Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EF9B9A92058911EE8DAAA5634AD9E6FC.roa
File: EF9B9A92058911EE8DAAA5634AD9E6FC.roa (raw, json)
Hash identifier: RRarkiLQX3A646jC7YBFCxUt5zNd25nzJ/Kg2aAnwZw=
Subject key identifier: 51:15:80:15:ED:04:60:CC:F6:C9:CA:39:97:30:52:BD:00:F9:B2:3E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0EFA
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EF9B9A92058911EE8DAAA5634AD9E6FC.roa
Signing time: Wed 07 Jun 2023 23:20:48 +0000
ROA not before: Thu 08 Jun 2023 23:20:45 +0000
ROA not after: Sat 07 Jun 2025 23:20:45 +0000
asID: 834
IP address blocks: 154.16.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Jun 2023 21:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3834 (0xefa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Jun 8 23:20:45 2023 GMT
Not After : Jun 7 23:20:45 2025 GMT
Subject: CN=648110d0-981e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:e2:97:19:78:f0:47:73:23:d3:bc:ff:e6:
b9:12:b6:3d:24:db:89:25:d3:c3:3f:a0:b2:35:00:
71:c4:d5:60:0c:02:40:9b:8f:d0:fa:29:12:1c:c8:
f8:84:f5:f8:9a:c9:d5:f4:32:e5:cf:7f:c7:b3:92:
77:54:43:db:db:39:4f:50:e6:45:08:fa:80:b3:2e:
bc:d0:e5:e7:99:11:17:b2:89:a2:d6:90:ee:e9:af:
1c:7f:e4:70:c5:ff:b6:1a:8c:18:72:9c:92:54:d4:
ed:60:f8:5c:f9:6a:b9:7f:77:65:58:eb:fe:5a:47:
ad:d3:0b:c9:19:2e:53:6a:70:e8:d8:ae:74:cf:0d:
79:14:56:7c:3b:1b:36:61:5c:ae:19:ec:9a:b9:5f:
a9:15:30:c7:0f:6b:55:37:19:f0:09:6a:48:f3:31:
4d:93:b5:2e:c4:c1:a9:b3:56:64:41:ee:a3:af:6f:
af:23:38:39:ac:1a:e0:03:0d:91:e4:e3:d5:2d:b2:
30:d2:46:ee:e9:9c:68:17:aa:d4:37:ce:08:1a:5d:
67:a1:a4:a3:16:86:ad:78:a5:70:93:aa:79:a3:9d:
67:1a:33:92:5e:77:1f:0d:cc:f7:f1:1a:31:f8:64:
52:a2:60:56:1d:c6:03:c9:26:0a:9a:3f:75:8d:44:
e8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:15:80:15:ED:04:60:CC:F6:C9:CA:39:97:30:52:BD:00:F9:B2:3E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/EF9B9A92058911EE8DAAA5634AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.207.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:c4:d7:83:5b:1e:01:e4:0f:09:7a:68:ac:93:07:1d:a7:16:
17:d7:12:1e:2c:6a:b1:ba:fa:98:ed:2a:a3:8b:de:45:8b:6d:
a3:e6:df:a3:e4:09:9b:f9:c5:e6:ea:4c:77:a2:1c:57:aa:0b:
ef:ff:3c:14:54:e2:d6:db:fa:1c:c7:66:46:f3:bd:22:4a:2f:
3b:2f:91:4e:3a:d4:d6:5d:48:d1:de:6d:c1:54:ee:86:ef:d3:
8a:3e:ce:db:8c:ce:3d:e2:8d:7a:e4:9b:0f:74:46:46:64:e5:
14:5c:2a:62:8d:82:c9:0b:e6:28:28:d8:2b:31:53:68:9f:63:
ca:a0:8e:c3:c7:4b:04:df:5a:43:d1:b1:6c:8f:f7:34:4f:99:
c1:79:26:f5:7c:9f:ce:c2:b0:4c:7d:76:ac:71:61:0b:95:ba:
37:1f:de:16:0b:1d:9d:30:d7:cb:cf:c3:90:bf:73:f6:c2:01:
c1:9a:82:5e:8f:04:bb:5c:b1:6c:f7:fb:3f:19:9f:9a:c9:b0:
35:c4:0a:0c:f2:ed:91:ad:75:f2:ac:c6:15:8c:a2:ef:f2:ce:
1a:62:a0:89:86:cf:16:03:c0:35:40:ed:e7:45:04:d6:9b:f8:
19:68:a9:2b:6e:9e:fe:96:0f:f2:a7:17:da:4b:ab:41:8e:bf:
57:3b:84:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:58:52 2025 by rpki-client