Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EDDCC0CCB8E511EEB4976DBD775412E6.roa
File: EDDCC0CCB8E511EEB4976DBD775412E6.roa (raw, json)
Hash identifier: 2l9JNytGJgMd6w+ym+uqokTasqJs3LbyMdqBo3T48/c=
Subject key identifier: 8A:DD:16:2F:13:37:B0:E6:E2:B9:A2:A6:AF:F9:47:99:89:C3:CD:D9
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1471
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EDDCC0CCB8E511EEB4976DBD775412E6.roa
Signing time: Mon 22 Jan 2024 05:20:17 +0000
ROA not before: Mon 22 Jan 2024 05:20:14 +0000
ROA not after: Sat 24 Jan 2026 05:20:14 +0000
asID: 834
IP address blocks: 154.16.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 10:12:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5233 (0x1471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 22 05:20:14 2024 GMT
Not After : Jan 24 05:20:14 2026 GMT
Subject: CN=65adfb11-4e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:3f:fb:20:15:ec:cb:e9:bc:87:0b:f3:d6:
fd:fb:74:9c:b6:15:64:45:aa:33:74:23:d4:f8:14:
54:fc:93:ba:27:b4:4c:1f:5e:47:5b:c3:27:f2:47:
b4:89:e2:ab:09:08:65:7f:21:35:5a:37:1b:4c:86:
81:97:cb:53:24:45:05:01:f3:37:3f:f1:69:13:aa:
77:83:46:5c:47:61:cc:5b:e0:45:31:8f:22:7d:91:
00:89:84:10:09:03:32:97:bb:5e:ba:49:3d:d1:5a:
95:52:60:29:b2:d2:d9:ba:f3:2d:5c:9c:2b:dd:eb:
7b:00:30:d1:90:95:81:93:b2:cd:97:24:ea:e5:19:
0e:b0:fc:97:98:06:0c:33:69:e3:a4:fa:2f:ba:f9:
50:d7:61:c0:87:23:a8:ea:79:01:6a:54:97:09:86:
e4:f8:63:b1:a9:62:41:4c:4b:51:56:8d:50:08:b8:
1e:b6:22:d8:43:aa:0b:e1:74:97:06:fc:56:69:02:
9b:cc:76:93:b7:78:04:af:51:9d:c6:c7:cb:dd:6a:
b2:e3:d8:bc:d7:88:2e:5c:89:b8:1e:37:fe:c2:00:
0d:69:8a:0e:48:6c:eb:c2:f0:e4:0d:e0:b3:e9:2f:
7f:2c:84:b4:eb:43:4d:f6:de:4e:66:47:b9:ec:2a:
58:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DD:16:2F:13:37:B0:E6:E2:B9:A2:A6:AF:F9:47:99:89:C3:CD:D9
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EDDCC0CCB8E511EEB4976DBD775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.10.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:b1:41:fe:f6:3b:63:0a:82:a2:a1:13:d9:73:50:73:ef:5c:
c9:ba:fc:ba:8b:fb:24:77:b9:98:09:f6:8c:c0:7f:4a:77:bd:
95:46:a2:c3:a9:52:bc:4d:04:ef:09:9e:db:5a:d7:88:fb:2e:
1e:75:a2:5a:af:7c:7b:67:c9:d9:c3:ca:b9:c6:78:00:5b:00:
31:2b:63:b8:6f:ed:91:01:99:ec:29:ca:37:ee:5f:29:65:cc:
c2:fd:f9:ad:a4:eb:21:25:6f:ce:cb:af:fc:cc:d9:56:a9:3e:
cf:1a:ab:85:32:f8:b8:16:43:ac:c2:77:a8:89:54:dd:68:4c:
67:e9:c6:db:33:3b:e7:d9:62:12:16:54:98:53:0e:b0:d9:fa:
d1:ae:09:33:52:a7:18:69:37:1d:67:7f:5d:f9:71:03:b5:39:
7b:f1:76:be:0f:20:3a:90:12:17:10:ae:8b:85:03:09:43:c1:
a9:bc:1d:86:3a:d4:b2:81:d6:ec:f3:7a:08:7a:e1:70:4e:b2:
ee:44:03:d8:b9:c5:39:4b:63:67:ce:94:61:78:6f:a0:98:81:
6d:69:74:6a:3f:e4:82:fd:f2:f3:60:50:03:d4:71:8f:3d:c1:
84:57:1e:3a:e6:7f:aa:f6:2e:fc:c0:df:26:41:0b:44:34:2d:
5b:04:b9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 14:53:56 2024 by rpki-client on console-fra.rpki-client.org