Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0C3D2EA6496211EEB7F06E3D4AD9E6FC.roa
File: 0C3D2EA6496211EEB7F06E3D4AD9E6FC.roa (raw, json)
Hash identifier: 5AelhqwA348xvOSOfW63OI+X7e6SiRCg8nKfQqsJw3E=
Subject key identifier: E1:99:8B:41:BB:02:AE:7C:FD:81:09:6C:BC:07:43:9E:07:0F:92:F2
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 11EB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0C3D2EA6496211EEB7F06E3D4AD9E6FC.roa
Signing time: Sat 02 Sep 2023 07:26:36 +0000
ROA not before: Sat 02 Sep 2023 07:26:32 +0000
ROA not after: Wed 04 Sep 2024 07:26:32 +0000
asID: 834
IP address blocks: 154.127.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4587 (0x11eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 2 07:26:32 2023 GMT
Not After : Sep 4 07:26:32 2024 GMT
Subject: CN=64f2e3ac-9116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:61:f4:f2:27:37:49:e4:42:d7:90:c1:41:71:
6c:3f:8d:c2:e6:53:3f:95:fe:a3:6f:07:e6:1d:48:
21:29:bd:65:8e:10:b3:fa:e5:fc:fd:85:a4:4f:7a:
4e:2f:0c:f5:28:2c:6e:ec:49:95:ab:81:bb:9d:0c:
56:72:02:19:41:39:cf:39:af:3a:3a:df:62:31:8f:
8a:9c:b6:57:ad:8b:aa:70:17:ea:25:01:67:b4:f5:
0c:40:fa:58:d2:1d:06:72:52:ec:39:aa:87:49:81:
21:2e:cf:86:14:47:9b:2b:18:5d:e2:14:d1:41:5f:
2c:b8:f7:5f:17:9b:21:a5:ae:46:ff:e5:a3:47:4f:
c9:29:13:5f:ac:bb:09:db:60:1c:12:e9:ef:e2:1f:
fc:38:20:b0:05:6f:9a:97:22:92:03:61:ce:42:48:
50:ec:e1:d7:65:d6:4e:26:89:fe:9d:dd:24:ce:2d:
5f:e7:24:68:fb:06:d7:86:07:78:5e:03:4d:2e:b7:
f4:26:db:15:6b:71:72:1f:f6:44:47:0c:95:9d:f2:
9a:a7:78:ab:a8:3c:35:51:d3:48:b1:4d:b9:47:11:
77:66:14:b5:22:60:1e:9c:e5:b3:3b:ef:05:dd:ea:
54:a0:75:a4:33:91:13:5c:e4:00:c2:b6:d5:47:d3:
10:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:99:8B:41:BB:02:AE:7C:FD:81:09:6C:BC:07:43:9E:07:0F:92:F2
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0C3D2EA6496211EEB7F06E3D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.56.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:b7:60:58:19:55:61:2b:81:7d:9d:64:15:47:3b:0d:68:f5:
41:b4:df:45:c5:f7:68:51:7b:c6:46:19:b3:8a:ee:2d:64:09:
1e:6a:d2:e2:54:43:07:4f:27:4e:61:33:99:7a:5a:12:87:2f:
61:ea:6d:d2:9d:16:49:db:f5:c2:fc:43:18:7d:4f:9b:b1:59:
2c:f8:0f:ba:2e:bc:81:61:0a:86:12:43:62:7f:cb:69:2b:ca:
dd:bb:c2:f6:7c:9f:46:1b:f8:23:69:a8:23:04:d4:d7:4c:7a:
a2:f9:58:91:93:eb:dc:f6:cc:ac:11:84:fe:59:20:16:50:cb:
b4:1e:4f:38:bd:25:35:0d:1f:ed:2d:1b:d9:db:14:33:ac:3c:
e4:b3:06:77:b1:cb:1c:af:f5:c3:c5:b2:d9:dd:53:a5:3b:f9:
d6:05:c3:2c:f5:bb:e4:e8:9f:1e:83:b9:f6:40:18:82:55:5b:
96:12:f6:fc:31:45:c7:36:f9:71:aa:79:8a:70:20:1a:28:09:
49:a2:79:a9:ae:e9:d2:f3:d6:83:04:9d:b1:31:80:d9:7f:a0:
3d:37:0d:1a:4a:e4:cb:09:a2:5d:d0:1f:34:ca:c4:4c:28:40:
e4:a3:39:f2:fd:b1:9a:a1:a5:35:40:55:b6:d5:07:bb:d2:ae:
9d:8a:62:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 15:37:42 2023 by rpki-client on console-fra.rpki-client.org