Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B761D776B52511EEA0B65971775412E6.roa
File: B761D776B52511EEA0B65971775412E6.roa (raw, json)
Hash identifier: a9UCaxROVrsavVJxnNN6wff41S98XmBYqOfSQgOy/SE=
Subject key identifier: B5:C0:CA:F8:10:E1:15:5D:EA:A0:A5:8F:F8:01:69:FD:41:79:D1:D4
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1466
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B761D776B52511EEA0B65971775412E6.roa
Signing time: Wed 17 Jan 2024 10:46:49 +0000
ROA not before: Wed 17 Jan 2024 10:46:45 +0000
ROA not after: Sat 17 Jan 2026 10:46:45 +0000
asID: 834
IP address blocks: 154.16.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 18:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5222 (0x1466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 17 10:46:45 2024 GMT
Not After : Jan 17 10:46:45 2026 GMT
Subject: CN=65a7b019-7384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:59:f2:84:82:b4:77:0b:ff:5c:5b:d2:18:
7a:65:3c:b5:9d:f9:3b:02:9a:99:42:64:39:21:19:
f5:fe:a9:5b:39:34:a7:b7:ef:89:27:46:49:c7:f1:
d5:0c:fe:3b:35:09:19:58:c5:fa:d5:67:ce:f9:5e:
a1:b5:23:24:13:c5:82:d2:ae:bb:76:66:83:17:c0:
0b:34:5e:e0:d4:33:40:8f:b8:6c:15:d4:09:16:3c:
fa:87:8e:da:a5:13:3d:ca:bb:20:21:9d:56:66:c8:
8a:15:bd:48:f6:3d:55:91:a1:d5:61:14:e7:b4:3b:
5a:25:72:37:b7:ad:8f:06:3b:77:cc:40:84:32:5f:
a7:68:19:55:58:5f:73:3e:76:44:f9:49:39:7b:00:
2d:06:c7:31:f2:16:bf:ac:37:4b:b1:82:26:1e:8a:
6a:0f:9b:af:91:fe:bb:d0:fd:02:5f:ce:40:64:cd:
10:29:fa:73:7d:35:5d:0d:49:64:7e:81:3e:84:82:
53:79:82:bd:22:4f:f9:5e:cf:d4:15:79:dd:99:ab:
29:8b:a6:fe:d3:7e:64:28:20:7c:77:bf:12:86:31:
be:dd:9c:17:c5:6e:a5:76:ea:0d:0d:ba:13:a4:78:
54:0c:5d:7a:23:89:16:4c:d6:c9:5f:9e:cb:95:cc:
70:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C0:CA:F8:10:E1:15:5D:EA:A0:A5:8F:F8:01:69:FD:41:79:D1:D4
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B761D776B52511EEA0B65971775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.55.0/24
Signature Algorithm: sha256WithRSAEncryption
54:f9:33:a4:f7:3e:0f:59:e1:be:ca:b1:dc:4d:4f:52:3e:c3:
60:91:19:a4:cf:ad:96:aa:97:ee:0c:33:ce:40:1f:7f:3f:f5:
85:a5:74:6b:92:bc:b9:7b:fb:7b:1f:fe:c8:27:8c:80:a3:ec:
01:fc:d4:18:eb:b4:f6:4c:fd:5c:28:5a:f5:f0:bc:6c:ec:6f:
ef:40:1a:8f:a4:13:b2:4e:70:db:66:b1:34:8d:0b:9a:c6:f5:
02:91:67:d6:64:29:07:3a:70:b4:09:2e:28:55:e1:1d:66:5a:
1d:50:13:92:70:b9:b2:a4:35:a9:bd:17:1d:86:bc:d0:14:81:
1a:ab:20:fa:1a:16:51:3b:cc:41:0a:02:8d:3b:4d:a8:38:c3:
9c:5a:a2:f8:51:c7:7e:44:13:9c:bf:e8:3e:2f:f6:69:71:d0:
7d:ce:4b:01:9b:8a:f4:56:9c:af:fd:3a:f4:f0:1d:c1:97:56:
5f:d6:28:d9:95:9d:f3:c8:47:9e:72:ee:a8:b5:0a:c4:a2:50:
1a:aa:16:03:c5:ee:3b:08:4a:5c:40:6f:7e:36:2b:43:53:f8:
54:9e:cc:30:0a:c4:a2:42:75:38:66:a0:b5:59:6d:ee:93:46:
2b:19:24:94:99:fe:ac:94:74:37:f9:61:ae:7e:67:74:24:87:
49:44:c6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 21:09:51 2024 by rpki-client on console-ams.rpki-client.org