Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ED46AF2A128511EFA21B5F61017001B1.roa
File: ED46AF2A128511EFA21B5F61017001B1.roa (raw, json)
Hash identifier: GGSdr5pt32wUivckGzauQGfMpZnOZKH1J98M5sYIahs=
Subject key identifier: CB:63:25:3D:7B:C7:D4:65:FC:23:AF:78:C7:80:2B:29:28:34:6C:B3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 165B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ED46AF2A128511EFA21B5F61017001B1.roa
Signing time: Wed 15 May 2024 06:39:50 +0000
ROA not before: Wed 15 May 2024 06:39:46 +0000
ROA not after: Fri 15 May 2026 06:39:46 +0000
asID: 8820
IP address blocks: 154.16.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 10:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5723 (0x165b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 15 06:39:46 2024 GMT
Not After : May 15 06:39:46 2026 GMT
Subject: CN=664458b5-4fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:f9:cf:26:13:1d:61:01:e7:72:b3:ea:c1:
c8:e3:c9:94:41:ba:7a:9d:70:d4:81:26:1d:17:30:
af:de:df:50:ab:dc:86:ef:a2:f0:d9:39:97:9f:c6:
a0:0e:16:cf:29:91:09:85:05:36:6b:db:df:8d:55:
73:a1:7e:b8:6e:e9:00:16:a7:48:07:1a:e4:32:53:
ca:3d:14:a8:d5:c7:56:16:28:34:c8:21:f3:84:78:
77:ad:17:67:8f:9c:7f:dc:7a:f9:13:d2:32:d6:81:
b2:13:02:d2:41:9f:6a:f3:66:8b:76:66:82:2e:a8:
1c:d7:94:93:b3:4b:80:b8:50:8a:13:da:77:76:c4:
f9:86:a3:9e:21:b4:e4:e7:fc:5f:38:11:e0:9d:e1:
cf:a8:58:cf:a8:73:c7:61:d0:15:6f:7a:d9:92:c4:
a7:3f:cb:f5:d0:47:95:10:d6:86:b9:6d:bc:a8:1a:
94:1c:b2:47:d3:e3:aa:bc:3b:12:7d:39:1a:68:88:
4b:e0:ec:93:4b:f4:79:c5:b2:b3:20:7b:7b:8c:b8:
a4:14:d9:a7:6c:6c:c6:14:e0:d2:56:30:b9:5d:8a:
ef:0a:d2:69:d4:3a:8b:73:8d:e5:1c:5b:d6:7f:16:
25:6a:da:23:95:ac:9e:54:c5:3e:44:3a:f9:64:70:
f7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:63:25:3D:7B:C7:D4:65:FC:23:AF:78:C7:80:2B:29:28:34:6C:B3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ED46AF2A128511EFA21B5F61017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.218.0/24
Signature Algorithm: sha256WithRSAEncryption
af:7f:f3:5b:77:5d:4b:ba:69:2a:4a:61:b1:2e:66:de:cb:77:
57:8d:68:26:e0:63:6f:3d:54:0e:6d:f0:8a:77:f5:1d:1b:c0:
ca:1d:1b:11:be:1e:0a:94:ac:97:9e:a1:af:ac:93:07:7a:9c:
94:c7:d6:12:d2:be:90:eb:96:9f:bc:51:8a:4b:88:9f:29:97:
16:d5:4f:50:62:6f:e4:2d:62:c9:c6:80:b2:27:f5:30:5d:8c:
f9:5a:90:40:04:49:a5:14:8e:54:59:a6:3f:7c:e5:a6:2c:c4:
74:33:dd:0c:a8:3b:c6:e9:27:c1:bf:98:29:42:4a:00:66:e2:
44:90:be:f2:68:1f:f7:68:2d:08:67:e3:20:59:27:97:8e:39:
3a:6a:8e:42:66:7d:a8:18:1e:3e:dc:4e:9d:47:df:4d:82:c0:
af:53:cc:a6:df:93:ca:e9:b3:4a:95:ca:ef:8c:a8:16:cf:e5:
cd:b6:30:3e:bb:0e:fa:2c:53:a8:be:1b:ac:9f:cf:ef:e7:ca:
99:8f:0d:67:4a:5f:1b:4c:89:4a:51:ab:02:8d:40:80:3a:3e:
81:bb:1f:dc:95:ec:4a:85:12:f0:2e:60:04:3e:6c:10:0c:af:
bb:69:7d:20:23:1b:7f:f9:d7:4f:49:c7:4c:e5:3f:a1:e3:3e:
0e:29:c9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:27 2024 by rpki-client on console-fra.rpki-client.org