Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D1967E102F6C11EEB8D3AA2B4AD9E6FC.roa
File: D1967E102F6C11EEB8D3AA2B4AD9E6FC.roa (raw, json)
Hash identifier: P+Ta6v61jiezBOJeWv/67rgGLwExSAzkzJantnsmJwU=
Subject key identifier: 85:BA:F9:21:D1:CF:D9:B2:93:AE:BD:53:7D:A6:38:FD:F8:30:31:70
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 10F1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D1967E102F6C11EEB8D3AA2B4AD9E6FC.roa
Signing time: Mon 31 Jul 2023 06:38:11 +0000
ROA not before: Mon 31 Jul 2023 06:38:08 +0000
ROA not after: Thu 31 Jul 2025 06:38:08 +0000
asID: 20473
IP address blocks: 154.16.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 11:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4337 (0x10f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 31 06:38:08 2023 GMT
Not After : Jul 31 06:38:08 2025 GMT
Subject: CN=64c756d3-54ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fe:9e:de:04:1d:d1:9a:fc:09:80:94:f1:11:
4a:5f:94:76:e1:c6:50:c6:1d:5f:34:91:c8:06:cf:
9a:5b:8b:23:32:d8:ac:e4:61:3f:fa:34:9f:ed:87:
80:65:d9:c2:03:a3:72:07:f1:78:17:50:bb:96:72:
72:91:5a:73:44:60:23:3c:9b:ec:8e:b7:86:ef:af:
a0:17:eb:4f:42:aa:31:b7:11:ce:71:1b:16:7f:f7:
35:a3:68:42:26:92:93:c6:9e:73:0f:57:e0:73:e6:
70:4b:79:71:de:e6:31:2c:e5:31:54:e2:15:f5:53:
fa:b6:b5:92:48:99:b6:7a:73:e3:63:fe:14:9f:83:
4c:98:ec:8a:8e:a5:a2:20:0c:79:12:58:3d:61:2a:
28:d2:9d:44:1d:33:c6:49:9c:01:25:a1:f1:ce:32:
17:1d:d5:7c:d7:f1:3d:63:b0:21:6b:8c:f9:18:97:
e6:41:07:dd:14:9d:e0:37:6b:4d:dd:3d:f1:ea:01:
c0:56:a0:1f:4a:54:14:95:7e:0b:ca:2a:7a:06:eb:
76:2a:66:79:06:52:66:b5:bf:a1:c3:02:7e:7f:89:
73:f4:0f:7d:6a:f1:5f:7c:35:cd:bb:48:0d:40:18:
00:9b:d6:c9:e8:a0:30:6c:5d:2d:fb:a9:d7:b3:57:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BA:F9:21:D1:CF:D9:B2:93:AE:BD:53:7D:A6:38:FD:F8:30:31:70
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D1967E102F6C11EEB8D3AA2B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.91.0/24
Signature Algorithm: sha256WithRSAEncryption
77:49:7f:b5:21:6e:0c:2e:90:f0:10:d8:37:e4:be:b3:23:c0:
2e:53:82:f5:a0:b9:66:90:6b:55:e7:ca:b9:eb:66:a2:1e:ea:
3f:84:20:28:1c:b7:79:ad:ce:58:74:9b:47:31:1a:d9:03:5d:
6e:51:11:a6:cf:29:38:b4:1c:70:7a:22:40:0b:42:fc:c6:74:
3a:7f:0f:e6:e9:66:b5:5a:3d:15:de:9f:ff:dc:94:a2:60:4e:
4f:b0:e9:a6:4a:06:6a:20:31:3b:e4:a7:cb:40:b3:b7:8d:21:
fb:6c:99:33:fb:91:54:ca:c0:be:db:f2:40:fe:d6:50:ed:c4:
5f:27:8a:4a:e6:33:3c:ab:40:7e:30:9b:04:e9:c6:1c:a9:22:
d8:bf:69:fc:60:74:22:d7:28:63:49:d5:b4:59:b0:27:5b:ad:
cb:4a:c5:a9:74:f3:f4:70:69:2e:31:3f:af:35:01:6b:51:bf:
15:a6:fd:11:8c:c4:03:ca:92:cf:9b:da:17:be:08:db:c8:a1:
4d:b1:f2:4b:f8:c7:22:c2:90:17:b0:7a:b0:82:b8:7b:f2:4e:
13:f8:f1:ae:54:9c:c1:3a:26:d6:99:df:aa:44:bb:ea:86:e0:
05:da:ac:10:4b:40:19:d0:ab:c9:37:52:44:7e:c4:e3:9a:1e:
f9:20:93:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 14:55:31 2024 by rpki-client on console-ams.rpki-client.org