Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E0E3708ED7B011EE8E578F89775412E6.roa
File: E0E3708ED7B011EE8E578F89775412E6.roa (raw, json)
Hash identifier: o0m0vNxzYjICrPBKqf/cVxdqcfFp64r+MNnhYjzF1I8=
Subject key identifier: 68:4E:1E:41:ED:E0:8B:AB:9B:C6:BC:33:9A:3A:38:67:3A:50:47:14
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1538
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E0E3708ED7B011EE8E578F89775412E6.roa
Signing time: Fri 01 Mar 2024 09:48:38 +0000
ROA not before: Fri 01 Mar 2024 09:48:35 +0000
ROA not after: Mon 02 Mar 2026 09:48:35 +0000
asID: 834
IP address blocks: 154.16.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Apr 2024 17:25:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5432 (0x1538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 1 09:48:35 2024 GMT
Not After : Mar 2 09:48:35 2026 GMT
Subject: CN=65e1a476-ef2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:eb:5e:c7:48:d7:e5:71:de:1d:9c:98:aa:3c:
10:8b:ba:5b:cb:88:4b:68:df:26:20:89:bf:6e:fa:
34:6c:39:dc:1c:0b:ef:0c:5a:69:17:b6:3c:72:7e:
96:d4:ad:fc:41:7e:19:90:d9:bb:c4:38:4b:7d:cf:
fd:c7:d1:f1:1e:7f:25:60:93:5c:7f:d1:5d:0c:95:
b7:1b:46:1f:9f:6f:a6:30:b1:91:0b:36:00:f3:40:
d4:55:b7:8f:df:e4:4c:50:53:b7:10:14:23:e2:b1:
f1:9a:17:37:cf:32:db:74:bb:51:90:4e:98:55:8d:
88:42:e7:1d:be:2d:49:13:a3:f4:10:67:22:8c:10:
66:a6:b3:9d:df:89:08:31:ef:f5:0f:0f:03:9a:7c:
b2:e8:a0:72:4e:a9:fb:3e:f2:06:f0:ff:c1:92:73:
0f:fb:66:dc:b3:2b:2b:44:d7:49:7a:f4:fe:52:62:
e3:66:22:d4:0f:2e:19:10:23:b9:29:c8:13:9d:ae:
66:79:10:3f:69:c6:74:f9:a3:72:f1:3b:05:91:e0:
5a:65:9c:75:9f:ee:3f:9e:9e:c8:e4:04:82:01:1e:
c0:7d:9a:f3:a6:22:a7:81:08:20:05:c8:31:4e:e6:
96:75:f9:13:b3:46:5e:73:0d:28:96:e2:3b:ad:57:
65:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4E:1E:41:ED:E0:8B:AB:9B:C6:BC:33:9A:3A:38:67:3A:50:47:14
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E0E3708ED7B011EE8E578F89775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.223.0/24
Signature Algorithm: sha256WithRSAEncryption
78:7f:55:ac:1b:39:84:99:33:31:37:8b:5d:21:61:84:07:74:
c9:09:a6:04:c2:a4:af:0c:fa:e3:09:c1:3c:30:1b:44:d9:9a:
8e:89:72:dd:51:e6:21:31:e9:69:bc:d2:e3:40:ec:dd:e0:ac:
dd:9b:0e:9f:8b:84:5e:f8:95:e2:1d:38:bb:d3:8d:f7:0e:09:
07:f0:38:8c:dd:01:ed:bc:4f:e7:92:92:22:1b:a0:eb:01:23:
26:5c:b9:bd:44:50:8a:3b:1c:d7:fd:28:80:f6:97:ee:60:fa:
4d:33:cb:d1:3d:4e:27:93:c1:09:65:68:af:13:2f:32:5a:d2:
0c:b5:92:5a:14:56:22:89:6c:5b:b3:3e:45:08:04:1a:4c:8a:
33:6c:70:f5:80:61:80:20:ee:85:63:6c:9c:18:f6:e8:d5:b4:
0e:74:26:0a:28:99:60:93:ac:cc:c8:17:f5:3f:ad:f1:5c:40:
28:42:25:69:cc:48:57:f4:39:dc:da:a1:3c:10:0b:53:15:2e:
b3:db:9f:92:6d:fd:6c:9c:a5:51:64:46:ad:97:3c:25:b9:b2:
4f:91:d0:c4:91:77:6b:90:4f:4f:32:99:0c:df:2c:fc:25:28:
b1:16:05:bd:18:60:1b:19:f3:3b:fb:36:76:18:a8:2f:6e:00:
95:4c:b1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 20:33:04 2024 by rpki-client on console-ams.rpki-client.org