Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B4D0317058D011EFB1905F63762E951A.roa
File: B4D0317058D011EFB1905F63762E951A.roa (raw, json)
Hash identifier: vwK6iacAQkShfjil6gpJ/dB28Tm4r8eqB46uXx5dggU=
Subject key identifier: B1:F4:BE:D9:A9:C0:F1:6F:6F:61:3B:20:CA:2A:EE:73:57:DA:EF:13
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 17A1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B4D0317058D011EFB1905F63762E951A.roa
Signing time: Mon 12 Aug 2024 17:31:28 +0000
ROA not before: Mon 12 Aug 2024 17:31:23 +0000
ROA not after: Wed 12 Aug 2026 17:31:23 +0000
asID: 58349
IP address blocks: 154.16.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Oct 2024 09:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6049 (0x17a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Aug 12 17:31:23 2024 GMT
Not After : Aug 12 17:31:23 2026 GMT
Subject: CN=66ba46f0-fa47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:f0:d8:c5:f4:49:24:d8:5d:2e:86:f7:5a:
ee:4e:df:46:6c:7d:b8:a1:7e:4a:d9:b7:1b:36:e5:
75:dc:42:25:57:54:0c:5d:09:17:9a:70:c8:e0:e0:
b7:6a:e5:54:28:d0:0c:00:c8:c1:e8:e5:4c:21:a6:
97:ff:95:53:f3:fb:bd:2b:f2:57:6f:95:7b:1e:00:
b2:0d:17:52:03:97:56:21:d8:53:6b:23:d1:f2:a0:
af:1b:25:24:ef:42:e6:3a:53:aa:71:52:49:83:c5:
27:0a:13:e4:88:b7:56:e1:88:24:c0:b5:9a:75:bb:
80:15:90:c4:6e:a6:8b:4c:21:93:e9:58:6a:0b:b1:
69:42:42:85:33:ba:e8:d2:34:de:01:7e:63:39:67:
d9:e6:f3:bb:ec:c3:16:be:a2:9d:28:24:a9:7f:ef:
5d:70:9c:36:12:3b:d6:32:34:46:11:18:c5:19:dc:
29:55:eb:19:a8:46:35:81:66:24:f4:0d:a1:74:64:
c8:f9:e8:60:2b:1d:d7:cc:7e:e2:8f:5f:81:44:9f:
69:0d:f4:70:10:d6:ec:9e:6f:38:a3:29:b6:80:5f:
e2:77:07:9d:a6:f5:d3:7d:d7:3a:d2:76:bf:2f:fb:
d1:f2:fc:86:13:32:76:60:ba:97:40:cc:6c:57:5c:
96:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F4:BE:D9:A9:C0:F1:6F:6F:61:3B:20:CA:2A:EE:73:57:DA:EF:13
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B4D0317058D011EFB1905F63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.179.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:aa:8c:d0:cb:20:7f:e2:3a:89:f8:1b:cf:da:8e:60:47:e2:
88:05:59:15:cf:76:04:77:65:06:a1:6a:41:c8:34:11:f3:a4:
61:e9:11:e0:7f:25:cc:cb:df:ae:58:28:db:a8:ec:76:72:e6:
ac:79:8d:b2:c6:76:ae:c3:0c:69:e8:04:50:16:f4:15:8f:91:
17:8b:ea:31:4c:39:3a:95:78:f7:f0:ec:fa:7d:39:ca:d7:04:
81:71:54:70:c6:fa:10:67:2b:fe:04:aa:a6:04:04:1d:1b:af:
a2:d4:c2:d5:79:60:5f:e9:97:ef:f3:96:be:d8:6b:d0:03:5a:
16:35:71:fb:d8:0e:6e:da:b0:51:03:14:f1:20:79:6f:5d:d8:
2b:2a:7d:60:ed:9b:ee:ad:52:a3:1d:95:00:09:0e:11:79:b9:
d3:30:73:ab:18:f3:9f:9a:25:dc:32:ac:da:ef:68:49:4d:7e:
36:d2:59:92:8a:7e:a0:82:53:d6:67:ae:60:75:d8:2e:ee:a8:
8e:19:7c:7d:be:9a:05:83:58:4e:b4:8c:3c:35:c1:fb:14:a3:
0c:6a:20:fd:b0:e3:f2:63:96:1b:be:30:6a:ac:ca:f5:c3:21:
bc:88:f5:9e:66:5f:d7:7a:4f:2b:b4:df:86:9f:45:09:a3:1b:
e2:1c:d9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:42:50 2025 by rpki-client