Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DFD25F9AB69411ED972AC1BFF1222468.roa
File: DFD25F9AB69411ED972AC1BFF1222468.roa (raw, json)
Hash identifier: 36baLVYYtzgaTuNv8Rf3fa1sYYnCfuJ3C/PgwTJuS7M=
Subject key identifier: 2B:66:37:F6:E5:FF:F9:3B:B1:C8:DB:08:E4:00:16:06:38:B1:99:D3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C67
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DFD25F9AB69411ED972AC1BFF1222468.roa
Signing time: Mon 27 Feb 2023 11:50:04 +0000
ROA not before: Mon 27 Feb 2023 11:50:01 +0000
ROA not after: Thu 27 Feb 2025 11:50:01 +0000
asID: 61317
IP address blocks: 154.16.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 13:11:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3175 (0xc67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 27 11:50:01 2023 GMT
Not After : Feb 27 11:50:01 2025 GMT
Subject: CN=63fc98ec-fd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:96:e2:61:ef:63:d7:6a:20:99:fb:ba:c9:
16:b6:f1:96:7c:bf:0a:d0:1b:53:ed:e3:0f:c7:b6:
d4:f9:78:97:48:14:fc:7e:79:71:b0:19:05:d4:7a:
33:ef:04:a5:d3:54:6a:30:3a:2c:7c:54:f8:0e:6f:
92:0d:05:8b:ed:e5:98:f5:7a:e9:04:ef:e4:fa:93:
a5:6e:25:66:87:1c:43:09:5e:78:ca:65:ce:7d:ce:
13:35:e7:f5:58:92:84:1a:e7:c6:50:b2:de:b9:12:
b1:b2:f3:47:0b:df:9a:39:a6:7a:16:d2:4a:31:f0:
d0:1a:59:87:1b:d6:83:2f:04:94:a0:ec:7d:b9:af:
46:8b:db:bf:5d:ac:bc:7f:30:3d:58:69:f0:a0:7f:
51:27:db:92:e5:41:4d:9b:91:07:4a:b7:cf:3d:5b:
49:05:9b:4d:e0:46:31:b3:bf:2c:eb:05:12:14:09:
e4:a3:72:33:95:9e:3f:0c:cb:a4:e3:eb:a7:78:db:
13:6e:6f:dd:b3:f2:f5:68:3b:a6:19:50:e3:d2:2c:
79:70:cc:2c:6c:b0:aa:8f:db:fe:47:38:b0:dc:9f:
4a:7d:9b:5d:67:a1:10:47:91:af:b0:cf:d6:82:91:
a4:48:5b:9e:b8:57:a8:be:b1:c6:1c:05:94:8e:cc:
06:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:66:37:F6:E5:FF:F9:3B:B1:C8:DB:08:E4:00:16:06:38:B1:99:D3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DFD25F9AB69411ED972AC1BFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.124.0/24
Signature Algorithm: sha256WithRSAEncryption
55:6e:04:b2:7b:0b:7d:6b:a9:ac:fe:b6:f4:43:b8:b6:ad:92:
c0:b4:63:56:3a:fc:26:97:3a:36:49:e3:71:d1:93:d5:7d:91:
68:9c:30:a1:fc:85:5c:cd:2a:37:03:aa:d8:a4:52:21:db:0a:
8b:ae:1b:f0:9c:75:3c:23:c0:65:27:50:9c:14:9b:69:3a:71:
6d:09:54:6c:ee:aa:e6:de:de:60:45:f4:c8:9d:89:18:56:86:
40:57:2b:ce:32:74:90:19:d9:31:d5:77:75:b5:48:24:5d:d8:
b4:30:b2:9b:ed:ff:f1:37:ce:16:5f:a4:52:21:10:1f:ee:63:
5b:11:dc:70:0c:88:fd:21:f5:65:32:00:b2:f8:27:87:6d:77:
c5:12:98:ec:f8:97:65:ec:83:a8:0b:2c:97:0b:ec:20:d2:9b:
37:52:b4:03:49:f4:48:9d:17:ee:0f:cd:47:2c:f9:e8:21:17:
2c:c8:02:95:61:d5:17:6e:7c:4b:a4:01:05:87:3f:a5:89:69:
1b:29:a6:17:1a:fa:96:0b:d7:f8:7b:8a:66:67:75:5d:07:65:
82:83:9d:67:f3:3e:28:43:3d:96:09:31:fc:32:c6:9e:cc:0b:
50:dd:f8:89:2a:bd:f3:e1:3d:2a:6b:fd:5d:c9:f7:b8:a9:3d:
11:85:06:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 18:00:34 2024 by rpki-client on console-fra.rpki-client.org