Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AA4B009E8B6311EEB321D32E4AD9E6FC.roa
File: AA4B009E8B6311EEB321D32E4AD9E6FC.roa (raw, json)
Hash identifier: 3Pj962qrvtvJH3zw/gWtu6mAlwOVwr6Bv9FrFQureWc=
Subject key identifier: E7:55:9C:9C:D3:94:E7:EA:83:FA:05:23:AA:31:13:FD:06:0A:99:80
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1340
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AA4B009E8B6311EEB321D32E4AD9E6FC.roa
Signing time: Sat 25 Nov 2023 07:24:27 +0000
ROA not before: Sat 25 Nov 2023 07:24:24 +0000
ROA not after: Tue 25 Nov 2025 07:24:24 +0000
asID: 174
IP address blocks: 154.16.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 06:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4928 (0x1340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 25 07:24:24 2023 GMT
Not After : Nov 25 07:24:24 2025 GMT
Subject: CN=6561a12b-2b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:b5:f7:68:ae:39:98:cf:4d:02:72:db:c9:
f6:86:24:a1:93:2f:77:08:0d:3f:3e:1a:ad:e8:9b:
c5:ac:7e:4e:78:db:3d:27:fb:61:c0:40:dd:87:70:
ee:4f:2b:8f:53:7e:df:16:ee:5b:e9:b7:e5:9d:8c:
e7:66:d4:f0:fd:cb:25:27:c6:3f:d1:83:0c:10:26:
c6:f6:7e:2c:6c:69:fc:e8:10:c3:77:75:b0:4b:d3:
31:f3:e6:f3:31:2a:52:c1:9a:1c:72:89:64:bf:23:
8c:1f:82:d1:83:b1:03:8f:05:96:23:6c:1b:cc:80:
a6:8a:d4:d0:70:51:e8:4d:86:3e:b0:da:8a:e4:57:
9b:fa:41:dd:f7:ff:73:35:9d:77:e9:dc:92:af:91:
02:d7:66:52:c7:56:7f:50:74:3a:57:67:4c:b0:13:
27:54:37:58:47:72:29:90:8f:b3:ed:aa:70:05:c0:
94:51:8c:a6:7d:95:04:29:76:10:82:5a:92:92:80:
81:f3:5a:9b:97:da:32:71:d0:97:60:76:72:48:f8:
2c:6f:2d:1a:95:85:31:1b:c7:a8:f0:9f:65:8f:76:
6f:65:45:9d:de:8d:79:77:69:a1:fb:0a:c4:fa:20:
d5:67:4e:22:92:08:dd:9b:eb:6b:41:40:d5:2c:e5:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:55:9C:9C:D3:94:E7:EA:83:FA:05:23:AA:31:13:FD:06:0A:99:80
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AA4B009E8B6311EEB321D32E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.254.0/24
Signature Algorithm: sha256WithRSAEncryption
63:5f:70:8b:ee:36:57:fd:f6:41:7a:ab:72:eb:50:bc:48:aa:
8e:f8:ef:fa:13:1e:cc:04:60:13:50:48:db:ac:8c:65:3a:e0:
4f:3a:63:0a:48:bb:83:69:a0:75:84:f2:19:44:3a:bd:3f:2d:
06:23:84:1f:52:5b:4d:ce:bc:f9:3c:5b:d6:d2:bf:fc:ec:b1:
14:68:10:f5:05:c4:dc:c1:ce:df:54:76:82:30:ed:46:06:23:
69:8b:c1:9b:f4:b5:c1:9a:54:64:53:74:37:60:cd:23:36:8d:
98:fd:5e:b8:9a:49:1f:33:d8:30:7e:02:d7:1f:4d:8b:6c:28:
82:59:eb:6a:8f:3b:73:70:af:59:7d:c5:5f:dd:50:a6:9c:8e:
0c:60:ee:de:f4:ea:87:65:cf:a9:cb:59:c7:29:79:dc:ff:dc:
74:60:ae:05:1a:ad:36:6e:09:85:88:14:fc:d3:b4:9d:e9:4e:
b9:4d:c5:ed:f1:37:44:b7:ee:e0:8c:cc:59:c6:98:c9:b0:b2:
a9:a5:8d:9e:02:a2:49:be:25:cf:51:3d:9c:d6:81:50:2e:91:
1e:8b:9c:8a:9b:9a:14:1f:20:6c:8a:9a:6a:ec:50:f2:7e:98:
e4:d5:03:42:43:48:46:34:81:1a:da:fe:09:ef:b3:25:44:08:
11:65:d9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 07:34:57 2024 by rpki-client on console-fra.rpki-client.org