Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DD4214624DD511EF8D6E4481762E951A.roa
File: DD4214624DD511EF8D6E4481762E951A.roa (raw, json)
Hash identifier: 0tHxqZ70/sam0IaZuzsbm8r6XztaZ+tsQIHu63XffeM=
Subject key identifier: D8:BD:47:3A:4A:6A:4F:8D:CE:1F:35:15:1F:59:4F:CE:CE:01:8A:31
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 175E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DD4214624DD511EF8D6E4481762E951A.roa
Signing time: Mon 29 Jul 2024 18:10:41 +0000
ROA not before: Mon 29 Jul 2024 18:10:36 +0000
ROA not after: Fri 31 Jul 2026 18:10:36 +0000
asID: 7018
IP address blocks: 154.16.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 08:52:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5982 (0x175e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Jul 29 18:10:36 2024 GMT
Not After : Jul 31 18:10:36 2026 GMT
Subject: CN=66a7db21-0ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:21:d6:92:17:78:e9:a9:71:12:93:9a:39:
92:d9:b4:9c:de:20:35:c8:fa:f3:18:0b:12:de:c5:
ab:46:d7:7e:5a:91:c1:cd:0e:ea:cb:cf:62:b2:a7:
c0:a2:c7:1b:2b:49:47:ed:ea:c9:af:da:56:e2:16:
1f:0b:c0:e9:f5:84:33:fc:a3:65:49:85:ca:3d:2a:
e3:18:73:98:df:76:9f:e5:5a:7f:05:0a:7a:3a:a1:
75:0a:74:0d:e7:17:c2:85:cb:5b:cd:e0:2f:72:9e:
8a:fc:e9:eb:25:5f:77:64:d4:07:eb:05:d3:34:6c:
7e:0f:ff:d5:c2:b4:2e:96:67:06:c4:59:de:2e:a5:
0c:22:ad:c5:61:72:d2:8d:f2:c0:fe:cd:c6:09:8f:
dc:bc:9b:91:36:6b:f5:8a:a9:31:44:5b:37:96:87:
0a:05:9f:fd:8b:8c:86:45:fe:26:aa:6b:2f:7f:d3:
b9:4b:db:b0:59:fa:92:e1:df:b9:89:8b:98:3f:59:
e5:d5:9a:e1:99:ea:c7:25:4e:98:32:6f:36:d1:83:
61:e7:d6:07:7d:f8:4e:ef:1d:20:50:29:d5:98:ca:
eb:83:96:f9:c9:78:bb:de:24:e8:c6:d9:0f:07:6a:
b7:ca:2b:70:7e:e4:46:b2:d4:c3:e0:de:c0:84:71:
3f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BD:47:3A:4A:6A:4F:8D:CE:1F:35:15:1F:59:4F:CE:CE:01:8A:31
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DD4214624DD511EF8D6E4481762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.13.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:44:50:73:55:b3:ae:84:4c:f5:de:b8:32:f0:96:cb:6c:8f:
5c:d9:14:8f:1c:1d:d2:f2:65:fa:bf:24:e7:7e:d8:0a:1b:16:
8f:62:29:94:48:a7:c0:1c:3a:45:46:ab:f2:35:ee:fa:3f:f2:
6a:e7:fc:db:1b:40:44:5b:f8:57:39:c9:61:81:e4:bb:83:d6:
55:4e:d6:41:4b:a2:ea:93:18:02:a6:a1:11:d5:09:31:a8:95:
2b:8b:78:fa:7c:f4:84:59:1e:49:7d:91:69:39:c2:c4:c6:48:
07:42:fc:0a:c0:7a:05:24:f9:80:f3:eb:a0:76:fd:3f:b8:25:
8b:b9:2f:9d:ff:3f:f6:1d:a3:7d:cd:e5:51:28:f1:03:f5:ac:
01:b4:a1:93:1c:e4:44:cd:ee:32:ca:f2:17:48:e2:89:6b:3e:
70:10:41:ee:35:49:ae:ea:88:b3:30:ad:87:d8:c6:bf:52:f0:
ce:e8:ae:aa:d3:94:b9:7f:68:88:18:f5:e5:38:32:c6:c2:40:
b9:a5:8f:8d:f0:79:d9:d7:79:45:8f:ec:eb:48:fd:90:37:59:
b3:6a:77:0e:f5:94:9e:6d:d7:c6:94:e5:d7:81:5b:3c:b3:f4:
2d:f7:cd:4b:12:c4:8e:db:a4:a5:11:32:47:79:09:cf:17:af:
23:82:85:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:48:57 2025 by rpki-client