Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DE0F8A26961A11EBA5025784F8AEA228.roa
File: DE0F8A26961A11EBA5025784F8AEA228.roa (raw, json)
Hash identifier: ePw63IFzXusixe1zNu0/6D+vdIgFEtMTcwoz/7zljPQ=
Subject key identifier: 75:FC:F5:4E:FF:67:FA:20:36:A5:46:7E:21:0D:B8:4D:FF:47:63:DC
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0545
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DE0F8A26961A11EBA5025784F8AEA228.roa
Signing time: Mon 05 Apr 2021 14:26:10 +0000
ROA not before: Mon 05 Apr 2021 14:26:05 +0000
ROA not after: Sat 05 Apr 2025 14:26:05 +0000
asID: 9009
IP address blocks: 154.16.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 May 2022 16:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1349 (0x545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Apr 5 14:26:05 2021 GMT
Not After : Apr 5 14:26:05 2025 GMT
Subject: CN=606b1e02-2949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:4b:df:f3:62:bc:8d:1c:80:ea:f3:4c:9e:
1a:56:5f:5a:4c:d9:d1:68:47:c1:f1:78:ce:4c:af:
5c:37:6b:76:d3:72:08:b9:72:88:1a:9a:46:1d:1a:
ed:6c:ce:fa:88:36:db:04:00:8f:a5:01:6f:99:c7:
7a:8b:b0:45:83:e1:01:7d:6c:88:2c:57:81:ce:61:
5b:a7:32:31:a9:09:e7:1a:aa:fe:7f:70:98:1e:a6:
c0:c5:c1:15:ab:a3:5b:c2:65:72:9e:00:3d:db:80:
0d:04:e6:9f:12:f4:17:8a:cf:7d:a8:d3:96:4a:37:
8a:3e:fa:bb:1e:af:d7:44:cc:3e:91:ea:f3:b0:0d:
76:15:fe:cf:78:28:85:ec:71:44:d8:d6:c2:8d:1f:
bb:db:3a:6d:2c:a1:e0:82:97:12:3c:82:30:31:37:
bc:0c:04:11:27:4a:40:02:3d:7d:3e:de:e0:ac:84:
90:18:d7:c0:a6:6e:6e:89:a2:f5:25:6d:1a:78:69:
46:4a:50:65:72:0f:68:95:fd:02:72:4c:9d:2d:27:
3b:fa:7b:60:f1:e1:cd:82:a3:6c:e7:af:8d:fe:31:
7f:fd:a8:a7:68:d5:01:1b:51:e3:cd:a3:2b:0f:f5:
8e:91:1e:f8:1c:44:d6:7d:44:68:a1:3d:6c:76:e8:
4c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FC:F5:4E:FF:67:FA:20:36:A5:46:7E:21:0D:B8:4D:FF:47:63:DC
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DE0F8A26961A11EBA5025784F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.139.0/24
Signature Algorithm: sha256WithRSAEncryption
83:fd:22:63:78:ce:6f:47:f0:9e:8c:a7:9c:83:c8:87:e9:f4:
a8:dc:f8:b6:05:a0:7c:82:8d:54:8c:da:d6:0f:6d:50:82:b6:
3d:8e:ed:8a:d6:46:d8:8a:f5:96:d9:8b:48:8b:d2:4c:16:db:
88:6b:a9:0c:2c:14:7a:9a:28:04:cf:41:a3:4c:5e:e4:da:18:
84:f1:a4:10:d9:1a:aa:8a:0e:68:8d:d7:e7:86:9f:61:c3:c5:
30:66:a8:09:c2:39:45:29:a2:81:36:0c:0b:06:2f:54:14:79:
ae:a2:25:35:22:8c:d4:a2:7d:6d:d6:7b:4f:22:c5:5c:20:82:
3f:0f:2d:98:a5:f9:f8:36:eb:e2:e9:64:2d:5b:25:1b:11:7b:
40:13:3c:e8:b7:4e:37:71:3e:a8:a4:68:9f:1b:6a:32:bd:7c:
4f:55:5a:f3:6c:34:52:79:81:ca:f2:57:19:a9:76:b1:03:15:
ce:be:33:40:5b:e5:bc:c3:fa:3d:0e:f1:06:87:6e:3d:19:c4:
e7:94:29:47:c8:2b:4f:6a:3e:14:bb:f0:13:5c:aa:55:39:ff:
68:43:08:c0:49:00:44:53:a4:03:e5:4b:d5:a9:2c:72:75:26:
b1:52:73:2b:93:1c:62:82:78:e4:7d:51:e0:fe:b2:38:0f:54:
52:24:50:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:42:49 2025 by rpki-client