Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D00A415091F111EBB9BDA567F8AEA228.roa
File: D00A415091F111EBB9BDA567F8AEA228.roa (raw, json)
Hash identifier: QOW47qP3+qO8E+S1JRTwgA7kORMW7xlN6A0TwO4icvE=
Subject key identifier: 08:22:5A:54:7F:06:C0:85:62:B1:D9:99:CF:4B:BD:A7:40:D8:93:DA
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0534
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D00A415091F111EBB9BDA567F8AEA228.roa
Signing time: Wed 31 Mar 2021 07:22:13 +0000
ROA not before: Wed 31 Mar 2021 07:22:09 +0000
ROA not after: Mon 31 Mar 2025 07:22:09 +0000
asID: 133752
IP address blocks: 154.16.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Feb 2023 11:59:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1332 (0x534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Mar 31 07:22:09 2021 GMT
Not After : Mar 31 07:22:09 2025 GMT
Subject: CN=60642325-0fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:06:a5:64:d3:37:0c:01:2f:3a:89:d9:58:
ef:47:ee:ba:4a:e5:7c:c6:45:2d:c2:e2:c6:da:a6:
d6:16:ed:7d:6b:e3:88:b0:80:5d:cb:5f:8c:ff:3c:
da:a7:35:19:0d:f0:a1:2a:cb:85:f0:e5:f4:3b:cd:
0a:9e:41:dc:94:0a:72:33:58:ab:f2:21:6e:0f:c8:
cd:89:13:d7:f1:f2:d6:e2:db:5b:44:bc:2a:a1:23:
c1:32:d3:af:31:2c:e8:eb:76:50:e9:7e:66:ec:52:
84:2d:1a:aa:9f:51:a6:9b:97:bf:9d:9e:f4:1a:65:
75:9d:d8:10:a7:bd:40:ca:c4:1f:4c:89:6e:93:7d:
cc:7d:d5:2e:65:34:3f:27:56:90:6d:58:37:72:d2:
3d:31:8a:f5:0b:b8:63:e1:71:37:dc:62:78:95:31:
9d:3f:d0:8f:4a:cf:42:22:db:b1:04:1e:fb:14:37:
5b:80:04:90:81:4c:2f:9e:ed:35:c3:8b:b3:02:63:
8c:ba:85:2a:73:a1:2f:5d:32:ee:7f:eb:66:19:53:
0c:7d:f8:29:ad:44:32:d8:36:a1:bd:14:be:09:4c:
95:6c:57:f4:cb:4f:68:6c:48:86:9b:b3:5c:ba:bb:
6e:ce:d7:e0:f0:9b:7e:c7:91:ae:38:17:39:2f:49:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:22:5A:54:7F:06:C0:85:62:B1:D9:99:CF:4B:BD:A7:40:D8:93:DA
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D00A415091F111EBB9BDA567F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.158.0/24
Signature Algorithm: sha256WithRSAEncryption
42:6a:36:6b:1d:db:7b:40:14:e7:9b:67:ff:58:74:2e:a0:7e:
74:48:88:1d:2a:8e:1f:ca:05:d2:81:86:36:77:45:66:9d:eb:
06:2f:05:bb:d4:35:7b:58:10:bc:0c:c7:28:63:a2:39:87:e0:
aa:fd:ed:fd:3b:d9:0d:d4:5c:2e:7f:aa:34:a6:96:38:84:79:
f3:35:a0:59:6f:13:5d:1e:be:b6:97:6e:b7:a7:bc:32:02:64:
31:4b:89:4f:19:2c:45:d6:d7:6f:00:1e:ea:4c:81:ba:ab:43:
84:b1:1b:a0:94:3b:01:45:97:1f:ba:2c:f9:f7:72:ca:4b:6c:
33:1d:53:83:de:37:3e:27:65:9a:7f:33:fd:51:20:fa:00:d9:
1e:b6:62:c6:30:2d:ec:31:52:43:f1:a1:2c:69:cb:4f:df:7c:
61:ed:fa:39:03:b5:d8:e0:e6:52:d9:5d:e4:aa:57:f5:50:4a:
33:18:f9:ca:2b:19:15:a8:fc:0a:41:8d:a2:bc:ef:5a:ca:18:
cd:40:0d:ac:9f:25:37:fe:1d:3b:43:b3:b3:29:ba:74:24:71:
bf:e7:29:19:19:44:24:5a:c1:c3:8c:5a:fa:4b:fe:c3:63:89:
fa:de:7c:e7:4f:13:69:07:38:80:52:df:31:d7:52:cc:2d:9c:
c7:93:14:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:50:45 2025 by rpki-client