Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8E9896BA0ABF11EE8C3BFF184AD9E6FC.roa
File: 8E9896BA0ABF11EE8C3BFF184AD9E6FC.roa (raw, json)
Hash identifier: 8ZESYg6WnFJrz/HrzC2xYv4cKGF6v6wp0JYdw0dTTew=
Subject key identifier: 84:37:1B:1B:0F:31:08:F5:99:D2:BC:49:ED:B9:A5:72:63:B8:84:7F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F6C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8E9896BA0ABF11EE8C3BFF184AD9E6FC.roa
Signing time: Wed 14 Jun 2023 14:27:14 +0000
ROA not before: Wed 14 Jun 2023 14:27:11 +0000
ROA not after: Sat 14 Jun 2025 14:27:11 +0000
asID: 200482
IP address blocks: 154.16.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Jul 2023 02:59:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3948 (0xf6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 14 14:27:11 2023 GMT
Not After : Jun 14 14:27:11 2025 GMT
Subject: CN=6489ce42-b72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fe:99:9e:af:1e:86:24:0c:1c:a1:d6:30:95:
2a:5e:91:66:10:44:99:41:74:54:95:74:97:e8:fe:
e6:e2:a0:c8:63:1a:89:87:76:ac:8b:fd:aa:98:3a:
99:7c:e7:53:9f:57:c2:71:45:3b:f8:0a:26:7b:77:
36:a9:db:e8:2e:65:91:c3:87:28:0d:1c:50:63:04:
02:f8:0d:23:1d:e6:5c:68:1e:fb:65:bc:44:4e:b4:
df:29:4c:5e:3a:43:1e:78:a2:a6:10:4b:9b:7c:1c:
65:d4:ab:5e:6a:bf:1e:aa:db:ec:d1:52:37:b7:63:
c8:b2:01:32:23:df:8e:81:75:49:35:f1:4b:d7:ea:
3e:a7:c0:4b:5e:88:86:08:36:ad:04:0c:86:32:d4:
cb:4a:b5:ea:05:3a:96:c6:2b:29:aa:da:0e:d0:59:
b4:f1:4e:fe:a1:3b:bc:27:ad:00:9b:b8:0c:29:4c:
ea:64:7f:51:40:9e:54:b4:4f:af:8c:00:f3:89:95:
49:cc:01:ad:1d:d0:a1:86:1b:fa:94:14:9b:eb:7d:
7f:46:fd:52:3a:ae:5a:46:2b:b9:e2:94:c1:c2:d7:
c7:fb:9d:7a:84:33:2b:40:8b:9a:9c:bb:10:21:41:
68:3d:6b:bc:2f:5e:a8:6d:02:50:80:52:2e:44:05:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:37:1B:1B:0F:31:08:F5:99:D2:BC:49:ED:B9:A5:72:63:B8:84:7F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8E9896BA0ABF11EE8C3BFF184AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.225.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:e5:a2:22:73:ec:02:6b:d7:b9:4d:a1:8d:2a:39:e0:a5:03:
ce:95:fd:4c:b9:1e:f7:b6:ce:2f:f7:92:85:86:35:52:41:0f:
3d:cb:77:fb:1a:00:d1:bf:be:9e:13:ed:2e:d6:21:2d:cb:fd:
03:33:7a:75:0c:c2:80:96:97:aa:28:19:e2:4e:5d:75:f9:f0:
6a:01:86:29:d2:8f:16:96:26:6c:6d:8b:b3:c5:27:5b:c9:45:
ee:0c:c5:00:85:77:5e:ac:6e:57:d5:5b:2e:06:9a:1e:b5:aa:
53:e5:bb:03:c5:97:59:5c:22:01:df:e0:ee:90:9e:e0:5f:a6:
7a:95:87:9f:e9:1f:5b:62:25:08:87:57:c2:dd:be:6e:fe:cf:
b0:12:57:bc:74:40:d0:65:a7:be:44:38:a9:ae:da:71:56:97:
c4:98:1c:02:4f:ea:85:45:28:97:43:cd:25:64:6f:f7:26:6b:
2b:2f:03:b1:90:d2:c0:c0:4b:01:fd:c5:23:1f:13:6b:5f:1b:
82:a7:f0:3d:8f:24:c0:ef:e3:b5:93:f6:b6:bc:47:a4:30:77:
c1:ef:d4:91:57:ca:6e:6b:b5:df:b3:98:2c:52:cb:09:0c:f8:
35:17:0e:12:b2:f8:87:83:5e:05:28:a3:49:92:f3:7b:3c:0b:
93:36:98:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:58:27 2025 by rpki-client