Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DAF880B6AAFE11EFAF1AEC58762E951A.roa
File: DAF880B6AAFE11EFAF1AEC58762E951A.roa (raw, json)
Hash identifier: sxunGgDczOlNd3OB0NHQyBqgVy9UDHVixQFASbhK8sI=
Subject key identifier: A7:AD:DA:80:5E:92:37:38:7E:07:A4:49:28:3E:C3:4A:F8:E7:2C:A8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1906
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DAF880B6AAFE11EFAF1AEC58762E951A.roa
Signing time: Mon 25 Nov 2024 07:28:24 +0000
ROA not before: Mon 25 Nov 2024 07:28:21 +0000
ROA not after: Wed 25 Nov 2026 07:28:21 +0000
asID: 8075
IP address blocks: 154.16.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Nov 2024 20:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6406 (0x1906)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Nov 25 07:28:21 2024 GMT
Not After : Nov 25 07:28:21 2026 GMT
Subject: CN=67442718-f4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:77:9d:02:d1:da:0b:45:44:7c:47:b7:39:3a:
d7:b1:07:66:e9:d9:60:82:0b:09:02:75:da:eb:c5:
84:25:c5:cd:5a:9a:ae:43:35:c6:8b:53:25:39:3e:
9f:2d:b3:96:71:43:2e:5b:62:ab:f4:b5:20:1b:b4:
44:e8:12:9d:df:31:d0:93:46:69:ad:e0:05:c2:31:
0f:be:82:c9:a5:71:9f:f2:2c:ee:83:0c:7d:f7:ed:
f2:c2:0e:91:1f:61:bf:09:6f:2f:cf:b7:bc:3f:b7:
ea:cc:82:ce:fd:41:14:ff:87:54:05:96:4c:87:0c:
6d:9f:b0:21:52:ee:ad:ac:44:c4:90:9a:36:55:92:
23:3f:b7:d4:27:78:71:f3:48:31:ab:00:db:f7:14:
42:cc:56:18:b9:45:7a:a4:3c:a7:91:de:45:88:29:
f1:cd:d3:b2:55:99:46:fd:a6:66:ff:70:41:67:e2:
7b:d5:b5:37:7e:61:58:ad:7e:6b:c3:62:9d:ae:16:
48:03:7c:08:b1:4f:69:44:ba:f9:bd:f1:e4:f4:3d:
94:09:e3:53:2a:11:42:b8:06:f7:ac:69:87:19:9e:
3f:4b:e4:a2:eb:f2:af:46:a4:e6:e1:c1:da:05:43:
7b:6e:cb:d2:e5:b8:cd:e5:65:aa:f7:30:76:8c:ba:
a3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AD:DA:80:5E:92:37:38:7E:07:A4:49:28:3E:C3:4A:F8:E7:2C:A8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DAF880B6AAFE11EFAF1AEC58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.96.0/24
Signature Algorithm: sha256WithRSAEncryption
59:99:99:60:55:da:65:e2:10:0c:07:36:32:d8:52:ce:4e:a2:
c9:16:5e:21:95:73:50:0a:12:93:27:7f:0d:0a:6c:44:7a:e3:
2f:ec:93:77:f3:11:ec:6d:39:46:62:4e:5a:0e:5a:f2:3d:77:
77:b1:30:e8:ed:12:99:47:8e:26:97:91:2d:e0:15:b0:66:13:
f8:d9:56:b6:28:ba:67:ad:dd:9e:4d:00:b9:b6:e9:32:55:97:
bd:36:f6:26:6b:0f:5d:0a:d5:95:1f:49:59:e6:0d:8f:9b:26:
03:13:d6:80:39:18:30:c9:9e:10:d8:b1:86:9e:a3:17:be:95:
ab:2f:60:0b:bc:91:51:b3:43:70:bc:ec:81:cf:d8:d6:60:2a:
18:9c:8f:25:82:c4:73:1c:26:e6:e3:2b:d0:33:e7:83:62:1a:
3b:4d:d4:08:fd:d3:86:bb:5c:e7:66:c8:40:a8:c2:10:37:18:
65:64:dd:bb:7b:82:85:50:6a:4c:15:1d:f5:4f:11:c8:ce:86:
ac:d4:60:a0:39:70:f9:4a:93:f4:df:d3:47:e8:5b:a5:68:43:
00:8f:46:52:26:b4:b4:e6:a1:c6:fd:0a:81:80:82:4d:8d:28:
83:bc:35:52:b0:c6:bf:07:6e:5b:1f:40:15:40:e4:ff:a7:25:
f5:37:8b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:50:48 2025 by rpki-client