Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8F06DF06F59A11ED940096784AD9E6FC.roa
File: 8F06DF06F59A11ED940096784AD9E6FC.roa (raw, json)
Hash identifier: 9Br26ElQ1RwsEIQQNyV3BizhOHMFJgg9N2HzvRDzvdM=
Subject key identifier: DF:D0:A5:33:5F:A7:83:D8:F5:B0:83:12:25:0E:46:5C:39:11:74:F8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0DC2
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8F06DF06F59A11ED940096784AD9E6FC.roa
Signing time: Thu 18 May 2023 16:39:29 +0000
ROA not before: Thu 18 May 2023 16:39:25 +0000
ROA not after: Wed 21 May 2025 16:39:25 +0000
asID: 200482
IP address blocks: 154.16.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Jun 2023 16:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3522 (0xdc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 18 16:39:25 2023 GMT
Not After : May 21 16:39:25 2025 GMT
Subject: CN=646654c1-ecfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:c0:22:36:55:c7:e1:39:ea:90:49:1f:3f:
28:ed:18:b9:9c:61:0a:e3:d9:70:0d:5f:55:ac:bc:
f4:8a:a3:ab:10:78:5e:88:d2:35:f5:6c:fe:55:9c:
9b:55:07:70:c2:ab:78:61:3c:c9:14:82:09:b0:b5:
4d:bc:06:bf:a7:a4:f0:a2:75:83:8b:6f:38:e9:6f:
9e:2d:20:0f:0a:ca:38:f6:f6:92:e8:16:af:cb:ff:
4b:cb:ae:60:06:1c:9b:ef:b5:ac:5c:5e:23:ef:87:
ea:5e:3a:d5:f9:2a:55:82:4d:f8:60:af:6c:12:5d:
f8:ce:de:cb:94:33:bb:91:85:78:cd:a8:e6:79:83:
95:ed:d0:df:8e:7e:0c:6e:ad:a3:9a:e6:a6:e0:26:
87:71:7c:d7:65:b3:f1:dc:cf:04:b5:84:d3:c8:1b:
19:ad:03:d9:b6:cd:dc:f5:ad:26:93:7c:3d:4d:ee:
a2:79:a1:6a:61:92:3b:05:5b:9e:62:b3:4a:07:ed:
ca:87:cc:d5:ba:68:82:75:bd:70:1a:c7:b4:4f:f1:
17:99:fd:b5:04:f6:0d:af:95:64:8e:86:bc:46:fd:
03:09:e6:37:fb:42:5a:95:ad:fd:f4:0c:77:82:1f:
8f:ad:dd:a3:33:cd:73:dc:79:08:d1:09:4a:9f:b6:
94:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D0:A5:33:5F:A7:83:D8:F5:B0:83:12:25:0E:46:5C:39:11:74:F8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8F06DF06F59A11ED940096784AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.9.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:93:6e:ec:da:17:40:4c:94:17:af:6b:aa:53:ef:00:1b:75:
08:f1:f3:b0:72:e8:17:bc:18:7f:7a:13:fd:f7:e3:cf:90:24:
42:57:46:10:b3:86:3c:84:01:ac:81:78:98:d2:8d:9d:96:d4:
f4:bc:aa:ff:2c:b7:90:ad:62:23:2a:cf:7d:fc:7f:4d:4c:5f:
fc:70:e8:17:f8:01:d2:f9:fc:c1:4f:97:50:f7:fa:90:c4:0b:
4d:92:a2:38:ef:7c:42:63:f2:bf:28:5e:0d:0f:51:f7:05:5b:
37:b0:90:e7:5d:f2:de:67:aa:6f:dc:27:a2:cf:6d:de:c4:eb:
18:1d:1b:b8:af:90:ad:45:ac:ae:ef:9f:aa:bd:f3:f2:94:e3:
73:e5:77:26:38:0d:96:ef:07:45:24:0b:88:64:26:f1:dc:76:
6b:2d:12:0d:5a:19:86:f4:10:f1:0f:7e:47:ba:b8:19:59:8d:
fc:0a:8c:96:2b:8b:70:d0:f2:08:25:e0:15:14:7d:72:f5:97:
75:d0:7d:78:82:ff:a2:58:5b:a2:74:bb:64:e6:a8:a5:33:6b:
11:1f:ef:68:15:07:12:08:c4:2f:ee:e6:14:0b:84:b9:d4:72:
7e:05:e9:66:62:78:28:2b:8d:b9:b7:e0:3a:1a:35:82:b7:20:
5b:13:16:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:22:40 2025 by rpki-client