Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E0A7C3D45E1311EE905E253C4AD9E6FC.roa
File: E0A7C3D45E1311EE905E253C4AD9E6FC.roa (raw, json)
Hash identifier: 7sRVzIIj4/QsCxqugIuJq+lZEiQ9kzL9vPeBDWTsshI=
Subject key identifier: 5D:3C:2E:4C:81:99:C7:16:EC:97:91:0C:65:B5:91:19:5C:B8:6B:D0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 129A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E0A7C3D45E1311EE905E253C4AD9E6FC.roa
Signing time: Thu 28 Sep 2023 15:29:56 +0000
ROA not before: Thu 28 Sep 2023 15:29:53 +0000
ROA not after: Tue 30 Sep 2025 15:29:53 +0000
asID: 213060
IP address blocks: 154.16.24.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 04 Oct 2023 12:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4762 (0x129a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Sep 28 15:29:53 2023 GMT
Not After : Sep 30 15:29:53 2025 GMT
Subject: CN=65159bf4-300d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:33:b7:d3:59:45:e8:b5:3b:43:3f:dd:7f:
01:22:29:49:d7:3a:dc:bb:b0:b3:f3:51:67:f4:0d:
42:92:2a:d7:96:2d:cc:54:66:77:e8:c8:a0:1b:c3:
c8:5e:e8:4f:3e:24:f6:9d:16:6e:00:54:50:ef:b7:
03:b8:c7:3a:40:81:8d:e9:21:eb:ed:54:d8:84:79:
7c:98:06:2d:67:ec:48:4a:39:48:44:c9:c1:4e:8b:
2e:63:98:76:d5:80:a1:71:36:2e:1e:2f:60:5b:35:
c0:85:a0:d9:f6:35:c4:d6:3e:03:47:7e:ca:74:c0:
24:ea:b7:e1:e2:b9:3c:b0:ab:b7:5b:82:a6:cf:a9:
8b:f7:91:2d:ba:08:4b:c1:47:88:c9:9a:47:ad:eb:
98:83:5f:b7:8c:7d:16:2e:c2:32:6d:7e:c7:84:a6:
f0:b8:e3:ab:b8:3c:d7:65:ad:85:ba:e6:7f:26:bb:
e3:af:ee:05:44:5f:63:22:64:4e:53:80:c9:0f:87:
29:a3:cb:ed:fd:34:fb:ca:24:b3:18:dc:59:7c:b4:
79:22:43:e2:24:b2:62:e9:de:de:5d:4d:7f:3a:de:
29:41:1e:e6:be:e9:9e:40:1e:2a:9d:09:8b:71:67:
47:09:7e:d4:34:8c:c3:d6:bf:0f:67:0f:50:e7:a4:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3C:2E:4C:81:99:C7:16:EC:97:91:0C:65:B5:91:19:5C:B8:6B:D0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E0A7C3D45E1311EE905E253C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.24.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:97:a6:14:10:f9:14:39:6c:0d:99:c7:df:a0:f2:44:6e:aa:
a6:4d:b1:81:ec:08:2b:2a:4e:6f:13:5d:48:6c:ab:7b:cd:98:
20:28:dd:4d:57:bf:a2:e7:e3:e1:de:04:b9:ca:a8:d3:6e:16:
5b:c3:36:3a:e9:f4:4a:a4:17:31:2e:7c:85:9f:85:a9:85:52:
01:fd:17:74:8b:8e:90:d7:f3:80:b8:8f:1d:be:82:7c:b9:9d:
db:d8:0d:36:a9:a8:49:88:8f:9f:d5:9f:e9:a0:3a:9e:af:83:
b6:99:2c:c1:55:5b:62:6d:95:77:31:87:2b:f1:b2:3b:25:c4:
b4:54:cc:77:7e:18:a3:09:a2:72:25:ef:4a:f0:74:9c:77:3a:
f5:f8:d0:bc:ae:0f:4b:8c:4b:46:0e:fc:b3:75:9f:ee:ad:bb:
3b:e1:ce:80:18:91:08:9a:f3:7b:1c:cb:f4:d9:de:c0:eb:c2:
7a:76:08:dd:dd:75:ea:67:fe:93:48:37:a9:b2:ef:7b:9a:97:
aa:31:2b:3a:f3:e6:7c:40:73:02:84:c7:d6:9f:c1:71:75:c7:
97:7f:b5:b0:a2:cc:ba:8b:ef:33:43:38:24:ff:ea:90:a6:ff:
67:86:6e:c9:2a:ee:da:5e:4d:6b:cc:1b:5c:24:52:cb:9b:2c:
56:b2:8a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:54:27 2025 by rpki-client