Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/075C8FD8B45311EEB895C257775412E6.roa
File: 075C8FD8B45311EEB895C257775412E6.roa (raw, json)
Hash identifier: G+HgGeU6Q2W1WnJLaLqmnC8tPS3B3KyOLlqqJ9ztUSA=
Subject key identifier: FF:52:2D:F5:D3:77:AF:94:37:46:BC:9D:3A:FE:62:B2:F1:7B:5D:22
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1458
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/075C8FD8B45311EEB895C257775412E6.roa
Signing time: Tue 16 Jan 2024 09:38:39 +0000
ROA not before: Tue 16 Jan 2024 09:38:36 +0000
ROA not after: Fri 16 Jan 2026 09:38:36 +0000
asID: 213060
IP address blocks: 154.127.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 06:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5208 (0x1458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 16 09:38:36 2024 GMT
Not After : Jan 16 09:38:36 2026 GMT
Subject: CN=65a64e9f-c3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:36:95:42:ec:c7:c5:40:fc:82:36:f9:b5:
c8:3a:86:a0:dd:ce:f5:47:ba:6e:17:76:e7:57:a5:
6b:8e:d0:06:78:33:3d:39:6d:77:86:4d:eb:85:31:
86:eb:92:13:af:06:4a:b3:19:fb:29:9e:b1:12:2e:
3d:dd:6f:14:53:f9:58:c8:d7:75:44:18:1e:97:5b:
b4:ab:2a:24:d3:b1:c4:4f:44:93:ac:d6:e8:db:1b:
25:58:a6:41:4b:0e:1b:71:6a:0c:dd:84:7a:bb:6a:
22:d6:f8:0a:92:c4:f4:8b:5a:51:32:e9:7c:2f:f7:
6e:65:7a:61:a4:66:38:80:c6:1e:85:2a:b7:fb:b7:
a1:5f:fc:b8:c1:50:ca:ef:b5:ce:aa:ae:85:a0:6c:
0d:1e:32:60:cf:fc:86:92:0a:26:00:ab:07:6a:9d:
c9:86:f5:0e:53:db:50:95:ee:ee:b2:0a:fe:0e:66:
8b:d3:d7:a0:b2:14:84:b8:8a:f5:7c:bc:9f:3e:eb:
0a:97:15:eb:7b:29:e6:90:d9:b9:73:37:8f:81:61:
3e:b5:d1:49:7d:29:0b:b0:3e:9c:9d:58:34:6d:04:
5b:8d:e6:c1:d2:d6:1d:ec:88:26:4a:62:5b:1a:2b:
87:56:b1:06:9e:ea:fe:c0:02:3c:e9:79:39:3d:16:
2c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:52:2D:F5:D3:77:AF:94:37:46:BC:9D:3A:FE:62:B2:F1:7B:5D:22
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/075C8FD8B45311EEB895C257775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.56.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f5:d3:90:57:43:a6:be:9c:bf:44:f8:e0:74:02:1a:1a:ee:
a1:bb:d6:76:7c:fb:0e:97:0d:e8:e5:76:b9:2c:1d:3c:27:00:
43:7c:5f:71:b7:12:f7:21:e0:bc:35:56:d9:ad:c7:5f:73:36:
18:3f:b9:e0:86:b9:e0:7e:37:fc:e5:a3:7c:9b:2e:d9:27:2d:
50:2e:02:5a:56:da:6f:e5:f2:5c:7c:23:52:11:f6:72:e3:c7:
27:e8:a2:da:09:2a:66:97:c9:b3:ee:7b:ea:af:95:a9:e1:2a:
b5:1d:57:73:4d:81:24:e6:a0:02:44:1d:ba:cd:c3:ae:6f:0a:
e2:f1:ec:8c:ec:11:ca:79:06:99:f3:41:44:07:c0:e1:51:5e:
e5:4d:cd:20:82:18:ff:7c:79:ea:f5:14:7e:c3:2b:7c:76:fc:
af:a3:30:74:f1:8c:56:5a:1a:8e:77:11:6c:a8:22:71:f7:32:
25:81:d1:45:f7:69:88:09:d2:f1:09:74:1e:a6:2a:00:3e:a8:
d5:83:3d:00:21:54:c5:7b:6d:17:d5:5a:0c:46:80:31:98:63:
6e:2c:49:d8:21:c1:d8:49:ca:06:e4:da:2e:f5:bd:25:19:be:
d4:a7:17:bd:f5:57:db:f6:05:c9:12:b3:03:fe:8e:67:ee:bf:
6d:e4:5a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 08:57:00 2024 by rpki-client on console-fra.rpki-client.org