Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/452CAA60E92111EF892F1766762E951A.roa
File: 452CAA60E92111EF892F1766762E951A.roa (raw, json)
Hash identifier: hsxmm/RtmSdJiaJHPmVYluyUT1Wn0ek0L8+fy3RsytM=
Subject key identifier: 0A:67:AE:4C:D7:D5:5D:DF:74:D6:8C:B1:97:5A:7B:A6:C3:41:20:58
Certificate issuer: /CN=F367CD72AF/serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Certificate serial: 31
Authority key identifier: 77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/452CAA60E92111EF892F1766762E951A.roa
Signing time: Wed 12 Feb 2025 09:10:58 +0000
ROA not before: Wed 12 Feb 2025 09:10:54 +0000
ROA not after: Sun 31 Dec 2028 09:10:54 +0000
asID: 30985
IP address blocks: 154.118.128.0/18 maxlen: 18
Validation: Failed, certificate revoked on Fri 14 Feb 2025 12:18:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367CD72AF, serialNumber=7708E66F1C07C1D7670AEBDBAE186DA42BCB30C7
Validity
Not Before: Feb 12 09:10:54 2025 GMT
Not After : Dec 31 09:10:54 2028 GMT
Subject: CN=67ac65a2-f401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:0a:b2:58:ff:24:8a:e3:00:0e:0e:22:0a:
0c:eb:d0:7a:8e:e6:d4:de:45:59:49:84:6f:49:94:
77:79:3a:98:9a:df:f0:00:0d:f2:a1:3a:d2:d3:db:
36:da:9f:ea:13:1c:fc:cb:9e:11:6f:13:de:c3:b0:
b1:63:bf:82:c1:10:d9:96:06:97:d0:0e:47:08:c1:
02:ef:21:05:ce:73:7a:ef:f7:46:4c:94:6b:6a:9a:
ad:8a:8b:52:4b:8b:da:f2:8c:25:9c:25:d2:78:e4:
f9:28:f2:29:40:4a:44:52:2d:17:d4:6b:84:66:70:
0c:ab:32:a3:80:11:84:e2:50:47:83:02:d3:9f:88:
7a:df:2f:5b:38:4f:4d:5f:4c:7b:f0:d7:5c:41:79:
a5:c7:2e:83:17:d3:21:cd:b8:b9:5d:6a:a6:ff:69:
6a:c8:fc:38:f7:14:32:09:63:5a:fc:c2:93:ed:d3:
04:8e:35:40:c0:7f:9f:6f:72:05:86:24:5a:f2:e8:
77:50:b1:4f:63:1a:66:1e:7b:85:11:6d:c5:73:34:
1f:62:dc:28:ba:c8:ae:90:73:db:75:79:0a:84:02:
98:87:16:86:d1:18:c8:b5:d4:a3:3d:e9:48:4e:a6:
2b:af:fd:20:12:f4:56:39:68:37:e9:d8:e2:75:9e:
f1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:67:AE:4C:D7:D5:5D:DF:74:D6:8C:B1:97:5A:7B:A6:C3:41:20:58
X509v3 Authority Key Identifier:
keyid:77:08:E6:6F:1C:07:C1:D7:67:0A:EB:DB:AE:18:6D:A4:2B:CB:30:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/dwjmbxwHwddnCuvbrhhtpCvLMMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dwjmbxwHwddnCuvbrhhtpCvLMMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CD72/0951C17ECEA511EF93B45BAD762E951A/452CAA60E92111EF892F1766762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.118.128.0/18
Signature Algorithm: sha256WithRSAEncryption
a2:a3:fe:61:6e:98:d5:7c:2f:74:ab:4c:1f:53:34:b7:f3:88:
81:0f:07:e3:32:75:a4:b1:59:75:42:b8:7d:a8:e1:51:05:94:
12:5d:fb:70:b9:60:0c:78:f3:1f:c2:26:f4:37:f8:82:68:41:
8c:f3:f9:43:43:ec:10:ef:50:f0:73:cc:97:a1:8c:97:80:7e:
95:90:4c:39:ce:17:51:19:81:32:3f:fb:50:36:8c:1f:0e:e1:
06:4b:58:7b:68:c6:86:fb:21:5a:e8:46:f3:eb:8b:13:8e:57:
b2:36:63:35:b2:14:45:5d:ae:3b:c0:8b:0b:2d:13:75:c3:75:
1b:96:fd:84:d1:87:30:fa:d3:3b:32:39:60:c4:82:6c:4e:ec:
c1:61:5b:de:4d:41:f8:b0:c3:34:4c:e8:cd:1f:9a:a4:50:a8:
20:79:80:9a:02:26:68:0f:dd:a5:a0:26:4f:6d:fc:c7:10:0e:
c9:68:20:80:8d:6f:52:9e:99:f2:ec:cf:8a:da:a6:22:ad:c2:
15:65:ac:b9:49:26:0c:b7:e1:56:34:33:dd:7e:31:60:8f:b5:
0c:26:7d:b2:a2:15:de:63:c5:00:d1:9a:5a:b6:7e:aa:6c:df:
88:31:ab:4b:59:3d:51:61:50:e5:4b:e7:09:15:58:6b:46:a9:
52:de:59:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:59:02 2025 by rpki-client