Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EB64765002CD11EFAE912843017001B1.roa
File: EB64765002CD11EFAE912843017001B1.roa (raw, json)
Hash identifier: Isj2sQVF4p2vXeDxUx7p9D2V/5uZ0CmFRxqjqvS5OS0=
Subject key identifier: 8B:F4:79:F0:34:E9:64:78:E9:CB:FE:17:9D:B6:75:6D:82:AD:23:A8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1604
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EB64765002CD11EFAE912843017001B1.roa
Signing time: Thu 25 Apr 2024 06:34:51 +0000
ROA not before: Thu 25 Apr 2024 06:34:48 +0000
ROA not after: Sat 25 Apr 2026 06:34:48 +0000
asID: 201670
IP address blocks: 154.16.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 10:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5636 (0x1604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Apr 25 06:34:48 2024 GMT
Not After : Apr 25 06:34:48 2026 GMT
Subject: CN=6629f98b-7384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:52:df:8e:e7:ab:8a:07:ce:c6:89:3a:49:44:
ee:42:cf:8f:f0:a0:92:59:64:3e:35:a4:a0:c5:ef:
ef:e2:f1:64:52:cc:92:dd:33:2e:5e:d8:e1:f8:cb:
57:15:2a:11:a8:e2:a2:91:bd:7a:b4:9f:47:83:91:
24:6a:d8:1d:3c:17:30:b4:b6:35:8d:85:36:6f:b1:
42:9b:bc:10:95:0b:43:6d:86:89:da:93:bd:87:17:
ed:fa:2c:e3:53:4c:96:6a:00:b9:e7:b0:00:27:b0:
c6:89:d1:de:d6:f2:15:44:53:d2:46:01:bb:3e:d6:
e3:a7:66:8c:cd:a7:36:09:6e:fd:7c:0c:0f:a1:50:
b9:fe:0d:f8:a4:85:75:95:58:36:1d:28:05:84:ec:
aa:04:c5:3a:86:c5:03:97:89:78:d2:72:10:49:7f:
28:ec:12:a0:6c:ce:e3:34:90:af:36:68:49:45:11:
05:7c:ff:14:99:e4:a6:94:37:aa:57:fe:44:15:e5:
2d:4c:31:0a:11:4b:29:89:6c:ef:77:cc:ca:10:5f:
3c:77:b8:81:2e:8e:40:ec:73:5d:43:b3:1e:81:0a:
51:be:bf:ec:a4:03:e6:fd:99:7b:62:13:bc:57:0c:
91:d9:a5:d5:81:12:9d:ba:e7:d8:9a:23:a4:a6:f8:
63:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F4:79:F0:34:E9:64:78:E9:CB:FE:17:9D:B6:75:6D:82:AD:23:A8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EB64765002CD11EFAE912843017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.161.0/24
Signature Algorithm: sha256WithRSAEncryption
63:61:1d:1e:d0:7b:79:ac:60:da:71:5f:ff:88:94:b7:fc:b7:
9d:de:b8:20:82:2e:e5:32:0a:4d:83:f1:c1:34:d3:f4:4a:0b:
ed:c6:78:6a:b5:91:8b:7a:71:f5:d8:a8:90:00:a0:2b:5e:1a:
b7:3a:d2:72:a9:18:e3:6d:46:0a:51:f5:41:70:6e:67:66:78:
cf:3d:e0:2e:cc:82:d6:68:ee:a2:c7:e8:d8:32:0c:06:0e:8d:
ac:93:60:9f:b9:25:29:2e:aa:49:54:81:ef:04:44:8a:2c:51:
c6:05:85:b0:c3:ba:e7:60:05:17:cc:03:13:44:6a:90:90:2c:
b9:4d:53:2f:d2:81:61:c4:d9:0b:26:83:9a:97:51:d4:ca:fe:
54:19:49:8d:5d:22:49:11:3a:d9:dc:e1:c2:c6:07:e8:9a:76:
0d:33:f1:01:05:3c:a4:8e:fa:20:19:6d:26:a4:23:0a:b4:cf:
23:51:58:95:15:de:83:ff:59:75:9b:50:ad:53:bd:aa:92:47:
73:34:6b:ff:26:01:d2:ce:7e:86:dc:95:50:27:05:d6:f8:39:
d3:ef:56:bf:18:39:3d:14:da:e4:3e:b9:d8:c0:fb:4a:be:81:
40:95:85:8a:ae:4e:d5:98:9f:4d:4e:e7:23:03:a9:03:28:91:
e2:03:cd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 15:04:29 2025 by rpki-client