Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EC052E100F0811EE8ABDBC174AD9E6FC.roa
File: EC052E100F0811EE8ABDBC174AD9E6FC.roa (raw, json)
Hash identifier: ZkC6/QhZdbHU7RV5UdyEV9Z9N66t2PxSyTeyaHFFQLw=
Subject key identifier: C9:CF:C3:B3:63:F7:0D:A2:14:DB:E2:04:5B:94:48:EE:4B:68:F9:BF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0FBF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EC052E100F0811EE8ABDBC174AD9E6FC.roa
Signing time: Tue 20 Jun 2023 01:22:29 +0000
ROA not before: Tue 20 Jun 2023 01:22:23 +0000
ROA not after: Tue 17 Jun 2025 01:22:23 +0000
asID: 34773
IP address blocks: 154.16.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 16:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4031 (0xfbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 20 01:22:23 2023 GMT
Not After : Jun 17 01:22:23 2025 GMT
Subject: CN=6490ff55-45fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:4f:ef:55:87:43:d7:fe:ef:da:7b:bf:22:
02:81:6f:79:b3:14:09:76:f2:cc:ce:5e:dc:60:98:
d1:f9:ca:16:e3:51:75:da:91:2f:9b:4c:35:b9:ad:
2f:e5:8e:ff:ef:34:65:d5:f4:f9:d4:67:85:29:c8:
26:79:cd:18:a9:41:7e:f4:36:c7:42:ac:d8:d9:8e:
77:59:f8:7c:be:ff:20:6b:a5:1e:2c:9e:dc:1b:31:
6c:9a:b1:d9:27:d8:3d:91:5e:9b:cb:78:ad:39:50:
9b:71:3f:16:0d:fa:e3:29:a6:33:7b:bb:99:d7:82:
11:6d:3f:cf:4a:95:02:79:e1:56:45:50:ab:bf:08:
8b:91:d5:86:d7:1c:1a:70:9f:17:3d:f8:27:7d:b1:
8e:b5:19:30:0b:22:25:c5:aa:dd:fe:48:0c:ea:86:
9b:be:86:5d:1b:a3:3d:14:02:8a:fb:7f:22:5d:38:
30:16:3a:95:f1:09:b8:3b:68:3f:65:28:9b:88:71:
78:13:78:1b:cb:bd:c2:17:c2:0e:f9:fe:80:40:7f:
2b:fe:a5:42:17:a9:c8:a5:35:2a:96:6c:25:02:53:
70:57:43:d0:3a:1f:23:57:a3:2b:6c:47:72:b0:58:
2f:f7:54:c7:2a:f6:2c:58:cf:5c:c6:6e:06:ee:34:
b4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CF:C3:B3:63:F7:0D:A2:14:DB:E2:04:5B:94:48:EE:4B:68:F9:BF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EC052E100F0811EE8ABDBC174AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.0.0/24
Signature Algorithm: sha256WithRSAEncryption
af:27:2f:68:9e:ce:c9:24:7b:fa:5e:b4:5e:9a:e0:f1:fb:7f:
f9:06:9f:31:a1:6b:0e:85:bf:d3:2f:62:ca:bb:94:b4:58:e9:
82:f6:3e:61:ff:85:6d:75:0c:c5:96:91:36:92:6e:84:54:5d:
a5:95:63:9c:dd:58:5c:fb:51:77:43:93:76:84:4a:c8:a2:01:
90:de:32:55:4c:c1:d7:ca:27:1e:4c:35:cd:4d:3d:8a:5e:ad:
95:74:15:59:44:02:bd:25:bc:97:0f:c5:14:44:25:c4:ca:89:
4d:16:6b:77:3e:11:4b:31:38:75:56:e4:1e:ca:62:ac:b6:29:
a3:ad:53:cf:7d:4e:18:8b:c7:83:25:6b:37:9f:6c:6a:84:f6:
6d:97:c4:fe:14:6d:70:ae:a9:5d:33:c5:cf:bb:ac:cc:8d:96:
b3:d2:af:3a:56:c5:fa:3b:19:bb:1d:c0:07:3e:7c:aa:43:4d:
05:77:ee:ec:c3:28:de:ad:b0:07:34:0d:4c:09:9b:ca:85:07:
ab:4b:a7:5b:29:c3:e9:f3:4c:0f:8d:b7:37:03:00:99:00:85:
2e:7a:bc:e5:ce:3b:2e:f3:91:6f:3b:a0:35:f4:58:c4:4e:1e:
db:71:26:bf:a8:60:60:27:0d:8b:51:cd:d7:a4:0d:00:4f:7f:
f3:03:b0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 19:07:30 2024 by rpki-client on console-ams.rpki-client.org