Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E3615FAC44D911EEBD553F484AD9E6FC.roa
File: E3615FAC44D911EEBD553F484AD9E6FC.roa (raw, json)
Hash identifier: 4uuVp34sL49Dgv85eL6CEMQAv/b39oAs7UjvabWI7SA=
Subject key identifier: CC:26:F2:5D:51:F0:32:6E:D9:B1:58:49:4F:B7:47:08:AD:BE:C4:F5
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 11BA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E3615FAC44D911EEBD553F484AD9E6FC.roa
Signing time: Sun 27 Aug 2023 13:01:51 +0000
ROA not before: Sun 27 Aug 2023 13:01:47 +0000
ROA not after: Sat 30 Aug 2025 13:01:47 +0000
asID: 20473
IP address blocks: 154.16.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Jan 2024 08:18:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4538 (0x11ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 27 13:01:47 2023 GMT
Not After : Aug 30 13:01:47 2025 GMT
Subject: CN=64eb493f-979c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:56:a8:fc:fa:12:0b:7f:3c:aa:7b:6c:be:
e0:4f:4f:36:1f:eb:9b:7d:fc:ea:17:db:b1:57:68:
e1:d3:d2:d0:1e:e7:79:f4:f6:eb:37:53:07:2b:3d:
b3:5c:39:ec:c3:e8:30:ca:e8:0c:d5:8d:95:4b:7f:
d1:b6:0a:b4:3a:96:42:6f:3b:cc:b5:70:62:91:f5:
45:a0:18:2e:f1:9b:98:a2:23:61:31:77:1c:c5:9a:
59:f0:a5:f6:73:6a:f8:99:15:5c:7d:73:a0:a7:de:
17:80:63:3e:d1:d5:de:8a:2b:0e:1c:23:9e:bf:87:
e1:ad:ba:53:ba:ff:4b:e1:54:da:bc:c4:63:c9:8e:
85:59:db:b6:ca:7a:f5:24:65:01:3e:b9:e0:56:ab:
34:e1:81:6c:53:97:9b:64:ff:df:03:00:f1:18:54:
43:45:cd:e5:1f:03:99:a9:10:d5:86:df:80:f3:46:
9c:25:1b:8c:34:21:37:3b:1c:d0:34:d6:63:b0:64:
57:80:ad:1c:7e:1f:44:73:15:60:79:0f:2b:d8:3f:
f3:97:e9:c4:d5:2b:a4:1b:d6:1d:12:dc:f8:e2:8f:
43:52:3f:dd:a8:b0:f5:c7:b0:72:b5:04:66:76:71:
46:80:15:71:89:74:b5:3a:c5:0d:cd:5a:f8:ce:5b:
bf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:26:F2:5D:51:F0:32:6E:D9:B1:58:49:4F:B7:47:08:AD:BE:C4:F5
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E3615FAC44D911EEBD553F484AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.33.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ae:38:e0:9c:54:9a:50:1a:3e:f4:1c:be:98:65:84:6d:81:
7a:96:9a:a8:96:1a:17:03:95:16:b7:56:19:b7:82:a5:e6:ea:
d7:2f:f6:83:be:2c:3c:3e:e4:89:dd:9e:06:91:b9:a6:be:5b:
a0:e6:e8:b3:3a:97:db:2b:03:c3:5c:7d:d5:12:9d:9c:46:21:
68:8b:82:5f:f2:a6:4b:f4:17:f9:c3:72:1a:5b:8b:1c:cb:26:
07:32:f5:61:79:cb:7f:eb:33:be:8c:92:71:dd:88:b3:e5:f8:
50:16:59:b9:d8:18:10:b7:29:ce:fa:26:21:bd:28:29:25:b2:
d4:51:20:72:0b:39:d4:b9:a7:da:19:67:77:e7:d2:fc:bc:3f:
75:d0:6e:c2:de:81:e7:d5:0e:85:c5:66:c5:98:ae:e8:81:46:
4c:b6:f4:ee:fd:51:d7:fe:79:d8:d3:f4:bf:32:ee:f3:3f:2a:
c1:3b:70:6e:d2:67:6f:e2:2b:4b:68:83:f8:72:bb:49:4e:c8:
d8:c5:01:09:e1:a1:aa:f2:98:3d:ec:76:e1:c9:e9:36:e1:17:
41:09:7c:49:eb:5a:ff:ee:09:b8:84:a6:58:db:a5:bf:13:38:
13:c7:ec:c8:66:53:7c:44:d4:05:d6:3c:d0:95:ae:17:cc:20:
78:21:d8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 27 10:58:29 2024 by rpki-client on console-fra.rpki-client.org