Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D1361F24D7B011EE8A4C5489775412E6.roa
File: D1361F24D7B011EE8A4C5489775412E6.roa (raw, json)
Hash identifier: eRScOP5lkdQSlvI3EOKnDXyKM9HJFMn0gsbUw+hnaDs=
Subject key identifier: AE:F5:84:7F:3E:25:93:F8:F5:4D:5E:0E:53:89:0E:C0:00:4F:B3:92
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1536
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D1361F24D7B011EE8A4C5489775412E6.roa
Signing time: Fri 01 Mar 2024 09:48:12 +0000
ROA not before: Fri 01 Mar 2024 09:48:09 +0000
ROA not after: Mon 02 Mar 2026 09:48:09 +0000
asID: 834
IP address blocks: 154.16.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 15:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5430 (0x1536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 1 09:48:09 2024 GMT
Not After : Mar 2 09:48:09 2026 GMT
Subject: CN=65e1a45c-d6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:d4:e4:c4:90:1a:81:fa:ed:33:24:d9:a5:
b6:a4:19:6a:f2:36:90:d0:8a:a1:99:49:ba:0a:96:
ab:8f:5f:ce:64:ca:68:15:c7:2b:5b:ab:fc:50:91:
b0:4c:3c:ec:0d:83:b6:99:2d:0a:b8:bf:3b:8b:a7:
d2:c3:60:bf:e6:d3:49:ee:25:1e:4b:d9:66:eb:14:
00:ef:ea:fc:ac:23:46:4f:09:1d:22:2a:54:67:06:
d3:43:5b:b2:df:27:7d:4f:ea:ba:1f:9c:22:47:7f:
e4:0a:f2:79:bc:35:c9:b1:46:b6:48:b3:f0:4b:b8:
5a:4b:0c:31:3f:a4:61:bf:bb:03:93:71:02:6a:b4:
86:6f:c5:43:a0:1c:b4:59:3c:4c:41:5a:66:9d:9c:
99:05:09:0a:82:be:86:61:4a:66:dc:91:1b:38:86:
d4:f0:d4:6e:e0:d6:0d:d2:ef:10:97:28:d5:4b:87:
e3:d3:b7:31:7e:82:2a:1b:a9:cf:9d:ab:7b:a8:c6:
19:8f:84:76:16:06:6a:05:42:8d:cb:3a:a7:11:49:
9a:f1:f8:98:74:6c:6c:ba:47:9f:04:e8:29:0a:8d:
d6:43:94:2c:36:4b:6f:62:03:1a:d1:aa:e4:a3:e0:
f9:ab:d4:23:a1:3f:f8:d9:f9:07:ba:37:28:0b:65:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F5:84:7F:3E:25:93:F8:F5:4D:5E:0E:53:89:0E:C0:00:4F:B3:92
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D1361F24D7B011EE8A4C5489775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.98.0/24
Signature Algorithm: sha256WithRSAEncryption
14:84:78:2f:d6:d1:93:87:65:e2:58:82:da:98:f1:f2:6e:b4:
6d:f9:18:e6:70:6c:66:3e:1d:54:a1:84:d1:75:13:a5:a2:d3:
d6:41:aa:22:af:56:25:8c:41:cc:3e:c3:61:57:be:fa:34:a2:
85:c7:0d:09:41:d3:1d:d7:1a:b2:35:8d:f8:41:f5:10:f9:54:
2b:42:b8:d6:94:71:68:58:09:15:98:48:97:39:5f:a0:8a:4d:
4c:2d:e5:f9:6b:fb:cd:d6:75:e8:04:bf:52:4b:16:92:37:fe:
e3:b7:64:ec:f6:92:2a:99:fc:0a:3a:59:be:fe:76:a4:49:a1:
ba:02:6b:a7:d5:0b:c1:57:0f:f1:57:83:4e:43:cb:33:ba:cf:
e8:12:f2:e5:30:a8:8a:03:7e:b1:b4:c5:09:05:c0:c2:c5:51:
2b:97:0c:7d:df:38:3f:30:5b:0d:8c:0f:e6:3a:ed:8f:de:02:
90:f0:32:f4:ed:ed:e3:60:12:18:52:3c:b1:e9:15:70:e1:cf:
09:f9:24:ce:b7:0b:d4:a1:78:2b:70:43:73:34:58:27:c5:b1:
65:62:82:e2:f3:72:15:b5:ea:a3:31:f5:c2:c2:a4:9b:cf:4e:
ce:0c:fb:bd:e0:7f:20:e7:36:70:64:5a:a1:43:6e:43:32:db:
7d:db:c0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 18:12:59 2024 by rpki-client on console-fra.rpki-client.org