Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F565A7C8B74C11EDBC4D6CEBF1222468.roa
File: F565A7C8B74C11EDBC4D6CEBF1222468.roa (raw, json)
Hash identifier: 00RtajQM+PeSSR4ySQ7wNMQd9+97h8cFsl3tRT3OCyA=
Subject key identifier: A6:57:CA:C1:38:7E:72:5F:FA:6E:D3:7E:60:D6:6C:FA:58:DF:AB:EF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C84
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F565A7C8B74C11EDBC4D6CEBF1222468.roa
Signing time: Tue 28 Feb 2023 09:47:48 +0000
ROA not before: Tue 28 Feb 2023 09:47:45 +0000
ROA not after: Fri 28 Feb 2025 09:47:45 +0000
asID: 61317
IP address blocks: 154.16.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 07:27:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3204 (0xc84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 28 09:47:45 2023 GMT
Not After : Feb 28 09:47:45 2025 GMT
Subject: CN=63fdcdc4-dad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:ac:71:30:5d:17:68:41:fb:88:ea:0f:7a:
58:13:72:81:26:88:83:fd:77:61:a8:35:b2:3b:b3:
e6:8f:c0:b5:28:87:e6:0f:40:a3:0c:de:15:61:6a:
f8:c6:c4:77:f5:d9:4a:9c:e9:84:d5:a5:75:75:97:
0c:0d:b0:f3:2d:1f:b0:ba:eb:81:d9:bd:35:d4:84:
35:a5:be:b9:93:ff:23:6e:b6:09:72:cd:e9:19:a3:
54:49:36:c2:f0:82:b2:27:50:d4:70:53:4e:53:79:
e5:69:b0:c4:a7:2a:47:e9:57:d8:ee:76:88:41:10:
4f:35:8d:25:87:9a:ee:5a:49:4f:2b:98:14:cb:fb:
a0:de:ff:dd:8b:69:07:09:b0:a3:20:8c:ad:23:20:
ce:a8:bf:c3:84:90:d9:cf:5c:7f:3f:1c:92:78:f5:
fa:46:f8:d7:28:57:27:92:b4:5d:90:ae:c7:97:90:
82:f7:40:09:48:a1:e2:e9:72:54:9a:3a:31:37:c7:
42:20:92:70:69:d5:2d:13:a9:16:0a:d3:9b:ff:2e:
bf:f1:fd:51:7c:11:36:cb:33:f3:cb:76:35:30:90:
d4:49:3a:b6:d7:e1:34:30:88:84:6f:c6:a4:45:df:
4d:38:4b:3e:d3:07:cc:96:84:06:92:05:75:61:45:
d5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:57:CA:C1:38:7E:72:5F:FA:6E:D3:7E:60:D6:6C:FA:58:DF:AB:EF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F565A7C8B74C11EDBC4D6CEBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.181.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:e4:34:0f:89:dd:bc:10:01:4e:7d:17:e2:5e:59:4b:fa:b2:
40:c5:3e:23:98:01:45:54:a6:fc:8f:df:50:80:0e:c0:1a:27:
0c:fe:07:6d:20:e8:b3:05:02:66:61:7a:80:07:da:8a:3c:ce:
a3:85:2d:c2:39:a1:ca:37:36:92:01:64:21:02:68:95:34:01:
6b:1a:2c:1e:74:e4:db:81:5d:ce:ff:9b:83:e5:9b:3f:0d:88:
24:23:9e:5e:8d:b3:0b:f7:62:71:ee:a8:b2:e9:03:c7:8e:d5:
7a:10:bb:0f:51:93:cf:a6:d1:b8:a3:2d:04:43:43:23:cf:f6:
2a:88:5e:29:3c:34:b2:bf:d4:0e:1a:13:ee:54:17:4f:85:ce:
4a:e9:a7:79:e5:51:ea:50:d5:d5:27:54:18:15:d3:fd:f8:dd:
36:82:a0:8b:42:2d:c5:b4:38:5a:9e:00:70:0c:6f:ef:fe:20:
a3:c9:48:50:c0:fa:cc:35:4c:c4:7d:09:6c:b2:29:98:b8:c4:
31:fc:0e:ee:f7:10:83:6f:e4:7e:40:57:3c:e7:c1:e5:01:e0:
8d:ba:fd:0a:15:8e:95:98:66:5e:28:45:bf:05:f8:d3:e2:f5:
ae:b4:96:b0:a0:c4:49:81:66:fc:c4:5a:03:90:3a:c7:64:c7:
35:46:a5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 08:12:29 2024 by rpki-client on console-fra.rpki-client.org