Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F646F31E0E3A11EEAD6205234AD9E6FC.roa
File: F646F31E0E3A11EEAD6205234AD9E6FC.roa (raw, json)
Hash identifier: kiLL8tVig8BlQJA7lMCAHNPFp4YBeAGKTh7WP0z0Wzs=
Subject key identifier: D7:65:80:1C:91:A4:EF:3A:C4:19:45:73:7D:F9:3F:9F:E9:2A:3D:77
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0FB3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F646F31E0E3A11EEAD6205234AD9E6FC.roa
Signing time: Mon 19 Jun 2023 00:48:10 +0000
ROA not before: Mon 19 Jun 2023 00:00:06 +0000
ROA not after: Tue 10 Jun 2025 00:00:06 +0000
asID: 35913
IP address blocks: 154.16.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Jul 2023 20:33:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4019 (0xfb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 19 00:00:06 2023 GMT
Not After : Jun 10 00:00:06 2025 GMT
Subject: CN=648fa5ca-d2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:08:57:88:6e:da:65:65:1b:4d:70:05:97:
82:a7:9c:60:cf:f7:1e:c0:84:58:dd:d6:c3:f9:96:
0d:c6:b0:99:fa:b3:d6:9e:d9:75:5b:59:6f:d0:d1:
b4:ba:30:b8:14:ee:63:ec:94:e5:b3:62:ec:36:a3:
1e:db:3b:a6:3d:03:03:5e:aa:17:03:fe:ee:e4:3e:
ca:44:bd:d2:5c:29:67:f8:60:82:59:ef:e5:1b:12:
b0:f3:bf:d5:b9:37:ee:f3:13:6d:1a:50:69:f2:25:
53:eb:78:85:76:7b:7a:fe:57:1d:96:6c:47:bd:db:
39:fd:a4:04:b9:0b:11:e1:45:d1:ea:08:c0:dd:e5:
f1:14:54:89:84:44:0f:57:e0:fb:39:11:81:00:6f:
2b:04:f3:91:ff:4d:41:0f:33:da:b3:ef:f0:2b:36:
1d:34:0c:75:86:ba:17:0a:d8:28:21:78:ff:f8:19:
c2:14:92:49:25:3f:b2:d0:9b:e3:a3:36:d9:30:84:
24:00:67:eb:f3:33:d6:0e:46:7e:ec:09:45:4c:ef:
e9:9a:df:96:cb:a5:37:c2:50:da:be:ac:85:84:88:
2a:66:b6:fe:31:ca:d5:1d:e5:11:13:3d:28:74:1c:
ba:a4:1b:09:96:93:2a:27:ce:5f:af:49:17:fc:b9:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:65:80:1C:91:A4:EF:3A:C4:19:45:73:7D:F9:3F:9F:E9:2A:3D:77
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F646F31E0E3A11EEAD6205234AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.207.0/24
Signature Algorithm: sha256WithRSAEncryption
00:b5:b3:ee:c2:db:a0:4b:5e:c3:ab:71:89:f8:7e:2b:6a:64:
52:e5:5c:c9:6c:73:60:88:ee:68:ca:65:60:86:12:91:dd:39:
9c:ac:c9:d8:aa:01:ad:b7:47:ef:18:9f:5c:41:a9:41:37:fb:
39:ed:92:23:63:95:7b:4a:53:c7:03:bd:70:b0:9b:07:1b:06:
bb:9a:a1:ac:8b:8a:42:d7:5c:88:2e:70:f7:d5:d6:07:f5:ed:
ff:37:c4:1b:56:ff:23:62:79:1e:a2:fd:5f:69:6d:98:8e:d2:
b6:a4:79:e6:e6:16:64:1a:19:68:48:aa:49:88:29:90:ff:8f:
ff:15:19:0b:f6:63:82:51:d3:8e:6c:35:a2:a7:c8:c6:af:2f:
b5:52:68:d9:7a:fb:78:0a:07:32:25:2b:a4:42:c8:d1:cf:f1:
c2:b1:b0:24:5d:ec:35:0d:9d:d9:5c:66:b1:77:fa:d0:12:21:
c4:4d:16:30:b2:d7:f4:fa:bb:62:77:cf:95:f0:ca:2f:48:c0:
23:91:3b:be:b8:02:22:62:93:15:d2:d3:36:29:5a:9f:52:0a:
e6:08:72:bf:8e:de:0a:86:85:d6:5e:35:70:97:f4:6c:a5:9e:
eb:d3:2a:15:38:b2:1d:c1:70:77:90:6a:3e:75:28:d7:d1:cf:
8b:4b:44:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 12:39:58 2025 by rpki-client