Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2222DB94F0BA11EE971048BF775412E6.roa
File: 2222DB94F0BA11EE971048BF775412E6.roa (raw, json)
Hash identifier: AYlqbbvnKI4aLqLbR46IiQOWHhyV8WaIPlaLe55hyoU=
Subject key identifier: 28:AE:64:3B:88:02:58:14:73:AE:E4:D2:A5:39:32:17:F6:3E:06:17
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 158B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2222DB94F0BA11EE971048BF775412E6.roa
Signing time: Tue 02 Apr 2024 06:27:52 +0000
ROA not before: Tue 02 Apr 2024 06:27:49 +0000
ROA not after: Sat 04 Apr 2026 06:27:49 +0000
asID: 834
IP address blocks: 154.127.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 11:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5515 (0x158b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 2 06:27:49 2024 GMT
Not After : Apr 4 06:27:49 2026 GMT
Subject: CN=660ba568-b87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:be:32:7e:26:ab:ec:21:07:c9:79:9a:d5:
d7:55:30:c5:e8:3d:cd:05:b1:b5:b3:36:b0:35:8f:
60:59:86:12:b3:49:ad:28:26:55:a5:ae:65:5b:8d:
be:9a:00:7d:7a:04:25:82:05:e4:3a:63:8a:db:6e:
31:97:ad:c9:e8:c9:0e:47:4d:d7:55:22:15:2b:72:
26:95:42:68:2f:61:32:8e:0d:d6:c7:e0:94:03:b2:
b6:41:77:7f:5b:6d:0b:41:3d:c6:24:55:77:2f:b6:
21:d7:23:aa:0a:5f:83:b5:41:68:c6:8f:13:6c:ef:
ac:6f:ad:4b:06:23:27:28:b3:aa:6c:14:45:e9:34:
8d:f7:5c:3c:d8:bb:26:51:f0:11:d1:af:fa:13:a4:
0f:25:a0:4e:6a:ba:10:2d:0b:33:a7:71:ba:8f:4d:
20:ff:32:40:d3:22:75:30:68:a5:93:d5:f7:e1:63:
4a:b5:46:03:11:6a:06:ba:9e:e6:ac:27:cb:bc:5f:
ac:15:b5:a2:14:11:0b:df:7c:4e:df:e7:98:83:75:
72:3e:11:cb:5e:3a:8f:36:09:a3:ee:16:88:c7:2d:
22:a1:1e:2b:6f:9d:32:46:f3:f6:ae:bf:57:dc:db:
71:25:66:2c:cc:0d:40:37:4c:dd:da:d6:54:4f:07:
70:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AE:64:3B:88:02:58:14:73:AE:E4:D2:A5:39:32:17:F6:3E:06:17
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2222DB94F0BA11EE971048BF775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.56.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:4e:9b:6f:ea:01:ac:f8:97:43:ad:c0:e2:50:7d:18:0f:bf:
9d:d2:9d:74:15:ad:f4:18:3e:b4:b3:f9:1f:17:9d:1c:e3:f6:
9b:d0:e8:7e:b1:29:46:f3:a8:cb:4d:72:fb:b4:50:7c:c0:a9:
94:00:8b:74:f7:ed:45:ba:27:88:76:0d:a9:4e:7a:2b:d8:26:
66:14:0f:5d:de:00:d2:83:7e:67:56:f4:5d:f7:e4:07:ed:2e:
71:1e:5a:7d:69:00:ef:7f:3d:17:c5:46:09:3b:fb:bb:07:aa:
b6:0d:50:cb:98:17:1e:45:ef:42:ad:84:2c:40:6a:32:84:ba:
7c:66:a9:b2:a3:69:b0:6d:27:1a:04:80:6a:df:7d:a9:2e:ce:
6e:36:a0:43:30:e5:73:61:ba:94:26:ec:eb:33:95:3c:dd:37:
23:7b:8e:79:97:dc:f2:f6:8e:ec:e3:dc:d0:6b:d2:75:37:b7:
53:22:54:91:90:44:bb:c3:28:0d:61:e5:28:43:30:24:54:20:
75:f5:94:08:3b:61:29:ad:66:70:e0:15:b8:d8:69:7d:69:6f:
00:37:50:8b:f7:33:c4:68:b1:bc:bf:18:66:07:8f:aa:2a:db:
35:c3:3f:ba:4e:58:49:eb:cb:d5:1d:4a:bc:c5:11:1a:59:82:
e3:d7:77:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 14:43:59 2024 by rpki-client on console-ams.rpki-client.org