Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/65686450101411EEA7A9A1484AD9E6FC.roa
File: 65686450101411EEA7A9A1484AD9E6FC.roa (raw, json)
Hash identifier: H66jE2zLJYKi9hTePNQHiSiLOmtH8jql62ra4s+MDC4=
Subject key identifier: 4D:C4:BD:44:BB:BA:8F:9C:12:B3:AF:92:42:71:4B:AE:23:41:82:B8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0FE2
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/65686450101411EEA7A9A1484AD9E6FC.roa
Signing time: Wed 21 Jun 2023 09:17:08 +0000
ROA not before: Wed 21 Jun 2023 09:17:03 +0000
ROA not after: Sat 21 Jun 2025 09:17:03 +0000
asID: 834
IP address blocks: 154.16.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Jun 2023 16:18:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4066 (0xfe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 21 09:17:03 2023 GMT
Not After : Jun 21 09:17:03 2025 GMT
Subject: CN=6492c014-3736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:eb:2e:97:55:46:9e:f6:25:20:ac:d2:b5:e4:
d7:bb:79:e1:3d:a0:95:d7:e4:1f:59:bc:49:43:51:
a0:f6:c4:bc:90:7a:3a:d9:e9:1a:37:1e:52:87:a2:
66:ba:0a:41:59:44:0e:73:6f:3e:ef:41:74:d1:be:
e3:12:64:d2:47:37:c6:fb:b2:4a:65:04:1d:3a:14:
8c:18:5a:17:6a:38:81:15:5b:ce:7d:71:93:f7:cd:
8c:c7:89:6a:df:c3:49:02:be:97:c2:9d:9f:d2:a9:
33:5a:3e:8a:3f:a3:5e:68:52:b9:d4:6e:6d:8b:aa:
54:f9:8b:3f:c4:25:f7:db:c9:36:23:33:b1:df:e9:
d6:f9:f8:11:ed:19:13:88:c6:75:b8:d4:5f:81:f0:
0f:86:78:b8:5c:ea:e3:62:21:fe:88:67:b8:70:e4:
de:69:c9:54:77:21:0b:db:99:e0:e4:3c:3b:1e:c1:
0c:e2:22:28:0c:39:46:61:0d:b3:68:6a:ba:c7:de:
c7:9c:0e:50:f0:8d:20:01:bf:00:db:37:67:6f:96:
e2:d9:c6:07:b2:1f:30:2e:7e:c0:cf:a8:7d:f9:36:
a7:b5:83:94:7e:5e:70:02:34:0c:40:a1:7b:ec:67:
ce:4c:dd:48:ef:59:7d:91:00:5e:36:d8:73:0e:30:
9c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C4:BD:44:BB:BA:8F:9C:12:B3:AF:92:42:71:4B:AE:23:41:82:B8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/65686450101411EEA7A9A1484AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.60.0/24
Signature Algorithm: sha256WithRSAEncryption
39:5e:04:31:d2:af:23:64:73:ef:7d:4e:ef:75:5b:8b:de:66:
8a:25:3b:a1:16:4b:06:31:3d:d3:1c:47:79:47:c3:24:80:1b:
c6:ea:2d:c7:8d:eb:eb:bb:08:ea:56:0b:18:b4:39:12:12:16:
5a:e7:16:ed:0f:2e:8a:35:41:84:e1:07:a1:fd:87:b7:5e:7f:
69:dc:22:32:66:4c:60:bb:aa:5d:e9:aa:8d:c3:5a:d1:46:34:
39:11:75:91:3a:70:6b:54:29:b0:1d:0d:97:5d:5d:72:7b:a4:
e7:95:da:3a:81:89:a4:43:e1:59:e7:7c:2a:7e:f3:10:2a:bc:
eb:2a:ed:d0:bb:cf:3e:97:32:a6:9f:87:ad:43:e5:d1:1a:ec:
bb:cb:3f:54:63:3b:7e:ff:7a:00:7b:85:24:57:d4:aa:60:60:
98:fd:a1:35:30:8a:25:91:ed:b4:21:6b:f2:c0:18:64:8d:7b:
a9:8d:1e:e4:64:98:90:2f:2e:d1:f6:17:61:30:a5:bc:21:90:
05:3f:09:4b:2c:c4:c9:ec:76:f5:27:9a:3a:f9:b8:94:41:d0:
a0:02:40:f4:22:33:56:36:08:0c:10:63:bd:3d:18:89:6d:63:
bc:2a:e9:b6:3f:ed:26:04:34:f0:25:67:4f:5b:d8:44:36:ad:
d2:52:c0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 21:27:43 2025 by rpki-client