Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/097E96428A8511EDA84674D8F1222468.roa
File: 097E96428A8511EDA84674D8F1222468.roa (raw, json)
Hash identifier: EjPh+1+lCHPcKmeMkf6pphpTXl4iWQSuXf5jTQrgSbw=
Subject key identifier: D3:F4:2B:88:2F:0A:98:F9:10:9F:B5:0F:D0:AD:C4:AF:9F:A7:7C:6F
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0B26
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/097E96428A8511EDA84674D8F1222468.roa
Signing time: Mon 02 Jan 2023 10:05:51 +0000
ROA not before: Mon 02 Jan 2023 10:05:48 +0000
ROA not after: Thu 02 Jan 2025 10:05:48 +0000
asID: 60721
IP address blocks: 154.127.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2854 (0xb26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 2 10:05:48 2023 GMT
Not After : Jan 2 10:05:48 2025 GMT
Subject: CN=63b2ac7f-2fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ae:62:0f:09:b2:6b:c0:1d:84:23:b2:e8:c7:
7d:87:15:60:a5:ca:ec:65:9a:55:c5:25:f6:6c:df:
7b:b0:82:a4:4a:8a:7b:37:33:38:fe:e7:77:d5:89:
e0:13:0e:05:7c:75:0d:01:39:c7:1e:32:37:86:13:
66:9d:6f:6e:cf:05:42:8e:11:1a:fd:9f:43:fa:af:
31:5a:e3:2c:b3:ca:71:54:d4:03:09:e9:5a:a3:89:
10:ff:61:f5:74:a2:22:2f:ff:37:dd:b4:94:ec:26:
6a:d3:9a:b6:4f:39:7b:93:c3:42:1e:55:b9:34:2e:
4e:ae:ad:04:11:a9:7c:df:0d:07:ca:b5:55:46:a9:
aa:a2:2f:c9:11:f0:0b:d0:78:c7:8e:08:68:08:fa:
7b:1f:09:c9:55:c6:cb:e9:8c:cc:8b:fd:e6:8c:ed:
de:ec:f0:72:be:57:2a:e3:13:04:b6:41:42:37:5f:
a3:36:22:be:e4:ff:98:af:5b:37:35:87:fb:4d:a8:
c4:41:be:c9:6d:4f:59:b8:7d:c4:7b:a5:7a:4a:af:
ff:46:51:bc:2c:63:bb:0f:7d:e0:ea:43:4a:00:85:
de:7d:d6:fb:c6:de:36:03:ed:a3:f3:de:39:3f:a1:
d9:d3:07:4b:8c:0e:26:21:28:6e:e2:32:78:3d:85:
84:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F4:2B:88:2F:0A:98:F9:10:9F:B5:0F:D0:AD:C4:AF:9F:A7:7C:6F
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/097E96428A8511EDA84674D8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.63.0/24
Signature Algorithm: sha256WithRSAEncryption
49:c7:fe:6b:48:59:52:5c:2a:39:ed:b9:4c:01:75:01:7a:8c:
1e:ef:d1:11:c4:fe:ac:cd:4c:f5:cc:35:7d:e7:04:91:36:94:
3d:c8:0b:94:c6:df:a8:3b:4e:6d:a0:7f:93:24:af:e2:eb:ec:
77:79:6c:15:f4:7e:04:41:13:8f:4e:b5:7f:31:78:e8:21:ae:
85:a5:09:e5:c0:c7:8c:b7:a2:47:6e:75:de:07:88:6d:77:e4:
f3:fc:fe:db:ba:95:db:d0:68:a2:e2:a3:39:8d:e3:af:31:f1:
dd:41:90:49:03:dd:f2:70:99:49:f7:1c:99:17:ba:d7:15:1d:
cc:24:ad:e1:09:53:8f:13:f2:69:9b:99:f9:3b:58:b7:cf:dd:
16:10:5d:c5:62:31:7e:26:e5:a7:57:7a:ed:c2:a7:65:22:7c:
bc:af:69:2c:d9:2f:a4:92:1a:b4:91:f6:ff:8d:16:dc:e8:f0:
5d:b8:e5:4f:20:e8:1f:96:4f:4d:d3:63:b1:80:1e:a8:f5:f1:
49:ec:83:6e:14:7d:49:4b:3e:98:c9:e0:62:20:ed:c5:ea:2b:
d4:8b:c7:1d:f1:9a:9e:a1:3f:e1:d8:cb:a6:bc:ee:e7:24:f1:
10:77:b4:95:76:8a:5f:bf:b0:b0:32:16:57:b0:a3:78:b9:6f:
a6:ca:2b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org