Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EB489802887B11EFBE5836AA762E951A.roa
File: EB489802887B11EFBE5836AA762E951A.roa (raw, json)
Hash identifier: k9yaoLN6Sy18ZhuXQj8d4NxuCKDEZvYBvt6FCESf5BY=
Subject key identifier: 0B:12:8D:89:A8:01:49:C6:C2:4F:41:A7:37:1B:9F:B7:36:6F:00:39
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 185D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EB489802887B11EFBE5836AA762E951A.roa
Signing time: Sat 12 Oct 2024 09:25:28 +0000
ROA not before: Sat 12 Oct 2024 09:25:25 +0000
ROA not after: Mon 12 Oct 2026 09:25:25 +0000
asID: 834
IP address blocks: 154.16.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 09:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6237 (0x185d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Oct 12 09:25:25 2024 GMT
Not After : Oct 12 09:25:25 2026 GMT
Subject: CN=670a4088-5e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e3:9e:bf:59:32:9b:e6:34:68:d7:ae:72:88:
0d:67:97:70:ce:e3:6c:3b:e5:55:57:29:da:1c:6a:
57:c4:ea:86:3d:e3:5b:aa:48:91:bb:ae:72:58:47:
71:69:8b:a7:02:59:96:fd:74:41:00:86:42:1a:3c:
5a:3e:6e:83:0c:ec:4f:24:88:16:05:33:b8:7b:86:
e8:dc:a2:d9:09:75:38:40:42:90:9b:51:ba:1b:06:
e3:fa:70:85:8b:d3:99:c6:44:38:16:78:93:f7:47:
5d:2f:c2:b7:07:f0:ce:85:58:e8:70:f0:e7:ae:ed:
8e:63:3e:e3:fe:d5:73:38:55:d6:31:59:cc:5c:9c:
92:61:4f:85:7d:2c:fa:d1:72:44:f7:7a:9f:a8:28:
2f:e2:24:25:cd:aa:5d:23:aa:5a:c5:bb:8e:2a:11:
b8:77:42:41:d3:bf:ae:89:a0:40:15:1d:fa:29:19:
4f:b8:8b:3d:90:2f:ff:f8:bd:57:dd:d0:6f:f9:06:
ef:02:c6:58:89:a2:37:63:3b:34:d4:92:97:20:b3:
c9:f8:2b:4c:04:e2:1b:db:63:a8:b8:cd:bd:b0:aa:
c5:14:0c:23:c5:53:7c:e3:3c:ee:70:2d:ec:d7:36:
c6:b9:27:23:5a:a8:b7:9c:58:52:d7:ce:77:c2:07:
3d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:12:8D:89:A8:01:49:C6:C2:4F:41:A7:37:1B:9F:B7:36:6F:00:39
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EB489802887B11EFBE5836AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.179.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:6a:85:a5:b3:24:c9:49:98:e1:d2:35:08:c0:23:ca:c9:c9:
aa:40:e4:6e:c0:aa:e3:8c:cf:1b:86:77:6c:24:a9:15:64:09:
b5:c0:e2:ee:33:1a:7a:6f:1b:e8:79:d5:ee:01:a3:36:c0:94:
fc:65:27:3f:e4:22:65:f1:7d:58:47:53:c3:69:98:0f:d6:81:
a3:35:67:bb:24:49:82:35:bc:8b:0a:7e:c2:17:e9:fa:52:4a:
27:4b:f9:dc:92:ab:6a:f0:4d:6e:8e:f7:75:4f:4b:b3:93:a4:
b7:b0:ce:68:f7:e2:5b:5c:55:99:b4:2a:c2:a7:1d:18:b2:8a:
13:a8:7b:71:cc:0b:6d:40:f3:3d:41:06:e7:ba:27:7f:ea:47:
80:13:ec:83:7c:f7:72:99:0b:95:7b:56:52:86:0f:ce:e0:67:
7c:ae:f3:bb:61:0c:ab:bd:f5:67:76:16:37:bb:36:57:01:4b:
a8:46:fe:c5:4b:ba:e9:86:ed:53:4e:16:d7:20:7d:23:d8:2d:
ed:39:20:67:9f:b2:b0:65:b6:11:1e:f4:d7:cb:d7:e1:46:0f:
b7:57:e4:4f:b2:7b:21:4d:f7:33:61:dc:18:de:6e:95:ee:d9:
40:7c:47:2d:64:2c:ca:89:88:2a:30:e4:d3:51:4f:95:b6:07:
08:eb:a9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:08 2025 by rpki-client