Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E8075020E2111EE94F922544AD9E6FC.roa
File: 3E8075020E2111EE94F922544AD9E6FC.roa (raw, json)
Hash identifier: VOfcoQmWc3WPLl7qQzk7lV8mKv8YTiUeQsTspeyUPzc=
Subject key identifier: 40:C4:86:14:0E:7E:14:A4:77:77:3E:75:31:42:C9:C6:D4:88:5E:F3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0FAF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E8075020E2111EE94F922544AD9E6FC.roa
Signing time: Sun 18 Jun 2023 21:44:04 +0000
ROA not before: Mon 19 Jun 2023 21:44:00 +0000
ROA not after: Thu 19 Jun 2025 21:44:00 +0000
asID: 35913
IP address blocks: 154.16.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Jun 2023 00:45:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4015 (0xfaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 19 21:44:00 2023 GMT
Not After : Jun 19 21:44:00 2025 GMT
Subject: CN=648f7aa4-5566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:31:3c:88:2a:0b:6c:34:0d:16:2e:9f:38:
25:9f:3c:11:28:f7:2d:cb:b4:e6:2b:ff:cd:e6:74:
37:02:2b:bd:f1:bb:52:f4:77:a8:c6:5e:e0:66:3e:
12:2c:36:1e:fc:1d:3f:9e:2d:81:e7:63:2d:cb:fd:
bf:f2:95:0c:4f:45:d2:6e:5c:5e:11:0d:4f:55:4b:
1c:fe:20:40:5a:da:ea:7f:ec:21:7d:63:7c:8c:7c:
25:c2:80:fc:d7:0b:f0:88:2b:0f:ca:62:b9:f9:0d:
4c:8d:34:fd:09:19:d2:96:9f:a7:e8:6d:ba:48:c1:
49:08:51:a2:06:7c:64:55:21:fa:a4:0e:d3:f7:4f:
13:2d:8c:c0:ec:f9:67:3c:1e:8d:b6:31:e2:9b:c0:
c9:89:9e:85:f8:1d:67:b7:8c:49:30:be:7f:83:d2:
17:ed:28:be:0e:e0:e0:41:10:3b:85:f2:f3:71:df:
98:93:21:99:33:fa:98:a6:0c:27:df:db:fb:0b:78:
d3:4a:ea:a2:22:4b:71:a7:74:a8:9e:cd:e6:21:00:
66:f9:1d:23:a0:14:67:92:0d:3d:0d:5a:2d:18:c2:
df:1f:44:0c:3f:f9:32:75:a6:01:6d:44:1e:b2:3f:
ad:40:14:a4:64:3e:03:d3:5f:85:37:b6:19:0c:f1:
9d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C4:86:14:0E:7E:14:A4:77:77:3E:75:31:42:C9:C6:D4:88:5E:F3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3E8075020E2111EE94F922544AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:6a:e2:4c:76:91:26:2e:7e:a6:06:fe:ff:f3:34:0a:be:4d:
5d:59:1c:67:bb:e0:51:36:29:f7:57:6e:b5:72:e5:de:90:55:
40:82:b1:db:98:c8:cd:3e:e0:95:1a:e6:da:61:9c:b0:ec:b0:
4d:8a:88:ae:af:88:2f:6a:d3:54:e1:27:2b:75:0e:7f:9b:80:
96:b5:e8:99:66:57:97:73:f2:96:1f:68:80:a6:77:05:1f:46:
bf:8b:35:ff:40:9a:2c:23:44:30:17:18:d7:82:6c:16:24:e0:
db:a0:13:06:b6:cb:ed:34:fb:9b:87:00:6d:be:1e:a2:e7:db:
62:68:14:35:5f:71:8a:3c:56:32:1e:cb:33:66:bb:69:66:25:
0d:cc:40:ac:9d:b7:db:42:f1:75:bd:61:eb:50:d6:5b:04:1b:
05:97:39:06:76:1e:3b:ef:e9:0c:17:f5:ae:db:bd:aa:90:7f:
fc:2b:a0:ce:3f:ef:18:21:9a:ca:0b:8e:77:f5:c6:ef:dd:b3:
95:d9:62:dc:0c:73:56:8b:71:a9:98:39:30:60:3e:11:3a:b7:
4f:ea:f2:69:ac:d9:79:d2:36:c6:b3:11:33:19:92:a6:8f:c7:
d7:64:21:10:e8:5e:c6:8b:95:65:6b:e4:52:cb:60:8d:7e:8b:
2d:70:00:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:51:03 2025 by rpki-client