Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/94BCC062F9B611ED9231EB6F4AD9E6FC.roa
File: 94BCC062F9B611ED9231EB6F4AD9E6FC.roa (raw, json)
Hash identifier: CazvtWbdAJAEcH2TsCEBp85+t+roS8OAXHCA1e70pac=
Subject key identifier: 06:1A:E0:F1:12:FE:5B:3F:14:49:83:35:1E:D5:74:26:1F:23:02:BA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0DD7
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/94BCC062F9B611ED9231EB6F4AD9E6FC.roa
Signing time: Tue 23 May 2023 22:10:09 +0000
ROA not before: Wed 24 May 2023 22:10:06 +0000
ROA not after: Wed 28 May 2025 22:10:06 +0000
asID: 46337
IP address blocks: 154.16.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 May 2023 22:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3543 (0xdd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: May 24 22:10:06 2023 GMT
Not After : May 28 22:10:06 2025 GMT
Subject: CN=646d39c1-f9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:59:8e:0c:04:06:80:51:63:cb:00:9f:59:
95:fd:49:92:80:8e:c4:14:fc:a3:9c:85:cc:1f:63:
6c:aa:f9:46:cb:f3:0a:8c:47:24:a2:3f:59:61:2e:
1f:29:7b:95:f7:6a:cb:03:b9:39:15:fb:26:92:f6:
2c:ec:92:28:ad:11:db:9d:61:40:bf:24:67:68:43:
f7:f8:f2:47:ee:08:ff:8b:99:16:cd:27:d2:20:33:
07:7b:65:5e:0b:07:d3:14:84:bf:1a:0f:40:40:23:
ff:d9:f0:78:5b:7a:2e:2b:8b:ba:da:97:6b:19:83:
ca:61:36:42:9f:50:8a:2c:f5:be:ed:73:55:a1:10:
fc:0f:dc:67:c3:37:6a:e0:07:89:f0:39:4e:a7:22:
02:4e:46:97:ba:94:05:6a:76:31:28:af:b8:d0:23:
9d:8d:1e:da:7f:2a:fc:ab:70:87:9a:9b:8e:e3:87:
65:8f:01:fd:e0:0c:e2:49:4f:d4:6a:58:8c:73:48:
1f:82:59:c1:1d:90:ba:20:48:8d:a7:f2:b3:42:f5:
96:a5:f0:65:1d:f6:27:c7:8e:1b:b8:f0:2e:96:a1:
48:53:fc:e6:d3:6a:ce:9e:b2:dc:2a:86:a3:94:a9:
ae:57:20:ad:e0:d7:64:0f:1b:8b:c5:84:74:84:67:
be:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1A:E0:F1:12:FE:5B:3F:14:49:83:35:1E:D5:74:26:1F:23:02:BA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/94BCC062F9B611ED9231EB6F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.118.0/24
Signature Algorithm: sha256WithRSAEncryption
73:75:12:c7:3d:09:e5:7b:fe:99:c7:b1:4b:b0:26:2e:88:8f:
cd:df:9b:52:0f:de:69:e5:03:74:14:12:3a:f3:06:51:58:ef:
65:09:c2:0f:a5:bd:ad:73:7b:63:cf:15:1e:e4:4c:c8:4b:37:
16:71:bf:8b:47:02:ea:c3:c3:df:f9:50:3f:35:83:b6:bd:79:
96:fc:b3:e9:b2:ce:26:f7:e4:3a:f5:1a:6a:59:71:92:ec:ca:
22:75:4a:0e:9d:8e:ad:b1:cb:ae:d5:00:be:0c:bc:3f:34:7a:
a5:40:8c:32:b6:18:c5:20:80:76:dc:19:37:df:2e:31:9b:2a:
73:c2:34:3d:06:3e:a6:cd:c5:ff:09:8b:51:0a:4a:17:30:2e:
50:08:89:18:dc:2c:de:22:fc:e7:af:a6:32:11:68:76:67:02:
00:09:86:73:51:9e:69:00:c7:7f:9a:50:2f:f7:49:2e:f7:46:
ef:a2:2e:37:66:a8:1b:b8:fd:83:7d:8a:aa:0d:2a:ab:45:42:
a7:cb:89:fc:8f:be:d1:ca:89:3c:65:b8:2b:b1:c6:0c:8b:47:
09:37:7a:d0:9c:3f:b4:bb:10:aa:c3:f6:2e:bf:08:13:9e:a1:
ba:11:7b:47:8b:bc:17:d8:33:ef:d2:db:66:6b:6a:b9:a4:66:
fa:98:b5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:50:47 2025 by rpki-client