Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FCB5CBFED7B011EEA3E9B589775412E6.roa
File: FCB5CBFED7B011EEA3E9B589775412E6.roa (raw, json)
Hash identifier: EgiZRv4Fh5qZhxkkGtyDOgd6A32O/CdFQnj1L7b1V2o=
Subject key identifier: 61:46:EF:E0:00:EC:65:1C:2A:F8:0B:36:22:23:F9:F9:56:5D:A6:DF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 153A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FCB5CBFED7B011EEA3E9B589775412E6.roa
Signing time: Fri 01 Mar 2024 09:49:25 +0000
ROA not before: Fri 01 Mar 2024 09:49:22 +0000
ROA not after: Mon 02 Mar 2026 09:49:22 +0000
asID: 834
IP address blocks: 154.16.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 18:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5434 (0x153a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 1 09:49:22 2024 GMT
Not After : Mar 2 09:49:22 2026 GMT
Subject: CN=65e1a4a5-12d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:50:3c:68:79:93:56:0a:8b:24:96:bb:63:
ed:24:50:e0:a2:7a:4b:32:a5:06:78:45:4f:09:13:
eb:03:26:9a:e7:f3:bb:8b:6f:82:e7:79:11:48:9c:
bd:eb:8e:b2:57:00:08:02:9f:e5:20:1c:48:19:25:
bf:44:05:83:ff:18:bb:a0:24:03:a4:04:49:9f:4d:
79:b5:3d:fe:61:20:39:9a:a2:b9:68:4b:8b:0a:69:
1b:5b:e4:73:3a:ca:d0:c2:70:c3:48:a2:7c:14:f3:
1f:91:23:50:fa:97:33:91:fc:27:0f:39:57:15:26:
c3:9d:70:f5:fd:b9:e9:d9:65:3c:2b:46:70:9a:a0:
c7:9e:80:f6:f9:5f:d0:d1:73:5c:84:fa:3c:c6:cc:
a1:fa:63:17:8d:54:3b:1c:9c:15:69:45:4e:c7:71:
2b:8d:72:e0:95:ab:9d:85:11:d4:39:18:51:2c:67:
99:fd:43:ab:11:01:c6:04:1a:2f:80:95:ea:64:d8:
14:f4:9a:26:63:51:4c:61:ab:30:4e:6d:54:d5:ad:
64:54:c6:da:20:a4:c3:c8:ce:27:be:f9:25:64:4b:
65:d0:04:f5:8c:8c:40:a1:3a:68:51:e2:95:29:37:
e3:0c:2a:cd:ce:da:59:bd:b6:0e:c3:db:fd:31:e8:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:46:EF:E0:00:EC:65:1C:2A:F8:0B:36:22:23:F9:F9:56:5D:A6:DF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FCB5CBFED7B011EEA3E9B589775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.132.0/24
Signature Algorithm: sha256WithRSAEncryption
23:88:6c:b9:72:08:17:35:7f:d6:e7:e1:8a:9d:28:0a:4d:48:
18:50:8e:a6:b4:91:6c:1b:10:9f:8d:70:38:17:6b:8b:72:70:
6d:32:0c:ba:20:3b:b1:a8:1c:d2:af:d4:eb:cd:5c:9e:b2:41:
a6:8a:3b:2d:d0:28:f5:d0:6d:45:1b:20:ff:e8:82:e3:27:83:
d6:3f:e6:0c:26:72:36:a6:44:ae:52:76:30:60:9b:95:25:50:
f0:1f:98:de:a3:ad:51:f8:79:73:cc:f0:47:5c:0f:31:34:bc:
6f:38:af:b0:65:71:a8:c1:a0:a9:2f:e6:14:93:f3:c7:bb:b5:
01:7e:aa:42:02:23:0c:77:50:9e:55:25:c4:46:ba:71:04:62:
de:40:0d:7f:ec:4f:ce:49:eb:b5:46:4e:be:28:2e:b2:61:85:
45:dd:f2:89:45:5a:8f:3c:f1:69:0a:ea:f9:fa:f4:1e:42:c2:
ad:8d:78:ee:bf:a5:21:22:a0:ab:8b:fa:e7:91:b5:97:fd:6e:
5c:ca:81:77:18:cc:5d:04:ca:c5:0d:a0:db:a4:3c:ee:ef:5e:
70:a2:37:c4:54:d8:d1:47:41:86:d7:be:49:97:aa:de:c8:78:
05:82:74:30:65:52:9c:e4:13:03:78:c6:39:6e:e2:03:59:3b:
3b:52:92:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 19:40:31 2024 by rpki-client on console-fra.rpki-client.org