:7e:70:77:cf:a3:dc:10:06:5f:a7:15:34:
a1:27:47:94:ad:e8:57:af:a0:7a:82:28:eb:63:d3:
cb:61:8d:82:b0:7e:1a:09:7d:10:3b:be:7b:1e:d5:
d3:e0:cf:97:27:62:63:be:dd:94:8d:a0:50:02:75:
48:d8:61:3a:a2:01:b9:d8:b5:6a:b1:a9:dc:aa:5c:
1c:cb:6b:7a:2e:a5:cb:85:96:9d:3d:7b:25:c6:72:
46:7f:bc:09:52:51:21:fc:3a:9c:64:4e:8c:d9:f9:
7a:0f:75:87:d0:c7:08:8e:11:d8:18:de:12:7d:76:
b0:72:ee:05:e2:11:3a:5f:e0:56:04:91:ac:33:fb:
b6:1c:60:c1:1e:8d:79:8f:81:57:39:c3:e1:31:81:
73:61:34:a9:ca:2b:ec:d3:21:cc:d3:45:57:36:78:
b8:08:f1:45:86:3d:90:a4:7a:41:f7:03:6a:93:05:
2c:a2:19:ae:3a:dd:8b:7e:03:f1:13:6b:27:bb:1f:
ca:7c:54:6e:35:32:68:31:ed:74:21:7e:ab:74:8b:
ad:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:16:AB:99:4C:AA:63:F9:63:67:44:2C:BC:59:42:A7:1B:D1:F5:DB
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8D969FD6110E11EFB4A7516C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.9.0/24
Signature Algorithm: sha256WithRSAEncryption
30:df:fa:df:ef:3d:a2:ae:03:19:f9:18:55:33:a1:30:42:2e:
a7:02:f4:8f:50:cf:93:e8:b1:61:58:78:df:3f:2e:ce:28:ef:
c8:d9:90:e9:fe:90:94:ee:7d:47:08:60:23:0a:ab:37:38:01:
f3:b6:64:eb:1e:ef:0b:56:f5:2d:10:c8:40:e9:b8:52:a7:52:
c2:07:50:90:bd:10:72:eb:d6:ff:fd:6b:4b:10:9f:67:4a:3d:
12:df:71:1c:bd:bd:61:3b:1d:76:39:49:d8:bd:4d:cc:8a:96:
07:be:2f:b6:19:02:31:f4:e7:31:3d:ba:08:71:43:42:60:98:
cc:f9:1a:a9:6a:f8:d0:83:5f:52:8d:6c:88:f6:0b:a8:c5:eb:
75:78:ac:87:dc:53:8a:21:3b:f1:d9:66:66:9c:8c:17:c2:23:
e6:bc:ca:8d:19:fd:a1:77:45:c9:a3:8f:54:0c:a8:76:8d:0c:
91:95:2c:1b:92:e3:97:fe:db:a8:e9:af:d9:9f:39:31:0a:60:
38:3f:68:a8:f5:2b:9c:a1:e3:f2:96:22:ff:0e:2b:37:9e:dd:
54:89:1d:a4:30:64:7c:86:3f:fd:a7:e3:f4:3b:55:4a:59:64:
c5:b3:d3:b8:d6:60:86:95:d2:1c:e6:eb:7e:5a:31:9c:2a:86:
cd:d7:c9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 13:45:59 2024 by rpki-client on console-ams.rpki-client.org