Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9F4306CAFFE411EDB20B28364AD9E6FC.roa
File: 9F4306CAFFE411EDB20B28364AD9E6FC.roa (raw, json)
Hash identifier: 9sOJk8DTAO44LK7TjMPOx56VcbP8+fS8wfOLDyz4tHs=
Subject key identifier: 70:52:41:D7:FC:AB:DB:87:F8:9D:DD:6C:E7:9E:0D:60:4E:6C:C5:48
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E4F
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9F4306CAFFE411EDB20B28364AD9E6FC.roa
Signing time: Wed 31 May 2023 18:54:51 +0000
ROA not before: Wed 31 May 2023 18:54:47 +0000
ROA not after: Sat 31 May 2025 18:54:47 +0000
asID: 834
IP address blocks: 154.16.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 18:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3663 (0xe4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: May 31 18:54:47 2023 GMT
Not After : May 31 18:54:47 2025 GMT
Subject: CN=647797fb-d056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:99:7f:d2:39:e2:ca:52:1a:6f:f7:d8:4a:
93:19:c4:d4:ef:5e:9b:95:4e:86:c2:a1:9a:86:2e:
46:ae:8c:81:ca:fa:05:35:d2:bc:88:e1:0e:3d:98:
9f:ab:84:d1:9b:d0:4e:64:35:01:61:ad:f6:78:a5:
3a:c7:35:98:e1:59:24:1c:53:e0:d2:0b:9d:3b:96:
a2:86:44:b0:c1:18:75:e2:0e:b7:77:82:b6:2b:c0:
fb:25:bc:04:fe:02:47:aa:06:9b:30:ec:82:aa:7a:
41:6e:4b:2b:34:fa:db:8c:0a:0e:82:67:8c:c1:05:
68:fa:77:7e:d1:a4:84:73:5a:ac:87:8e:ea:ed:84:
b8:3d:66:f9:2d:0a:f2:af:99:14:87:1b:a4:9a:3f:
81:e3:a2:3b:6b:4f:0f:af:16:ee:9d:f3:4f:d5:f4:
bc:fd:80:05:fe:ae:4b:99:07:68:e4:d1:68:ee:cb:
bb:f3:d5:fb:78:0f:8d:05:8b:20:1d:ed:a8:c1:cc:
3e:fb:d9:84:62:43:6b:ca:3d:51:7b:da:40:44:70:
ae:f3:6d:29:7d:9f:25:3f:3d:f7:17:92:a2:0b:3d:
29:7e:c8:fe:da:6a:ed:46:50:a2:bd:ec:38:39:e6:
80:38:f3:23:2d:5f:e8:61:9b:ae:4a:d5:0e:7d:58:
70:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:52:41:D7:FC:AB:DB:87:F8:9D:DD:6C:E7:9E:0D:60:4E:6C:C5:48
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9F4306CAFFE411EDB20B28364AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.46.0/24
Signature Algorithm: sha256WithRSAEncryption
71:e5:a7:df:d2:c1:03:40:d5:92:fa:94:52:1a:67:a9:38:6b:
6e:f1:16:c8:b3:6d:18:b9:5a:18:59:0d:40:4f:0f:68:02:26:
c0:7e:98:01:b0:7c:07:de:1c:36:a3:fc:0a:65:96:58:df:8d:
a0:c8:5b:bd:ed:55:ed:b8:3a:d2:6e:42:45:5c:61:78:c5:1d:
aa:3d:c8:51:e4:90:5e:a8:fa:af:57:16:e5:18:f2:83:1c:06:
c5:01:3a:19:d8:b9:9d:89:1f:12:9f:37:37:f5:ec:d9:64:b3:
32:16:23:26:ef:5a:78:ec:74:5a:a8:1b:59:e9:29:f1:f4:05:
87:13:7c:d7:d9:a7:c2:40:a4:64:fc:25:34:20:89:d2:83:4b:
1d:19:7e:32:40:f9:10:3e:8a:32:d5:ca:66:46:9a:61:6c:a0:
ec:bd:48:30:c8:0f:1a:bc:c1:0b:f5:3a:fb:03:39:bc:19:7a:
0d:9f:5e:2e:4e:db:56:95:5c:d5:e3:a5:14:2e:e9:ba:1a:45:
ab:96:dc:00:0f:4a:d4:39:be:27:c9:ff:6c:1a:42:62:4b:ae:
5e:ae:10:c9:bc:14:8b:ad:84:60:39:cf:30:c8:2a:3b:67:49:
11:10:76:84:e0:7c:e8:d8:d0:88:23:e3:c7:e3:b4:72:11:5e:
ba:67:b3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:43:48 2025 by rpki-client