Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BA7EE49A133F11EEB05074634AD9E6FC.roa
File: BA7EE49A133F11EEB05074634AD9E6FC.roa (raw, json)
Hash identifier: 8FL9uBQRbQV444rW8PHoRTx09oG8jGrd7KCEFZGkEvE=
Subject key identifier: D8:24:5E:91:BD:04:55:32:60:2F:AD:08:62:12:CE:05:96:5F:FB:DC
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0FFD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BA7EE49A133F11EEB05074634AD9E6FC.roa
Signing time: Sun 25 Jun 2023 10:04:53 +0000
ROA not before: Sun 25 Jun 2023 10:04:49 +0000
ROA not after: Tue 24 Jun 2025 10:04:49 +0000
asID: 198100
IP address blocks: 154.16.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 06:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4093 (0xffd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 25 10:04:49 2023 GMT
Not After : Jun 24 10:04:49 2025 GMT
Subject: CN=64981145-c4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:fb:25:6c:85:4c:00:10:49:8b:b9:be:45:
56:38:4d:8a:06:21:e0:fc:88:1e:63:3e:32:90:fd:
c1:1f:ff:c9:cb:aa:83:19:54:80:19:90:32:a7:56:
b9:a0:5c:70:86:73:63:94:92:0c:fd:78:41:d1:a9:
48:98:1f:c6:82:3a:7a:0e:6b:47:c8:ec:e4:b0:4f:
4b:f4:99:99:d1:18:89:fe:58:92:01:c2:0e:b6:94:
fe:7e:a7:1b:88:02:83:21:35:8c:65:c1:c7:93:9f:
14:c0:17:c1:53:a2:bc:51:c4:2d:04:e5:c8:be:ec:
c9:14:b0:ce:91:5f:da:8a:cd:66:db:f8:c9:38:46:
b1:fa:80:a2:99:19:2b:73:db:b5:3a:b1:21:13:0f:
3e:d5:29:9b:8b:31:49:1d:f1:4c:f4:bf:00:51:73:
76:79:a4:c6:2b:e8:7e:44:97:d3:2e:80:27:1d:2d:
c1:af:58:27:e2:cb:e9:f1:29:e3:c6:89:49:41:e5:
39:46:d6:b7:24:22:11:47:5c:b4:16:be:97:7b:70:
61:4b:49:16:a8:86:53:18:5f:7c:c2:b1:66:51:0b:
1d:cb:df:21:b0:cd:c4:1c:f9:92:59:14:18:99:a8:
ea:ab:25:f7:4e:42:68:fa:2c:37:dc:5b:52:2a:dc:
35:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:24:5E:91:BD:04:55:32:60:2F:AD:08:62:12:CE:05:96:5F:FB:DC
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BA7EE49A133F11EEB05074634AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.52.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:69:3f:ba:29:db:d5:78:78:8c:64:5b:f2:cd:e3:67:e9:3c:
51:8d:6e:91:99:5b:42:63:8f:a4:d0:2e:5f:53:07:1e:fd:3c:
35:15:38:c9:18:a7:dd:17:9d:5a:56:78:82:bc:ad:21:48:ff:
cd:bf:e5:c8:9b:f0:9c:d7:b7:be:07:b5:de:3b:ca:aa:7e:ad:
3a:9d:d1:c5:64:ee:99:29:05:ed:20:cb:64:b4:18:84:6d:c9:
43:16:1b:9b:46:9e:81:19:90:19:d6:4b:0a:0a:f9:f2:a8:d2:
92:d5:34:39:ee:27:ca:5d:06:75:f9:70:f7:f6:4b:11:f4:0d:
b2:b9:fe:93:05:33:9e:10:ef:35:b7:99:fa:be:23:68:7e:ac:
58:c1:8a:94:eb:7c:8c:fb:6e:58:08:96:f6:5b:d2:60:30:f3:
4c:e2:16:a2:0d:5b:48:f7:79:11:ee:70:33:82:31:7e:ee:ed:
36:b7:19:ec:7c:a5:31:c7:5f:75:c6:87:98:51:d8:91:8f:0d:
d2:f9:4a:c3:83:16:ce:e4:f3:71:8a:d1:08:b7:3d:f8:30:a0:
67:0a:fd:30:c9:d9:df:f7:7e:12:76:99:0c:0a:1d:8c:c3:54:
27:fd:ed:8a:e2:84:9b:ac:f2:3d:df:d1:5c:28:d6:7d:02:33:
6e:18:0a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 11:39:47 2024 by rpki-client on console-fra.rpki-client.org