Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F223ECD4B8F811ED93ADC7F6F1222468.roa
File: F223ECD4B8F811ED93ADC7F6F1222468.roa (raw, json)
Hash identifier: BRdHk2jZiBUcOP02IqYmLGG8pXLZAUkbxCh/5RVYr3Q=
Subject key identifier: 30:11:52:55:2D:84:8A:87:7F:D0:A6:FA:8B:DD:B3:C7:6C:38:7A:25
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0CB4
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F223ECD4B8F811ED93ADC7F6F1222468.roa
Signing time: Thu 02 Mar 2023 12:51:27 +0000
ROA not before: Thu 02 Mar 2023 12:51:24 +0000
ROA not after: Sat 01 Mar 2025 12:51:24 +0000
asID: 61317
IP address blocks: 154.16.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 14:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3252 (0xcb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Mar 2 12:51:24 2023 GMT
Not After : Mar 1 12:51:24 2025 GMT
Subject: CN=64009bcf-f015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:45:63:53:10:e6:95:0e:3d:25:86:96:a4:
d8:29:16:3e:7d:c0:30:6b:b9:84:a5:10:d5:e5:e4:
5d:0b:ab:e1:b0:d6:e3:6f:61:e0:3e:f8:56:b5:cd:
7b:1b:6b:86:81:ab:67:86:ca:7a:5f:e4:f1:0b:b1:
2a:09:a3:c7:b9:8d:6f:36:92:a2:a0:42:3b:c1:e1:
a0:46:3e:1f:e2:0a:8e:5c:b2:9c:cb:d6:57:8a:63:
f9:53:9e:8f:23:4a:d2:15:1c:02:6f:cc:08:d7:6c:
4a:46:1e:e9:50:dd:f2:a1:af:ec:98:1a:90:8b:28:
bb:5f:0c:91:6c:a1:3e:a1:c3:10:51:86:eb:29:58:
9c:bd:56:78:0a:3c:78:02:ae:ae:3e:21:c0:65:57:
80:d5:ac:e3:96:f0:85:1f:58:ce:38:f3:56:4e:b2:
ba:21:9f:4a:3d:f9:39:e9:aa:22:20:a5:c4:bb:93:
4a:37:8d:50:a3:9c:25:6d:fe:d0:9a:f5:47:f1:0f:
e9:8b:b9:94:d5:64:d8:08:17:7f:00:1b:86:1b:d7:
a3:5a:63:13:78:4e:4f:91:69:85:25:81:54:3c:a4:
27:92:8b:b1:07:2d:df:77:12:36:22:c6:d4:08:3f:
da:4a:b5:44:cc:ed:cc:c7:9c:8e:eb:da:87:19:f6:
70:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:11:52:55:2D:84:8A:87:7F:D0:A6:FA:8B:DD:B3:C7:6C:38:7A:25
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F223ECD4B8F811ED93ADC7F6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.232.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ce:9c:bd:74:35:1e:a6:ed:84:d3:bb:1a:72:ba:7d:f6:ff:
da:7d:04:c0:7a:d7:6f:2a:d5:09:13:4a:b4:be:cf:0a:23:d6:
9e:bc:c2:ff:60:f9:f7:52:ba:b9:7a:4c:cd:1f:ac:ef:43:77:
d8:5b:d3:8f:f9:48:8c:b6:bd:b3:88:68:f1:8b:a7:c4:23:2b:
d9:e3:24:9e:a7:51:d5:9b:44:49:c5:6a:8d:8a:e3:9e:2d:6f:
9a:03:5e:49:2a:dc:eb:95:94:25:df:58:72:65:39:d5:fd:7e:
df:b9:d4:45:88:6f:25:e3:18:af:63:d9:aa:e5:72:2b:4f:ac:
55:6a:96:aa:ab:73:22:d3:c9:6d:6c:cb:35:02:ae:f5:dc:c5:
ad:a2:e5:cb:6f:67:d0:e8:5f:39:51:3e:c4:f5:f6:a4:ed:ff:
df:1c:44:57:c6:40:a5:ca:03:cc:74:ec:70:68:da:0f:37:73:
e3:50:4a:aa:8d:0e:81:66:63:76:e6:9a:0d:7e:58:6f:6f:a5:
3a:fe:88:11:33:c6:93:b9:87:9f:19:08:03:81:04:e4:72:10:
21:12:e0:fa:bb:ce:54:82:e3:d5:19:f9:0c:c0:42:ed:52:9e:
31:92:ee:a4:c0:3e:ff:28:31:5a:8a:9c:fd:68:66:0e:21:3b:
9a:9e:04:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:47:34 2025 by rpki-client