Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9ED1E88821DA11EE86643E3F4AD9E6FC.roa
File: 9ED1E88821DA11EE86643E3F4AD9E6FC.roa (raw, json)
Hash identifier: wvGnb+3wC/WSN7tgadAtN2j6Pf65fB03Ns0J7fRKABs=
Subject key identifier: 9E:09:FB:FC:99:01:9C:39:D3:C9:10:4F:DC:74:3D:8C:79:A6:A3:13
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 108E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9ED1E88821DA11EE86643E3F4AD9E6FC.roa
Signing time: Fri 14 Jul 2023 00:08:55 +0000
ROA not before: Fri 14 Jul 2023 00:00:51 +0000
ROA not after: Mon 14 Jul 2025 00:00:51 +0000
asID: 834
IP address blocks: 154.16.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Jul 2023 12:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4238 (0x108e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Jul 14 00:00:51 2023 GMT
Not After : Jul 14 00:00:51 2025 GMT
Subject: CN=64b09217-fb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d6:4c:00:fc:52:dd:4a:4e:f3:e8:cf:7b:56:
fb:b5:d9:ec:2a:63:e8:d2:ad:a6:80:c5:90:af:11:
a1:ff:14:0f:2b:e0:d5:42:49:d7:f0:16:30:c7:38:
ed:c7:bb:19:7d:4e:a4:5d:ee:f1:f2:04:a3:03:95:
13:f1:32:db:a0:82:27:68:01:07:94:46:a2:53:05:
c1:52:ef:4a:79:8b:6b:97:66:1d:0b:39:7e:60:0c:
19:f1:7f:82:03:31:6c:0f:56:ca:d2:92:c7:13:a6:
fe:ed:19:a4:84:4f:86:c2:ec:55:4e:53:ff:b1:d7:
06:1a:a2:32:ab:16:ca:98:bf:8d:94:6e:ab:8d:19:
77:82:76:5c:fc:0f:44:b7:5f:9e:5b:32:7c:b7:11:
75:fa:26:83:7b:1b:3a:67:79:36:09:11:d0:fb:bb:
18:b5:b5:cd:72:3a:2a:1d:ac:aa:76:dc:1c:41:d8:
56:8a:6d:b1:3a:e2:e9:82:e0:89:84:0b:ec:c7:40:
a1:06:4d:ae:e1:c0:82:73:6b:ed:8b:4f:71:8a:db:
55:43:43:05:d5:1a:b8:a6:66:97:8f:e7:09:32:53:
16:19:14:fc:be:1d:99:6c:74:89:42:42:41:eb:eb:
80:74:ad:94:91:b8:6a:dc:73:2a:ba:95:e2:08:34:
1e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:09:FB:FC:99:01:9C:39:D3:C9:10:4F:DC:74:3D:8C:79:A6:A3:13
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9ED1E88821DA11EE86643E3F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.89.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:6d:be:6d:f3:9d:04:47:77:94:be:e1:13:dd:75:20:8c:4f:
20:76:72:74:fa:c8:95:93:34:6e:1e:15:6b:d9:d5:a3:fc:95:
55:c1:7a:2b:af:94:18:65:20:b2:ad:d3:8b:3c:e1:4d:35:4f:
0e:18:ec:86:b0:7e:e3:16:d7:87:cc:21:ee:bd:1a:76:7d:3c:
90:07:c1:51:52:49:e2:6b:c5:84:22:15:0b:75:d7:68:d0:90:
1a:10:06:bb:43:a5:ba:ce:ca:f7:af:0a:31:a9:1b:66:0a:d4:
e5:85:42:12:7f:5f:5e:17:09:07:42:93:15:3a:49:5f:a0:c8:
2c:e8:03:6a:db:6b:b7:d1:a4:75:5a:b0:8b:22:0e:5c:d4:1f:
76:0e:89:f4:d3:78:fd:1f:13:2b:af:87:12:d3:3a:7b:14:19:
99:9d:23:f7:60:8d:47:d3:8b:77:f8:6d:73:6e:31:c3:6a:f3:
3e:12:fa:96:d4:87:a8:53:17:3a:d4:3e:0a:99:3c:4e:d9:cf:
c5:40:8e:7e:fb:06:f6:03:f0:da:b4:6d:4b:b5:94:d4:ff:95:
6e:69:33:ba:40:3a:fd:98:8c:db:c3:9d:7e:44:dc:2f:c4:10:
49:b6:bc:83:f2:31:57:15:b8:55:1e:f9:bd:b1:d3:3d:d6:0f:
b1:d6:01:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:54:06 2025 by rpki-client