Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D273CEBEB43D11ED8927ACABF1222468.roa
File: D273CEBEB43D11ED8927ACABF1222468.roa (raw, json)
Hash identifier: jj6uh+HyhdSHYs36Mc/apzC3rN2wy3CHuI1u0e8k+R8=
Subject key identifier: 9F:C0:3F:34:F6:8F:95:2D:7D:F8:78:6C:2E:F0:D5:53:25:F1:4F:B2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C15
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D273CEBEB43D11ED8927ACABF1222468.roa
Signing time: Fri 24 Feb 2023 12:21:54 +0000
ROA not before: Fri 24 Feb 2023 12:21:50 +0000
ROA not after: Sat 22 Feb 2025 12:21:50 +0000
asID: 61317
IP address blocks: 154.16.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 13:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3093 (0xc15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 24 12:21:50 2023 GMT
Not After : Feb 22 12:21:50 2025 GMT
Subject: CN=63f8abe1-1af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:87:11:05:a1:1d:f2:67:12:c6:d2:aa:06:a2:
49:c8:3b:8f:38:64:89:b4:02:d6:0e:92:a9:16:22:
51:ef:7e:43:d1:37:3b:13:5c:91:26:1e:23:9a:f4:
c4:f3:34:02:fb:b5:34:b0:48:1b:c6:bf:69:d6:a9:
83:fa:44:b1:7a:06:96:f4:e6:9e:9d:1b:8e:85:a3:
a6:a1:94:85:2d:ef:3d:65:a7:85:be:9c:a1:94:9b:
bf:50:8f:86:6e:8a:18:ec:aa:76:84:83:a9:2e:f6:
f9:eb:9f:b5:7f:d1:7f:b7:16:b7:03:45:bb:d0:6a:
95:48:dc:05:d6:ac:82:58:d7:f3:7d:6e:dd:fd:78:
0d:90:e0:a0:f2:1b:3e:b9:ee:bb:fc:0f:f5:e5:0f:
77:c5:c8:e5:cb:2d:f9:ba:53:59:f8:02:ba:a1:01:
91:df:95:65:0e:ba:59:73:61:4f:82:fc:44:62:2f:
46:05:bd:df:ce:7e:e8:32:c1:70:c2:e8:e6:0b:da:
ea:9e:75:29:ca:bd:85:81:3d:ac:02:da:47:71:c3:
37:48:ba:ae:28:75:44:30:26:ca:4c:49:c9:ad:a0:
ba:4d:9c:fc:6d:fc:a5:6d:0d:bf:fe:f6:18:68:56:
f4:bd:cf:4a:96:40:4c:67:c0:6d:ae:d9:67:de:42:
e5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C0:3F:34:F6:8F:95:2D:7D:F8:78:6C:2E:F0:D5:53:25:F1:4F:B2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D273CEBEB43D11ED8927ACABF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.48.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:c9:a5:72:4d:01:ba:2f:e6:f4:d0:04:2f:61:56:6c:93:07:
8d:d0:74:0b:a2:a5:cd:15:48:eb:c8:99:0f:d3:2d:5c:a2:9a:
79:45:07:42:49:c1:52:0f:4d:b7:15:9c:a5:d6:14:19:13:23:
5e:ed:d8:ad:7d:75:06:48:c6:84:bc:d3:db:67:26:56:86:30:
4d:a4:4c:f7:90:d1:17:fa:af:70:45:65:5c:a4:a7:3d:2a:1d:
5c:6a:8d:c5:88:3d:0f:f6:86:1f:a0:12:37:ad:e6:32:e8:0e:
31:da:07:f4:7b:53:e0:66:15:15:58:51:61:b3:ad:bc:32:4d:
44:74:1a:5a:c5:ec:4d:31:1c:9d:65:f5:75:ec:c5:5c:eb:b1:
80:83:fd:f1:cf:75:e0:28:00:8c:46:f7:4b:00:e6:82:b5:6b:
74:8f:3c:82:5a:11:9f:18:8e:5d:32:3f:47:7f:2c:c8:64:a3:
9d:68:42:d2:12:30:2f:71:44:d6:dd:1c:66:ed:b2:5a:cd:10:
f6:39:76:cc:85:3e:6c:2f:f2:ab:39:f7:e2:48:b6:2a:09:a6:
a7:d7:dc:cb:fd:15:ad:5a:ec:3f:62:1e:c5:d2:2e:40:68:63:
2a:2e:41:c2:5d:1f:ba:e9:f8:03:df:68:93:ba:45:11:e5:b3:
fe:d4:10:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:53:50 2025 by rpki-client