Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/28952C424CE711EE8B6C236D4AD9E6FC.roa
File: 28952C424CE711EE8B6C236D4AD9E6FC.roa (raw, json)
Hash identifier: bMHNsCGnWulCH59RvL7CrBMJRjILSYiKXneUFlNMsdg=
Subject key identifier: 63:84:F1:20:09:B0:C7:18:AE:48:52:15:26:BC:1B:00:EF:CA:27:11
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 11FE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/28952C424CE711EE8B6C236D4AD9E6FC.roa
Signing time: Wed 06 Sep 2023 18:57:00 +0000
ROA not before: Wed 06 Sep 2023 18:56:56 +0000
ROA not after: Sat 06 Sep 2025 18:56:56 +0000
asID: 61317
IP address blocks: 154.127.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4606 (0x11fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 6 18:56:56 2023 GMT
Not After : Sep 6 18:56:56 2025 GMT
Subject: CN=64f8cb7c-57b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fd:69:ca:48:b1:d8:e8:b8:e9:6a:d7:60:8b:
68:00:45:ed:ed:fe:9f:51:6a:28:b8:af:5b:49:9b:
2c:be:f4:04:bb:56:a2:a5:e3:e5:2c:a9:1e:94:70:
40:ca:26:14:31:1f:b1:db:0d:7f:d9:b0:d5:fe:79:
a3:a7:39:34:90:c7:a6:45:00:f9:6f:44:36:5a:f4:
2f:d5:48:dd:74:2f:19:c1:9e:07:06:5e:d0:48:eb:
03:24:4b:ef:d5:29:e4:c8:ad:ff:a7:9a:00:94:e2:
0b:1c:f1:78:c3:05:af:57:f7:aa:38:78:37:5d:2c:
e7:db:d4:a4:fd:ad:82:5b:18:42:8c:9c:4f:71:b7:
58:d7:7f:c6:03:4c:57:52:4a:41:8d:a2:19:42:13:
96:95:f7:52:5c:6c:cc:6a:89:c3:77:93:60:46:31:
94:5c:af:e4:b6:4d:00:43:eb:64:27:29:88:e5:4c:
2e:d7:0a:47:2b:bc:89:8a:cf:14:29:51:89:4d:33:
88:b8:88:17:4e:0e:fb:55:f1:ff:b1:3f:c6:e3:75:
73:51:42:53:0b:63:83:0f:10:44:1c:51:82:cc:df:
f7:e6:f7:65:67:7b:31:e8:69:bb:04:13:2f:0c:08:
b3:41:74:01:83:ce:69:f0:f4:24:41:67:68:ce:68:
a0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:84:F1:20:09:B0:C7:18:AE:48:52:15:26:BC:1B:00:EF:CA:27:11
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/28952C424CE711EE8B6C236D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.48.0/24
Signature Algorithm: sha256WithRSAEncryption
37:cb:ac:2d:5e:7a:97:64:27:eb:19:ba:b4:68:a3:aa:d3:27:
30:c0:e4:a6:0b:dc:fe:ee:d9:48:8b:e7:80:66:b0:18:fd:0f:
aa:f9:71:b3:5b:ea:1f:6a:39:88:6c:d9:8b:cf:4a:75:9c:0a:
9c:ef:48:f2:e9:1c:0f:38:8e:8e:4c:2c:53:c9:cd:d6:c5:d5:
4c:e8:8d:8b:bc:55:88:a8:1a:90:84:32:1d:73:d7:bf:7f:99:
26:34:9e:99:7a:fc:3b:53:1f:a1:17:1b:30:a2:9f:45:e2:70:
3a:da:bf:8b:ff:21:61:7b:2f:56:2f:4a:48:a5:c1:42:a0:ea:
ad:0d:d2:f3:d5:4d:00:b0:7e:98:c1:e8:d4:f5:9b:d0:58:73:
e2:1d:ca:1c:3f:9a:b0:42:a7:ac:a2:57:0d:18:12:ed:f8:cd:
83:03:e5:d0:77:46:ac:6e:c1:7d:d8:61:27:2f:a0:fe:30:1a:
94:12:84:84:f5:b4:6d:84:66:89:22:05:cb:b1:64:de:fe:ef:
75:5c:44:6e:24:70:78:16:b2:86:13:dc:a3:c3:b6:0f:38:44:
d3:8b:4d:93:e0:c5:66:e3:d6:22:34:90:9b:12:79:28:d2:26:
7c:83:fc:92:99:08:6b:da:83:80:de:6c:69:fe:39:f7:58:a8:
2c:2e:a0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 6 12:17:26 2023 by rpki-client on console-fra.rpki-client.org