Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E0274AB853DD11EF954CECB3762E951A.roa
File: E0274AB853DD11EF954CECB3762E951A.roa (raw, json)
Hash identifier: g15CEwM4FfWs6SmpLt8gtdIE6gkx5vvR3BHzELNa6F4=
Subject key identifier: F8:28:FB:40:7F:7D:F9:36:D2:6D:E7:17:FF:9B:F0:DA:9A:8B:C2:F8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1778
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E0274AB853DD11EF954CECB3762E951A.roa
Signing time: Tue 06 Aug 2024 10:23:08 +0000
ROA not before: Tue 06 Aug 2024 10:23:05 +0000
ROA not after: Thu 06 Aug 2026 10:23:05 +0000
asID: 21859
IP address blocks: 154.16.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 05:58:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6008 (0x1778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Aug 6 10:23:05 2024 GMT
Not After : Aug 6 10:23:05 2026 GMT
Subject: CN=66b1f98c-ff72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:43:60:19:a7:73:06:f6:e8:31:d7:d1:42:d6:
ee:69:21:0e:98:15:39:70:aa:a4:ac:60:89:50:d8:
fb:87:61:e1:6f:53:95:a4:5e:e3:54:a3:67:0e:01:
ec:6e:e7:2d:9e:41:55:03:a6:94:41:61:e2:41:b2:
db:75:10:16:f9:e6:c3:c9:ea:15:fb:e1:91:6c:dd:
7b:13:f0:7a:9c:59:1c:e0:4f:f7:e5:d0:87:62:92:
2d:93:cd:d0:2a:c4:df:dc:96:1a:ca:c5:a4:3a:4c:
34:a4:04:97:ed:d5:37:69:30:d7:a8:a7:df:2c:ee:
d6:3d:2a:35:47:26:1e:f2:bd:70:34:84:03:c1:9f:
b7:5c:9b:6b:69:da:23:b9:f6:ed:73:40:5f:d7:70:
cb:13:4f:c0:b3:78:9e:db:96:dc:84:63:04:a5:48:
d3:74:aa:1c:f8:c9:eb:81:2f:1a:bd:84:a2:36:81:
e6:b9:ba:8b:ca:c8:4f:c7:5e:11:2e:56:5e:8e:0a:
5d:64:6f:b4:f1:b6:af:9a:2a:19:31:32:3f:81:5e:
66:91:f1:5e:54:30:be:21:f5:89:27:dc:15:d0:79:
39:4d:e1:2f:14:e6:e6:90:67:25:8e:06:42:a3:74:
e8:97:00:77:10:82:bb:82:6f:fa:ee:8c:6f:6f:f6:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:28:FB:40:7F:7D:F9:36:D2:6D:E7:17:FF:9B:F0:DA:9A:8B:C2:F8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E0274AB853DD11EF954CECB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.72.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:24:4a:fb:9e:68:bd:14:6b:f4:61:b5:09:58:08:53:99:43:
b7:76:b1:f0:f3:58:2d:12:f6:76:72:4b:cb:ee:4f:b3:1d:6c:
8c:2f:c5:71:58:f4:2b:67:de:7b:07:b1:d6:b2:e1:5c:cb:4b:
9b:1f:4c:89:7f:45:26:0c:cd:29:30:0c:b3:ad:27:11:f1:43:
5f:3f:8a:12:fb:05:1f:e5:ec:2e:f8:83:e3:e5:89:84:39:50:
90:87:eb:07:31:8a:b0:68:70:1a:8c:3b:cc:03:22:a7:3c:c1:
df:d0:d3:dc:31:71:dc:d0:9b:b8:78:d6:18:00:56:7d:35:94:
b1:94:db:ae:56:4a:2a:12:c6:d0:89:a5:53:ca:b3:10:a3:16:
bd:c0:e8:6f:25:07:d8:03:d1:9a:85:cd:24:b9:a5:0e:4c:00:
8f:55:33:d9:ef:75:12:38:0a:cc:fe:97:82:ca:c2:34:a2:c7:
93:cc:9c:96:24:5d:7d:39:a9:c9:f1:96:4d:bf:bc:99:3e:53:
c6:a0:ca:a4:f9:ed:d7:86:45:85:de:76:3c:0b:91:18:22:e1:
10:b3:5a:0f:92:6d:c3:e6:aa:9a:8c:ab:11:88:66:a6:75:df:
52:af:59:7e:41:5d:ba:92:dd:34:9a:4c:c3:60:19:3d:ca:51:
0c:49:6b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 15:04:09 2025 by rpki-client