Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C9F8B0AA005111EEBAF61A884AD9E6FC.roa
File: C9F8B0AA005111EEBAF61A884AD9E6FC.roa (raw, json)
Hash identifier: gjEUbEt6T1mNEaNDkuo3cZlz2zMEJf57v0mB7T87DDs=
Subject key identifier: D5:CD:F4:65:E2:4F:AA:FA:77:F5:0C:71:0A:89:1C:20:3F:BE:B7:04
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E86
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C9F8B0AA005111EEBAF61A884AD9E6FC.roa
Signing time: Thu 01 Jun 2023 07:56:18 +0000
ROA not before: Thu 01 Jun 2023 07:56:14 +0000
ROA not after: Sun 01 Jun 2025 07:56:14 +0000
asID: 834
IP address blocks: 154.16.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 14:17:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3718 (0xe86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Jun 1 07:56:14 2023 GMT
Not After : Jun 1 07:56:14 2025 GMT
Subject: CN=64784f21-67ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:76:fc:75:d8:f2:9b:e8:e7:c7:21:68:2f:
db:2e:9a:d3:87:1d:fb:43:94:c6:21:3b:66:a7:54:
48:40:f5:44:ec:91:8b:c2:4d:2d:34:17:15:db:84:
9e:79:d5:d9:80:f3:7b:9c:05:f6:54:94:78:7a:5d:
50:66:96:ce:a7:97:86:56:ab:57:5e:8c:3d:ab:fa:
d6:9a:30:62:99:9c:2a:e6:5d:04:74:06:a9:e4:cd:
a9:df:03:aa:12:01:b9:0a:c7:95:7a:87:ee:a1:f4:
8e:dd:61:a4:88:4d:42:31:f2:18:0e:c5:08:de:46:
e7:7a:89:5d:08:00:6c:c1:6d:78:d1:3b:3e:be:dd:
81:27:f2:c6:ab:f6:92:45:8d:88:6d:59:7e:df:fc:
79:6d:08:aa:f3:35:5d:6f:d8:85:62:26:ba:c0:a1:
28:5a:38:e8:4c:03:51:85:80:de:82:aa:3a:39:97:
d2:fb:f4:f8:0c:5f:15:c2:a8:0e:2a:d2:b0:ca:5c:
e4:3b:44:72:0e:6f:f2:eb:20:f4:50:d8:48:21:43:
9f:30:84:ab:74:10:f5:73:9c:cf:a4:ac:36:29:e3:
9d:f9:a5:95:ed:1f:f9:b7:67:47:b6:27:c7:21:31:
6b:c3:13:23:29:4e:38:d9:87:81:14:52:4f:37:ae:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CD:F4:65:E2:4F:AA:FA:77:F5:0C:71:0A:89:1C:20:3F:BE:B7:04
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C9F8B0AA005111EEBAF61A884AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.78.0/24
Signature Algorithm: sha256WithRSAEncryption
40:6b:3c:1a:89:ee:df:a7:2b:9b:8c:a2:06:0e:9f:83:da:e2:
ef:5c:0a:bc:57:2f:a5:ba:e1:06:95:ed:e3:10:3c:00:60:c5:
fc:eb:66:be:12:f8:c4:06:7d:5c:22:38:7e:97:4e:78:b8:90:
16:4e:34:35:7d:b1:9d:25:c3:0e:a9:c3:61:e3:5d:23:bd:e8:
64:a9:5e:d4:a9:03:1e:ac:b9:a4:af:69:7b:b1:9d:fb:d1:95:
6b:b4:97:6e:f1:13:1e:de:c1:8b:c5:5a:d9:c1:2a:eb:61:54:
ce:4d:f4:f2:29:d1:7c:e9:a8:8a:cf:96:d1:ef:3b:8e:28:23:
c3:a0:c3:eb:3f:f1:1e:83:7b:92:6c:4a:86:4d:1e:a3:90:f7:
28:1d:3d:60:36:7d:c2:6f:77:2f:5b:9f:29:92:d4:f3:8d:d4:
43:97:11:f5:6d:6d:cf:3a:f6:70:b7:cf:29:82:02:20:d2:d1:
79:00:fb:ec:7a:86:74:e6:e6:ef:8f:cc:c1:02:48:9f:11:ca:
94:13:c3:6c:4e:fd:d2:ab:b5:c5:ed:b7:4a:8e:df:7d:3a:aa:
7b:24:48:ef:35:59:1a:a0:c1:30:c9:03:db:59:b8:c1:08:1d:
7f:39:57:61:ee:df:fe:64:7c:6e:03:9e:c1:65:50:cd:0c:14:
2e:5d:c0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:40:02 2025 by rpki-client