Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BD526DECB69511EDB5CD35C2F1222468.roa
File: BD526DECB69511EDB5CD35C2F1222468.roa (raw, json)
Hash identifier: wplcPMUwjjd7xas5vW424aZ0T8Bdn5N8ahjxkxup8Xo=
Subject key identifier: 03:E4:D0:4D:BF:3B:06:E8:F6:CF:0D:7B:31:CE:45:CC:7B:69:13:45
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C6D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BD526DECB69511EDB5CD35C2F1222468.roa
Signing time: Mon 27 Feb 2023 11:56:16 +0000
ROA not before: Mon 27 Feb 2023 11:56:12 +0000
ROA not after: Thu 27 Feb 2025 11:56:12 +0000
asID: 61317
IP address blocks: 154.16.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 07:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3181 (0xc6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 27 11:56:12 2023 GMT
Not After : Feb 27 11:56:12 2025 GMT
Subject: CN=63fc9a60-cec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:85:c9:17:63:e7:dd:03:8d:38:54:cf:98:
09:46:c3:36:70:75:39:7b:4f:ea:0a:ef:f8:71:d9:
00:7a:60:9b:59:d4:f7:8d:aa:0f:c2:7a:02:ea:ee:
a7:60:94:5e:ea:e4:13:f0:fd:10:79:9a:63:7a:73:
ea:06:2b:3a:85:f1:64:97:56:d9:a3:7b:1f:fa:cb:
42:04:ed:99:5c:de:03:e4:7e:73:6d:28:b8:a7:2b:
c0:43:a2:c9:9a:67:7f:9e:57:24:38:31:00:4f:7f:
f2:ec:29:3c:51:83:f5:ea:47:b3:34:71:f9:1f:db:
fa:68:89:80:25:be:db:54:77:77:05:56:c1:03:22:
da:21:95:db:ec:66:bc:24:29:ac:d3:d7:f3:13:f3:
9e:4c:c9:e0:b6:60:90:cf:b1:5c:02:fa:6a:91:b7:
26:db:2e:81:63:f3:7e:57:c0:fb:ea:5a:e0:9f:65:
01:e6:0c:b6:98:c5:f0:62:e3:5c:5f:c6:ad:de:c1:
b5:66:4c:2d:18:96:67:7d:2a:be:bd:22:f8:3e:87:
ff:56:79:e0:20:02:5d:81:36:0d:df:cc:26:23:6f:
20:6e:7a:e5:a0:a2:ce:0a:e6:6b:da:78:8d:aa:d1:
85:50:26:8b:5d:42:e0:d4:61:06:67:04:6e:c7:41:
a5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E4:D0:4D:BF:3B:06:E8:F6:CF:0D:7B:31:CE:45:CC:7B:69:13:45
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BD526DECB69511EDB5CD35C2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.141.0/24
Signature Algorithm: sha256WithRSAEncryption
24:da:66:e3:5c:e7:3b:ff:38:aa:1e:37:89:bb:ee:e7:5b:56:
be:2e:1c:dd:8f:03:7d:5c:5d:8a:5d:5f:f5:f1:ec:6a:33:92:
06:df:9f:f9:72:fa:5f:27:47:90:dd:99:fb:47:5d:57:11:75:
d8:f3:a5:1a:d6:b8:6c:85:97:79:cd:6e:af:a3:e8:19:ac:bf:
e7:33:fe:9c:fc:84:69:c2:af:01:aa:39:31:e5:41:88:a8:a1:
d2:c0:2a:6c:90:37:ff:40:f4:fc:70:7a:1a:6d:e1:da:8c:af:
a9:54:4d:0c:53:1c:93:cc:0b:a3:6c:67:07:3f:8a:4a:cd:a3:
91:bd:6f:a6:41:fb:1b:f7:b2:ab:a8:2f:ee:47:2a:7d:49:f3:
10:8e:2b:38:1e:06:4b:d8:ed:28:78:d1:cb:8c:62:32:82:9e:
fb:41:47:a1:6e:81:44:f8:78:fb:c0:82:86:62:bc:e9:d3:5f:
8d:03:cc:42:bd:f8:80:4b:60:2f:21:b9:f3:3d:a6:2a:52:b5:
7d:2f:b6:2a:df:a8:33:9f:07:49:20:0a:9d:6d:86:ed:a6:4d:
30:9d:c9:68:46:30:b3:79:80:cf:cd:07:ba:bf:00:ed:f8:64:
ff:a6:27:fa:9f:b7:49:1c:ef:99:87:b3:dd:cd:72:12:88:d2:
7f:3a:cb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 08:14:49 2024 by rpki-client on console-ams.rpki-client.org