Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E906347C004C11EE8477A4794AD9E6FC.roa
File: E906347C004C11EE8477A4794AD9E6FC.roa (raw, json)
Hash identifier: zvcmd9J5Zntvv8+El+OqmwiRMN5fmwwTeKZKEUlKhjk=
Subject key identifier: A5:99:B0:EC:57:D5:A3:BF:D6:6F:E9:72:07:FA:31:5D:1C:3E:87:0C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0E6E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E906347C004C11EE8477A4794AD9E6FC.roa
Signing time: Thu 01 Jun 2023 07:21:22 +0000
ROA not before: Thu 01 Jun 2023 07:21:18 +0000
ROA not after: Sun 01 Jun 2025 07:21:18 +0000
asID: 834
IP address blocks: 154.16.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Jun 2023 18:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3694 (0xe6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 1 07:21:18 2023 GMT
Not After : Jun 1 07:21:18 2025 GMT
Subject: CN=647846f2-30b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:e3:f0:5d:a2:16:07:fa:7f:5f:19:f8:f6:
36:55:8c:88:0d:98:dc:03:6e:3f:59:81:f0:02:9c:
36:d3:56:5c:69:24:ab:32:0c:71:32:fc:26:17:ed:
68:b4:0d:4a:09:3a:e4:aa:47:66:0e:25:35:af:2e:
df:ec:b5:23:08:a3:f9:dc:5c:1b:c2:a5:74:6e:f6:
fb:60:36:73:d4:24:46:e7:5e:bb:ac:27:45:1a:48:
f6:f6:7b:c7:45:48:f8:c8:a9:84:36:c0:fb:b4:cf:
98:91:5e:4f:65:64:99:d1:83:7b:4d:33:7a:e2:f4:
59:74:9b:a8:1f:f1:cc:85:a9:d3:e7:ee:59:39:ac:
72:2e:4c:fb:25:e1:e6:c1:b5:b7:e9:69:11:46:30:
94:81:0c:11:74:73:26:51:3d:a2:7c:6e:c3:b2:bd:
71:e8:ea:d5:d9:5b:9b:11:9f:cf:ce:fc:ee:3c:cf:
af:f0:5a:3b:47:39:e3:cc:17:cc:98:09:ed:ac:17:
4f:9e:0e:8c:d3:70:2a:5b:3a:2b:35:cd:18:6c:44:
b2:6f:c1:0b:54:f3:7f:00:72:e8:df:c9:8d:d6:36:
94:c3:dc:20:86:d4:95:eb:b3:95:46:a5:e4:dd:94:
9e:18:c0:16:1e:25:17:4a:4c:7a:b7:88:31:84:14:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:99:B0:EC:57:D5:A3:BF:D6:6F:E9:72:07:FA:31:5D:1C:3E:87:0C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/E906347C004C11EE8477A4794AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.76.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:7b:2d:3b:23:73:d6:f8:bd:07:77:11:08:3f:4d:b7:23:85:
aa:41:36:ae:c8:a7:df:1e:92:02:86:57:7a:c7:a8:4d:7c:fe:
2c:b1:b3:3a:b9:cc:ed:10:12:cc:7f:d2:2e:4b:61:3b:18:4f:
a9:4b:56:56:0d:d0:82:4d:3c:b8:62:cf:61:43:4e:77:87:f5:
6f:60:4d:e6:7f:02:51:49:ba:cf:7b:5e:eb:4e:57:36:8b:7a:
23:68:26:25:ae:0e:e8:28:eb:09:09:00:44:d1:13:b7:4e:f6:
6b:36:39:5d:2d:53:c2:4f:d4:aa:72:6c:1e:9c:8a:95:f8:ea:
57:93:2e:3e:1c:5e:36:b1:5c:a0:5b:56:ee:89:64:aa:30:b4:
ad:95:25:02:30:21:1c:38:d2:8e:69:d5:6e:c4:ae:3d:7b:27:
3a:cd:b6:2a:a1:04:4c:13:5f:a5:aa:1e:0d:59:5a:2d:8f:e8:
de:d7:f9:3f:36:4e:66:bd:c7:b4:2d:84:e1:5a:a6:34:69:42:
c9:ac:78:a1:e7:b0:6f:79:ca:15:aa:4f:34:4b:f6:0e:26:94:
88:be:d3:6f:71:b9:7c:01:16:8f:8b:a5:c8:63:bc:81:2a:9f:
33:8a:71:b4:ef:16:f7:d6:8a:8f:a7:f7:ff:3e:6d:15:2e:6f:
ff:61:e8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:41 2024 by rpki-client on console-ams.rpki-client.org