Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DE105C1C5BA211EE90F3E9694AD9E6FC.roa
File: DE105C1C5BA211EE90F3E9694AD9E6FC.roa (raw, json)
Hash identifier: 5TMFhDFjSon77xbJILQRmmq3EJn3Mb/hoBYopHAgu/M=
Subject key identifier: D2:FD:92:53:1C:FA:1B:E1:DB:F8:4B:A3:F1:53:BB:D2:04:E1:25:E5
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1278
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DE105C1C5BA211EE90F3E9694AD9E6FC.roa
Signing time: Mon 25 Sep 2023 12:55:56 +0000
ROA not before: Mon 25 Sep 2023 12:55:53 +0000
ROA not after: Wed 25 Sep 2024 12:55:53 +0000
asID: 28459
IP address blocks: 154.16.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 06:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4728 (0x1278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 25 12:55:53 2023 GMT
Not After : Sep 25 12:55:53 2024 GMT
Subject: CN=6511835c-45a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2b:40:1c:d3:65:c5:3e:9f:2f:f8:d6:b2:f0:
2a:1d:32:fb:b8:38:ec:09:34:90:d0:cf:ba:70:2f:
69:fb:be:e7:8c:c0:d1:43:8d:c9:6f:d4:56:88:0b:
2d:26:c9:55:ba:69:2a:41:ef:37:15:bc:a2:be:ef:
1d:3e:f3:55:7d:b0:d7:55:43:5d:ec:9f:8f:d6:e2:
0a:ca:c0:91:8c:ae:76:38:36:fb:47:eb:d2:e7:33:
a9:d9:dd:2a:63:91:9c:78:58:92:d7:d9:5f:19:71:
82:25:6b:6c:29:75:83:3e:e6:5e:ea:dc:83:98:ee:
3c:df:8a:5f:9e:6f:a2:58:26:71:fb:20:55:98:b1:
9a:61:2b:fa:70:c3:4d:6a:36:1e:86:d4:0d:c3:81:
08:ab:8b:16:a3:7f:a7:b4:5d:a2:8e:63:01:03:64:
95:0b:b9:bf:e3:e5:29:d8:0e:ab:9e:61:30:52:3c:
3c:18:83:35:99:ba:c8:1a:0f:e5:b7:3c:f5:cc:5f:
1a:b1:47:10:9a:7a:2f:6a:ad:b5:a4:48:6f:58:7b:
25:f9:dc:f1:ec:00:91:14:72:34:e6:fb:db:55:ef:
63:a1:3f:f5:5d:2e:a0:4c:23:b3:f5:56:dc:17:28:
d0:58:73:53:1c:b2:1c:b1:15:ea:0a:e4:0f:0d:a7:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FD:92:53:1C:FA:1B:E1:DB:F8:4B:A3:F1:53:BB:D2:04:E1:25:E5
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DE105C1C5BA211EE90F3E9694AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.41.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:b8:18:40:00:1e:05:77:99:90:fa:7a:da:75:a1:6d:a3:e2:
5f:62:8c:ab:38:39:f1:93:6e:f3:65:5a:d4:93:b8:e9:b5:cd:
0e:ec:8d:07:c7:85:fd:1e:9e:6b:28:b7:4b:1f:ec:2b:c7:b0:
a5:ae:34:17:74:ba:f0:7e:60:85:1c:c9:cd:f6:63:c1:fc:9c:
8f:08:a4:6c:54:bf:ae:6c:57:00:b6:c5:28:9b:00:7b:f6:81:
4f:32:f0:71:28:3d:73:5b:32:24:be:92:55:3a:15:b1:c0:b5:
72:92:c2:a3:82:51:78:ae:ba:b2:ae:54:c7:30:73:e7:72:00:
69:e2:ef:5c:61:e4:ad:2d:b0:64:fc:34:e9:45:4c:76:98:b9:
58:ee:01:c3:6b:99:21:7f:c3:34:41:3f:d6:77:a0:6d:7b:42:
e6:12:96:84:e4:d0:1a:72:3b:f4:a3:90:7f:e8:13:27:e7:f3:
70:80:a4:48:4c:df:51:be:29:30:c0:84:ad:2b:94:53:a7:1f:
c6:99:54:19:25:9c:0a:c6:97:39:d7:55:17:98:fe:77:87:1b:
99:99:d0:cf:ba:da:34:7f:7e:9d:74:da:c8:71:d9:63:00:0d:
28:99:63:0a:43:e4:46:2c:e3:d0:b8:29:9c:d3:2a:7f:46:d1:
f4:dd:47:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 11:26:06 2024 by rpki-client on console-ams.rpki-client.org