Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0FEFE1D8B68C11EDB87695A5F1222468.roa
File: 0FEFE1D8B68C11EDB87695A5F1222468.roa (raw, json)
Hash identifier: teqt8OB4x1BVbHOYtjR3evEOs61NZ0Y44pBHRBqbFeY=
Subject key identifier: F9:F4:60:94:41:84:67:4B:F9:1E:3B:89:32:3B:91:D2:C3:7F:66:D7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C27
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0FEFE1D8B68C11EDB87695A5F1222468.roa
Signing time: Mon 27 Feb 2023 10:47:00 +0000
ROA not before: Mon 27 Feb 2023 10:46:54 +0000
ROA not after: Tue 27 Feb 2024 10:46:54 +0000
asID: 834
IP address blocks: 154.127.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3111 (0xc27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 27 10:46:54 2023 GMT
Not After : Feb 27 10:46:54 2024 GMT
Subject: CN=63fc8a24-ebdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:f4:af:13:8e:5d:5f:ab:7c:a9:68:33:c9:
3a:a5:dc:56:41:61:76:35:06:bf:32:e1:fe:1d:1a:
39:95:e0:f3:31:80:2f:57:0f:ba:14:6a:5c:52:59:
fb:b7:dd:50:49:8d:f4:4d:32:36:d0:50:4c:f3:f0:
e0:18:04:51:47:f2:42:d3:cc:e4:57:0a:30:98:6c:
4f:dc:2c:ca:cc:e1:78:19:dc:12:4c:b1:17:21:e6:
2f:b0:3b:ec:fe:62:60:f2:39:de:c1:cf:f2:6d:f3:
60:b5:d3:62:c1:c1:36:d5:8e:61:99:10:85:99:90:
70:85:6c:25:7e:e2:77:14:07:7e:68:55:45:d0:12:
03:28:3e:16:41:e7:5a:b3:b6:64:7a:ac:16:d7:34:
36:b6:5e:62:5f:ae:8a:9a:b1:8b:ea:86:7a:b9:0e:
47:27:0e:73:18:3f:c7:af:c5:7e:a6:84:c0:a2:97:
96:6c:85:1e:67:28:56:28:91:8a:28:d3:a3:ed:9e:
93:d8:2f:c2:54:8a:80:7f:ae:f6:d6:a4:fe:e6:60:
8d:17:9c:a9:58:a6:88:9a:3e:5c:e6:88:50:3d:44:
5b:58:c8:bb:eb:68:f2:b3:71:16:15:20:ea:87:ae:
d6:6e:90:3c:25:2f:b8:f7:8b:97:42:6b:24:43:e8:
a7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F4:60:94:41:84:67:4B:F9:1E:3B:89:32:3B:91:D2:C3:7F:66:D7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0FEFE1D8B68C11EDB87695A5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.60.0/24
Signature Algorithm: sha256WithRSAEncryption
14:93:8b:39:79:24:51:84:97:e8:25:df:60:df:4a:08:85:0e:
69:9b:7e:13:c0:c2:9d:e8:87:db:1c:40:a6:66:f5:51:29:54:
ac:60:46:d9:9d:43:c1:05:f4:63:e1:c4:ff:f7:ba:12:72:43:
bf:f5:49:cc:97:c3:d5:25:2f:9c:61:3e:e6:d5:8c:5a:c8:6b:
2a:33:18:e1:2b:de:42:40:6e:39:7d:92:bf:1d:d2:f1:8f:78:
84:e9:94:f2:d2:31:77:1c:94:4b:dd:c7:49:c8:ef:c9:5f:25:
1f:ec:80:6a:32:3c:76:c6:36:f4:80:a8:cd:68:c2:81:ec:4e:
81:ed:cb:45:04:9d:bc:60:0c:4b:59:c4:1b:48:38:4d:40:88:
50:5e:2a:8b:52:83:45:a7:fb:ca:53:55:bd:ed:30:a2:cd:f5:
5a:32:11:2b:80:b0:f8:28:25:53:3a:a8:6c:da:4b:27:5a:fe:
03:55:ad:0d:68:88:dc:a5:5a:d8:ac:75:dd:bb:fb:0a:b1:57:
6f:07:1d:5e:ce:b8:32:93:f6:13:93:9b:25:28:80:60:b7:fd:
0d:0b:cd:47:a4:1b:40:31:2c:5d:0d:60:06:07:b8:10:01:b8:
92:97:af:b1:ef:d0:24:50:c0:c1:f3:7e:a9:a2:05:ed:75:4e:
83:62:c2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org