Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FCC640CEFC9411EA92B23A70F8AEA228.roa
File: FCC640CEFC9411EA92B23A70F8AEA228.roa (raw, json)
Hash identifier: jJrhyszN8W15qAbds6pHe9KLiI8hivL8QB+Yg6/a3Zg=
Subject key identifier: 65:0E:47:B2:84:D5:AC:22:66:80:7E:DC:BC:39:AC:61:37:4B:83:60
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 03AF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FCC640CEFC9411EA92B23A70F8AEA228.roa
Signing time: Tue 22 Sep 2020 05:32:22 +0000
ROA not before: Tue 22 Sep 2020 05:32:16 +0000
ROA not after: Fri 01 Aug 2025 05:32:16 +0000
asID: 3356
IP address blocks: 154.16.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Oct 2022 09:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943 (0x3af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 22 05:32:16 2020 GMT
Not After : Aug 1 05:32:16 2025 GMT
Subject: CN=5f698c65-9b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:f7:b4:4c:2b:2a:1a:89:49:55:4e:15:f3:
31:9f:cd:80:cf:ca:41:31:16:02:c3:98:3d:90:1c:
cc:15:c7:99:50:de:1c:ba:a1:cc:ea:c8:5b:a4:68:
47:25:0c:b8:31:e7:b4:83:30:6f:c9:04:55:d6:f3:
79:11:9c:17:25:a5:4e:15:a4:50:56:19:bd:ef:b8:
99:25:d0:6e:4b:3a:2f:f6:d5:62:19:dd:46:37:7b:
54:1b:58:c1:42:82:00:6c:20:42:90:44:c5:4d:1a:
5c:59:12:7f:9b:55:dd:a1:a9:ac:bd:81:97:89:3c:
c2:45:67:ee:f6:df:62:81:52:2c:ce:82:c0:97:7e:
32:43:f6:00:2c:6a:6e:d4:f7:c0:66:1f:57:82:36:
42:39:32:fb:0e:92:12:71:69:14:2e:24:1d:f9:12:
1f:01:b6:2a:3a:b0:56:d6:8b:7c:56:95:7c:55:c7:
f1:07:8e:30:a8:59:75:97:27:c8:f2:24:d6:a6:2f:
f2:c0:fc:93:fd:2c:6b:01:80:8b:9f:3d:34:ae:10:
d2:d2:dc:c0:ac:f7:a2:2d:ea:33:cf:18:46:84:77:
f8:3f:5c:4b:36:80:39:83:f0:47:b9:74:d5:c0:d1:
7f:58:a4:6e:b7:1d:31:4d:1a:25:81:73:32:62:ad:
9c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0E:47:B2:84:D5:AC:22:66:80:7E:DC:BC:39:AC:61:37:4B:83:60
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FCC640CEFC9411EA92B23A70F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.75.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:6d:69:10:b8:60:75:a0:5b:8d:27:cb:d4:a5:f1:44:41:70:
b0:4a:39:9f:8f:de:bf:45:57:4e:f8:f7:31:94:c7:d8:a2:f5:
5f:65:36:1f:0e:45:88:aa:a6:2d:c6:06:8c:36:13:40:b2:42:
9a:08:12:ea:ee:e0:ff:29:1e:99:1a:8c:ed:ee:8e:ee:aa:25:
d2:6b:c5:f0:31:29:e8:8f:ea:6b:b0:1d:e7:b6:db:a7:39:fb:
8f:b1:42:99:7c:de:a1:e7:45:8a:c7:97:71:50:4c:11:2e:46:
ce:79:11:e0:2b:a4:14:c1:c9:91:32:d3:60:ae:a0:fc:9c:b8:
d4:78:ca:2a:b3:31:41:27:77:65:d6:04:31:09:77:de:e9:13:
2d:bd:4f:30:d4:bf:ff:e6:33:de:67:67:c8:ad:ea:7f:c0:4c:
26:0c:d1:b0:c1:ec:b6:a9:96:2b:39:08:41:08:b2:ce:ba:41:
ee:b3:47:0d:ed:68:09:4f:35:16:4f:27:ca:bd:d3:32:46:98:
76:ff:66:a7:59:cb:41:33:e9:a3:f7:bc:2a:4f:c9:15:f4:8e:
42:2a:dd:9a:57:ad:f9:72:83:ba:c3:ac:7a:13:44:2b:8d:6e:
3d:ae:21:00:38:44:fa:f8:71:ae:a3:7b:7c:65:e0:4a:80:88:
00:d2:6f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:53:31 2025 by rpki-client