Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B0D174C0B45311EE9BD8F458775412E6.roa
File: B0D174C0B45311EE9BD8F458775412E6.roa (raw, json)
Hash identifier: 01v0VKBJ9Nx3ux35sr7MAaS/el3Sb0teWsZ+J18kts8=
Subject key identifier: 17:8E:E0:02:11:35:19:BD:3F:CD:E5:0E:5C:E6:F2:CD:C8:5C:01:60
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 145C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B0D174C0B45311EE9BD8F458775412E6.roa
Signing time: Tue 16 Jan 2024 09:43:24 +0000
ROA not before: Tue 16 Jan 2024 09:43:20 +0000
ROA not after: Fri 16 Jan 2026 09:43:20 +0000
asID: 20473
IP address blocks: 154.16.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 10:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5212 (0x145c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 16 09:43:20 2024 GMT
Not After : Jan 16 09:43:20 2026 GMT
Subject: CN=65a64fbc-6c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:07:5d:2d:76:a7:2a:17:65:d0:92:13:b8:
7d:fe:60:65:b0:7a:af:4a:04:2c:44:1a:48:5d:72:
d7:9b:ad:5e:1d:9a:ae:82:bf:8b:74:5e:fb:96:09:
ee:83:13:1c:0c:d9:7c:36:8c:08:22:99:2f:27:64:
4e:b5:6a:a2:f3:a8:b2:6d:3c:81:fc:b5:be:37:42:
79:9b:e9:d6:f0:b1:74:7f:85:06:9d:dd:d6:e1:ca:
5a:b4:47:8e:96:a6:3e:27:92:cb:29:6a:9e:80:f3:
bf:c6:da:d8:ea:c8:60:0b:49:2c:43:5d:95:1a:86:
78:85:4b:fb:b3:75:6d:74:2a:40:bd:68:2e:60:78:
2a:e0:b2:93:0e:97:91:4a:f0:31:be:af:a1:a1:b0:
8f:d7:9d:7b:a8:ce:4a:e2:d4:33:85:fd:8d:8b:01:
39:7b:f4:7a:2d:5d:2b:a8:35:74:c3:e2:3e:9e:a9:
ff:54:d0:e3:98:a1:67:cb:a5:cf:89:f2:53:62:2a:
70:e2:70:37:17:7e:9d:79:ac:83:e9:a8:c8:86:37:
bc:81:7e:16:67:7d:8c:4b:0b:d9:c3:a5:5f:2a:58:
b4:b6:42:78:47:3e:6a:e8:2b:a3:fe:c9:f1:cd:4a:
0d:6f:8e:08:99:2c:c8:0c:69:07:b3:14:fb:13:b0:
d1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8E:E0:02:11:35:19:BD:3F:CD:E5:0E:5C:E6:F2:CD:C8:5C:01:60
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B0D174C0B45311EE9BD8F458775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.240.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:03:f5:3b:ee:9e:22:1b:c2:d1:52:99:ec:7f:f5:4a:46:49:
a1:eb:3d:eb:3a:cc:b9:27:32:e4:29:60:73:96:d3:3f:57:3d:
57:0c:78:10:6d:41:14:2c:f3:3b:a1:14:2b:40:2a:bc:4b:36:
c7:c9:e0:f7:c8:0f:99:18:a0:da:f2:eb:a6:d9:dd:8d:3e:e1:
dc:5e:e4:7c:70:b9:39:41:56:02:b0:f9:73:be:65:3c:2c:4c:
f7:ec:19:aa:a0:fa:4e:43:4d:74:27:60:44:a5:bc:56:54:bf:
26:80:01:c8:bc:23:9e:e5:08:d4:ff:e9:91:d9:37:db:40:8d:
d9:41:b6:3a:e6:c6:c7:71:39:c0:eb:11:33:bb:c7:cc:94:4e:
6b:2f:58:3b:30:20:88:29:52:ff:3f:7e:5e:73:ee:ab:84:4b:
0f:bb:9f:23:d8:a1:03:a9:0d:2e:bc:3c:df:74:c2:29:26:27:
8f:14:b1:30:e4:6b:52:12:41:4f:10:21:e1:23:b7:3f:61:5e:
e9:c2:b4:5d:63:38:69:35:50:13:d4:5c:b3:2b:9b:f6:73:68:
94:e5:fa:0e:20:e2:38:80:9b:4f:f0:a3:5e:c2:22:6e:aa:21:
56:94:57:48:cf:f9:d6:61:d1:5d:22:1d:0a:f7:24:ed:14:c1:
f2:78:6f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 14:34:11 2024 by rpki-client on console-ams.rpki-client.org