Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F4D9CC6AB69511ED9CB5AFC2F1222468.roa
File: F4D9CC6AB69511ED9CB5AFC2F1222468.roa (raw, json)
Hash identifier: 86Y0F7noGhKx/GTDAErma+JdsrRyUvUaYCawfvaDbsc=
Subject key identifier: FE:82:DC:F4:9E:DF:D5:00:37:88:7F:5A:0E:F6:F1:8C:5D:86:70:F0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C71
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F4D9CC6AB69511ED9CB5AFC2F1222468.roa
Signing time: Mon 27 Feb 2023 11:57:49 +0000
ROA not before: Mon 27 Feb 2023 11:57:45 +0000
ROA not after: Thu 27 Feb 2025 11:57:45 +0000
asID: 61317
IP address blocks: 154.16.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 07:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3185 (0xc71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 27 11:57:45 2023 GMT
Not After : Feb 27 11:57:45 2025 GMT
Subject: CN=63fc9abd-0c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:43:63:f4:eb:7e:37:84:be:e5:6b:1e:70:
31:3d:ab:e6:35:df:6b:45:2e:a8:b5:97:09:f3:ae:
05:00:fd:f1:80:39:dd:10:55:8e:4d:dd:88:a8:e3:
6d:49:37:7b:98:02:ab:c1:2b:0d:dd:2e:87:62:80:
cb:6b:52:1f:39:cf:85:7a:fa:26:52:98:ea:de:d1:
ab:9d:e4:3e:bb:78:b4:7c:eb:92:c3:da:b0:23:94:
08:a1:ea:60:ce:d4:49:b8:6f:f7:81:8b:e7:17:26:
89:b7:30:3f:5a:a7:2c:8a:34:06:ec:3f:d9:02:20:
20:08:df:e9:f6:fe:4f:ec:2f:e1:61:85:e6:e3:f5:
67:ed:99:59:29:37:99:9a:2c:1e:c4:bd:a0:31:a5:
a7:dd:6d:f8:ac:ca:ef:c9:18:fa:bf:7e:ec:0f:85:
ce:ad:5b:6d:fe:c9:5a:e7:7d:d0:b5:95:43:fe:b7:
aa:04:4a:92:21:23:69:b4:e4:09:48:fb:89:13:89:
4b:01:f7:80:3f:ba:b6:99:57:6c:1f:74:27:b0:9d:
94:09:65:8b:6d:90:77:b1:cb:77:79:d3:56:2f:1d:
df:34:1a:71:4f:77:0d:a9:e2:3c:8e:f3:c4:f4:1d:
f0:df:53:e7:c6:bd:4d:d2:c7:e0:2b:9b:9a:92:9e:
f3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:82:DC:F4:9E:DF:D5:00:37:88:7F:5A:0E:F6:F1:8C:5D:86:70:F0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F4D9CC6AB69511ED9CB5AFC2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.154.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:90:ca:0e:05:e7:44:0a:ce:d0:90:b2:aa:b6:dd:26:27:12:
e2:a5:9a:45:21:4d:a9:7a:5b:ba:4e:d4:f6:e5:f4:a7:bd:e9:
91:45:d7:03:2f:96:5e:f3:2e:8b:6f:ad:e6:59:26:77:06:d8:
13:00:76:78:dd:f6:37:99:ca:b7:56:5c:0c:5e:58:6c:ee:bb:
33:eb:95:bd:93:f1:44:a0:ed:2a:08:24:80:59:9a:73:53:63:
e6:ce:ef:d2:88:29:b5:6a:81:82:27:da:f0:dd:68:98:ba:fb:
9a:2c:b9:fd:5c:1a:3a:f6:3d:ff:12:71:b2:17:54:d3:8d:49:
be:50:9d:94:9e:56:aa:bc:7e:d3:14:5f:f0:5e:99:45:bb:e0:
c5:c7:ce:9a:6a:42:c9:35:49:75:e0:c1:eb:8c:9f:97:be:18:
fb:b6:15:94:00:fe:1e:7a:e4:e3:31:5a:9d:c6:4d:27:c7:bb:
16:58:6a:66:b6:be:d7:51:d9:d8:86:c0:a2:a9:98:9e:b7:14:
08:4d:f7:01:18:87:6d:5f:9b:2f:84:9c:73:47:8b:4a:ae:f4:
f7:11:04:21:b1:14:6b:b4:b6:31:6d:39:5f:b8:64:b3:08:95:
4a:4e:f2:3f:a6:13:c6:aa:c5:bc:48:41:79:5f:c7:e4:21:a3:
46:40:4a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 08:12:29 2024 by rpki-client on console-fra.rpki-client.org