Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FD427A8AD7A211EEB5D06873775412E6.roa
File: FD427A8AD7A211EEB5D06873775412E6.roa (raw, json)
Hash identifier: JWLefX4nDz/CrEnX4K4M4N96j4vukZCyssPNBBVK6S0=
Subject key identifier: B4:8E:5C:D3:99:11:9C:A5:41:D9:A8:21:8B:B2:54:90:BC:2C:AD:73
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1526
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FD427A8AD7A211EEB5D06873775412E6.roa
Signing time: Fri 01 Mar 2024 08:09:13 +0000
ROA not before: Fri 01 Mar 2024 08:09:09 +0000
ROA not after: Mon 02 Mar 2026 08:09:09 +0000
asID: 834
IP address blocks: 154.16.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Apr 2024 06:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5414 (0x1526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 1 08:09:09 2024 GMT
Not After : Mar 2 08:09:09 2026 GMT
Subject: CN=65e18d29-4b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:34:4f:e7:da:dc:e1:a3:ce:2a:b9:4e:97:
69:d1:6f:21:66:f9:83:01:c9:7f:ae:fe:55:d8:dc:
6d:1a:10:be:f4:47:a6:84:ff:ee:16:90:a6:7d:5b:
ee:72:fc:e2:7a:2e:e2:f0:49:bc:cc:de:53:89:12:
7a:9c:3c:06:6c:c7:dc:a0:19:43:ce:99:28:5e:e7:
6f:ff:3d:0a:94:8e:5c:dc:22:0a:53:92:4e:a4:ff:
ef:dd:ed:a5:4a:20:a9:1c:07:42:84:37:3b:38:5c:
b3:07:23:1f:24:04:bb:01:60:ee:ff:98:78:b0:b6:
3c:92:1f:63:68:e2:11:cb:a0:02:dd:a3:6f:ce:90:
31:9d:b7:d6:93:fb:7c:0d:9b:fe:c9:c6:c1:c1:43:
fb:81:d5:ae:bf:12:82:84:e2:dc:ec:49:d7:d8:99:
46:1b:93:42:82:9f:bc:d6:74:96:cf:1d:7a:d5:d5:
f7:dc:64:09:0f:e9:2b:6e:a9:d5:5c:ec:a2:ac:2b:
26:26:3d:2a:af:3d:64:2c:3b:b1:09:5d:5e:5f:3f:
bf:ef:56:d6:3a:38:3b:cc:bf:31:84:58:36:a2:a4:
1b:d8:2f:5c:02:00:2e:d4:5a:1a:0d:5e:45:9c:ee:
7a:b6:37:73:37:d3:76:2b:ce:86:3c:0b:50:f3:53:
c1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8E:5C:D3:99:11:9C:A5:41:D9:A8:21:8B:B2:54:90:BC:2C:AD:73
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FD427A8AD7A211EEB5D06873775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.161.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:7f:41:72:8f:b2:24:9e:29:87:4a:ea:62:bc:60:bb:32:54:
e4:00:1e:8d:5e:d2:35:ca:b2:31:03:54:1b:47:fc:2c:d1:ac:
68:a9:61:9c:9a:5a:76:e8:cc:f6:60:1c:fc:2e:64:97:5f:c7:
f0:ab:dd:f2:d6:e8:39:ce:1b:79:a2:72:71:c6:1a:63:3a:1a:
6d:4b:e6:cc:9e:b7:3c:4a:2d:12:69:87:0c:53:2b:f0:3a:4d:
36:21:a7:a4:07:d9:36:4e:4f:f8:db:9d:fa:86:93:e7:74:b0:
e2:30:d3:06:f1:e6:ee:e5:15:35:0a:ce:ff:35:d8:ab:b1:66:
24:9d:52:73:e5:2b:fc:63:31:64:53:9f:b3:4f:75:dd:61:79:
35:2d:c5:cd:d7:72:38:8b:c4:50:18:9f:07:3c:eb:67:3f:d2:
34:66:f5:fb:79:d3:1c:53:ae:2c:2e:2b:9a:9d:c4:e7:59:24:
5a:59:e1:1e:5e:02:18:6c:b1:3a:d4:3e:1c:d5:30:23:f9:e0:
d4:06:a7:fe:ee:7b:e0:a5:e1:22:ea:8c:3d:15:92:86:e9:cb:
eb:09:dc:1b:3f:2f:e9:ea:df:2c:ca:18:b4:65:b1:b9:0d:72:
3e:58:fb:5b:b9:59:72:2b:8b:be:39:45:db:af:35:c0:08:57:
fc:39:07:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 07:28:34 2024 by rpki-client on console-ams.rpki-client.org