Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F32BABC8517011EFBFE671B8762E951A.roa
File: F32BABC8517011EFBFE671B8762E951A.roa (raw, json)
Hash identifier: jAwBJ8EYr3a92AZXIhi7g2jSjd2GmYryCMCdEz/9bFo=
Subject key identifier: 33:E8:BA:B8:4E:65:45:41:1E:0F:44:27:14:EE:34:09:F9:A0:7A:1C
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1773
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F32BABC8517011EFBFE671B8762E951A.roa
Signing time: Sat 03 Aug 2024 08:18:23 +0000
ROA not before: Sat 03 Aug 2024 08:18:19 +0000
ROA not after: Mon 03 Aug 2026 08:18:19 +0000
asID: 212238
IP address blocks: 154.16.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 07:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6003 (0x1773)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Aug 3 08:18:19 2024 GMT
Not After : Aug 3 08:18:19 2026 GMT
Subject: CN=66ade7cf-55b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:aa:60:7b:ca:4a:f9:9f:9f:16:97:fc:fe:
d8:b9:be:1e:e2:e3:24:9b:30:5e:20:73:ac:1e:0d:
c5:dc:43:76:2b:b7:0f:d2:b2:fd:19:a5:b2:ee:ad:
5a:60:7c:6a:c5:a9:f6:91:b6:71:93:d9:d8:c8:47:
87:d8:44:20:03:67:28:29:19:79:ca:65:7c:ab:da:
73:ce:23:9d:a2:32:e8:52:16:c8:57:1b:ac:7d:20:
56:95:56:82:f4:51:64:58:69:9d:f8:f1:94:7c:d4:
ae:eb:28:f3:7e:8b:1d:05:e0:cb:5e:a6:13:a6:a5:
08:33:4c:2f:87:ef:16:e2:6c:82:a7:c6:8e:d8:d0:
72:75:91:7a:d8:53:eb:63:b0:11:f0:19:7a:19:c1:
bc:28:b5:fd:1d:16:66:0b:61:fa:64:59:06:6f:8f:
4f:7e:41:57:c4:a8:c0:5e:c4:5b:3d:87:4f:66:76:
79:83:01:0b:e2:92:c9:1a:d8:55:fd:da:64:26:25:
9f:4e:1d:3e:31:14:e6:56:af:ba:74:b6:18:49:96:
41:9a:ed:96:3b:53:24:5e:cb:66:19:69:cf:f0:99:
e8:64:58:43:8c:84:43:cb:0e:3c:cb:cd:78:33:23:
61:53:81:b2:56:96:36:c7:40:88:c8:04:46:7b:5e:
76:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E8:BA:B8:4E:65:45:41:1E:0F:44:27:14:EE:34:09:F9:A0:7A:1C
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F32BABC8517011EFBFE671B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.56.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f4:24:52:a9:b2:da:8b:8c:c2:42:7a:fb:b6:8a:0a:0a:30:
56:1d:96:e5:0a:53:7b:4a:13:46:fb:a6:64:af:4f:c4:71:5d:
24:96:80:d0:6f:d3:2b:96:64:c3:22:dc:a6:b3:7a:39:eb:8b:
e1:ae:48:25:12:b3:de:ce:4d:d0:9b:8b:14:50:f1:46:08:15:
51:f7:ba:58:2d:fb:9f:90:11:ce:d4:49:6f:66:42:73:a9:b7:
e9:c7:d2:47:96:6a:7c:8d:ab:fe:9c:97:f8:d1:4a:01:5e:81:
ee:76:86:e0:ff:c4:10:4c:de:ce:b5:e0:a5:d0:30:6f:61:da:
25:ad:5b:a5:19:de:71:48:dc:08:86:d6:60:9e:53:9f:6e:99:
ce:84:25:a0:1c:e6:b8:31:f4:14:b3:a5:75:b5:08:51:88:29:
94:ad:f3:9a:d0:1c:26:ec:6a:13:a7:5f:1b:86:4f:26:8f:c4:
c8:1d:85:1f:09:2b:a0:48:38:c5:1d:52:87:f6:7b:e2:63:63:
64:3b:9c:2c:90:03:10:b4:02:e0:a6:a7:49:f7:64:a3:2c:fc:
0f:94:31:8f:d5:ad:f0:f8:97:74:cc:93:e2:11:dd:bb:3b:c9:
ff:05:ea:c9:52:54:36:24:a3:ae:2b:4a:97:ba:72:a7:5b:34:
f0:d7:23:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 15:04:11 2025 by rpki-client