Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CFCC9EC0B69011ED81788BB3F1222468.roa
File: CFCC9EC0B69011ED81788BB3F1222468.roa (raw, json)
Hash identifier: mL+Gma5/BHYvtGf0jr4NU+8BpakqWnGIBfFrNRYzSHY=
Subject key identifier: 8F:67:65:A9:89:0F:16:FC:FC:F4:DE:61:15:E2:80:7B:76:5F:3C:B4
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C3A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CFCC9EC0B69011ED81788BB3F1222468.roa
Signing time: Mon 27 Feb 2023 11:21:00 +0000
ROA not before: Mon 27 Feb 2023 11:20:56 +0000
ROA not after: Thu 27 Feb 2025 11:20:56 +0000
asID: 61317
IP address blocks: 154.16.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 07:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3130 (0xc3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 27 11:20:56 2023 GMT
Not After : Feb 27 11:20:56 2025 GMT
Subject: CN=63fc921c-f9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cc:2f:47:98:24:47:bb:5b:13:70:6b:24:17:
fd:0c:11:c9:97:b5:d8:ab:88:7d:9c:21:bf:91:34:
8e:39:45:6f:2b:d9:62:70:35:0a:ea:90:34:b1:5c:
64:17:b9:d1:ea:a8:d8:79:78:0f:14:15:0a:5e:0a:
a9:21:b3:41:29:d8:03:fa:95:68:7b:63:5c:f1:2b:
2b:32:e9:de:48:dd:0a:c1:c8:12:21:ae:94:6d:d4:
68:88:db:52:04:e9:7a:89:9c:7b:93:a3:c9:e5:cd:
d8:70:5a:72:27:5b:a2:fa:c5:1c:d8:3e:e1:6a:d4:
7d:03:6b:78:91:9b:72:08:d5:69:8e:45:a0:47:53:
4b:07:37:79:cf:98:8e:c0:30:9e:60:1c:1d:08:23:
e4:08:b9:62:59:1d:6b:76:f4:dd:8e:8f:85:37:f3:
a9:4c:b8:f2:61:90:d4:d9:02:55:e2:ef:c1:30:12:
0f:4d:c0:2c:99:e6:af:50:33:55:f5:8e:09:d8:54:
5e:a1:c2:a6:d0:eb:e6:fc:74:e4:b7:b3:9e:bf:31:
07:18:f7:ae:85:7b:ab:a8:d1:fc:09:57:6c:33:21:
5d:92:4a:03:53:db:28:de:b7:83:8b:ec:e7:e4:2c:
0d:7e:a8:1d:45:b9:31:26:cb:d3:cb:98:64:fc:b0:
b6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:67:65:A9:89:0F:16:FC:FC:F4:DE:61:15:E2:80:7B:76:5F:3C:B4
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CFCC9EC0B69011ED81788BB3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.72.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:93:b5:cc:4d:79:0b:48:5e:56:c4:8a:19:6f:25:96:93:99:
8f:63:86:82:5f:63:46:09:90:44:bd:fc:a0:5b:f7:1d:4a:3d:
ff:58:a8:be:c2:71:7c:39:89:bc:67:cd:d0:ef:43:98:17:f1:
96:a0:31:f3:f9:d9:cf:53:22:11:c0:4f:6b:75:91:18:0e:86:
62:25:7f:8d:71:26:46:c6:7f:a4:26:86:1c:0d:ce:d5:90:54:
07:f8:ab:2d:d8:32:eb:3e:a0:4b:7c:05:b4:29:73:af:88:9f:
1e:56:09:5d:3a:62:e8:32:6c:07:71:7a:73:53:f1:3e:32:70:
52:86:a3:c1:e5:66:9b:5a:de:a5:09:06:81:aa:5d:12:ff:bb:
6c:80:38:fe:f9:86:19:f9:45:11:f4:dd:4f:0b:cd:69:3a:22:
ee:80:c4:9a:dc:42:90:98:05:19:c2:e3:f0:c6:d5:c1:58:2b:
df:26:7b:9d:72:5e:ff:40:52:04:3f:de:72:56:bc:e3:28:eb:
1e:6b:e9:a2:0d:3a:1c:06:46:79:ea:a3:e7:fb:1d:f1:4a:90:
5a:1f:1d:90:22:56:b7:32:35:19:96:30:3f:89:2d:4f:64:9b:
c4:c1:67:23:be:3b:9a:60:9d:13:fc:e1:98:47:2c:fd:36:ef:
c5:a0:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 08:14:49 2024 by rpki-client on console-ams.rpki-client.org