Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/FCD52C96985911EFA2AD3D42762E951A.roa
File: FCD52C96985911EFA2AD3D42762E951A.roa (raw, json)
Hash identifier: HRjmvNhxTexyEpQYJVRnY4GFgVbFKAnKzN6j+gnfOps=
Subject key identifier: 53:60:25:BF:53:62:4C:97:14:8C:E5:A3:48:D0:25:80:BA:F7:C3:42
Certificate issuer: /CN=F369E115AF/serialNumber=4BD1270B700FF29D18423F183B9F92B36887D6DD
Certificate serial: C6
Authority key identifier: 4B:D1:27:0B:70:0F:F2:9D:18:42:3F:18:3B:9F:92:B3:68:87:D6:DD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/FCD52C96985911EFA2AD3D42762E951A.roa
Signing time: Fri 01 Nov 2024 14:02:53 +0000
ROA not before: Wed 01 Jan 2025 14:02:50 +0000
ROA not after: Fri 31 Dec 2027 14:02:50 +0000
asID: 37714
IP address blocks: 154.117.64.0/18 maxlen: 18
154.117.64.0/18 maxlen: 22
154.117.64.0/18 maxlen: 24
2c0f:f418::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 14 Nov 2024 09:19:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369E115AF/serialNumber=4BD1270B700FF29D18423F183B9F92B36887D6DD
Validity
Not Before: Jan 1 14:02:50 2025 GMT
Not After : Dec 31 14:02:50 2027 GMT
Subject: CN=6724df8d-4917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:59:ea:ae:86:51:1e:f7:0c:f7:0b:74:72:
f3:e3:aa:a5:81:62:93:1c:38:39:d0:33:09:b8:b0:
42:43:0b:06:02:5b:b4:0a:a1:53:d8:11:42:98:7e:
b2:7f:98:18:f6:c5:aa:97:f3:35:b0:bb:5e:e4:75:
6b:09:fc:39:a7:79:bf:f3:ab:d9:92:98:24:58:6b:
d4:15:87:d5:8f:54:c9:77:0a:73:ac:d8:17:7a:ca:
e4:80:6a:e8:f7:7a:8f:50:c0:80:45:02:47:0a:68:
e4:8a:73:12:69:38:66:5e:f6:b0:ed:6b:ba:11:f7:
6c:f5:5a:18:9e:ca:e8:eb:85:35:fb:cb:00:0d:cf:
cf:57:96:32:36:cd:d7:8e:0e:38:d3:a9:6e:85:46:
9c:b5:79:84:4a:b7:f5:d0:56:a2:e6:1f:2d:99:f6:
56:a4:bc:9c:eb:65:df:e4:0b:71:b8:0a:19:03:77:
7e:61:ab:3a:70:5e:a1:38:79:04:95:ae:d6:d1:38:
bf:fa:85:20:63:93:d4:c2:05:3c:2f:e9:45:b7:cf:
d1:af:84:66:c3:ca:a8:72:b6:cd:dd:e9:bd:f5:9d:
58:fa:50:bc:75:47:f0:9e:5c:c4:24:63:bb:4e:d4:
f0:c7:47:2d:f2:e8:ee:6d:fa:48:33:25:e0:19:ae:
bb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:60:25:BF:53:62:4C:97:14:8C:E5:A3:48:D0:25:80:BA:F7:C3:42
X509v3 Authority Key Identifier:
keyid:4B:D1:27:0B:70:0F:F2:9D:18:42:3F:18:3B:9F:92:B3:68:87:D6:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/FCD52C96985911EFA2AD3D42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.117.64.0/18
IPv6:
2c0f:f418::/32
Signature Algorithm: sha256WithRSAEncryption
a8:25:4f:1c:ab:8b:97:c1:a0:c1:42:47:c0:eb:78:79:c6:d5:
0f:26:98:e2:58:33:9b:40:6c:4b:75:b0:90:f8:4c:08:85:39:
44:b7:eb:d0:12:47:2c:6a:24:4e:ef:5f:c5:f5:88:a1:ae:88:
89:88:dc:bf:04:23:da:b1:49:2c:9c:a0:1f:e4:7c:9b:d6:60:
4e:29:cd:f2:db:d4:fd:0e:93:51:d3:09:71:c3:0d:fd:62:8f:
fa:5c:9d:a8:27:85:c0:85:73:02:49:15:3f:06:62:5f:da:66:
0a:fd:ad:8c:29:f4:a7:74:8d:3b:25:88:dd:d6:18:f6:52:3b:
90:87:ca:e8:98:ba:0f:bf:55:96:f2:1f:3c:9d:d0:3d:17:e1:
f8:12:6e:6c:17:6a:28:92:ad:5e:7d:63:1a:05:8e:9e:72:1a:
7f:c0:e9:62:67:28:2e:90:bd:42:26:99:7c:50:a4:78:cf:24:
c3:b9:44:86:cd:bb:a9:34:df:5c:37:36:c9:fd:96:36:0e:a7:
10:13:bb:7f:14:fc:d7:f2:a5:91:94:50:f2:06:8d:81:57:60:
33:2f:ba:a8:6e:d1:56:4d:9f:df:d9:80:9d:20:9a:bb:84:e7:
74:d1:92:8f:c2:cd:63:3d:63:59:07:ae:07:cf:7d:e6:a7:0f:
84:b2:cc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 12:27:54 2024 by rpki-client on console-fra.rpki-client.org