Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/313396FC033D11EEA8E30B6D4AD9E6FC.roa
File: 313396FC033D11EEA8E30B6D4AD9E6FC.roa (raw, json)
Hash identifier: wJryfzHLCFpdWh/GN3F7ExRGwdA3BmuK8jfwS27h2PA=
Subject key identifier: 65:82:BD:23:02:E5:ED:A4:17:A8:2C:72:5D:A7:6D:D6:F5:93:4E:7E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0EB4
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/313396FC033D11EEA8E30B6D4AD9E6FC.roa
Signing time: Mon 05 Jun 2023 01:06:25 +0000
ROA not before: Mon 05 Jun 2023 01:06:22 +0000
ROA not after: Sat 07 Jun 2025 01:06:22 +0000
asID: 834
IP address blocks: 154.127.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3764 (0xeb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 5 01:06:22 2023 GMT
Not After : Jun 7 01:06:22 2025 GMT
Subject: CN=647d3511-e26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:de:53:d3:a5:ed:84:7b:e7:ad:83:d5:d4:
9d:97:e9:47:d5:5d:39:3b:91:8e:6f:c6:f9:c4:b9:
00:07:3d:bd:19:7d:e3:c4:6f:7e:ec:da:29:77:82:
77:16:7e:30:9f:f5:bd:4d:98:26:85:31:0b:3f:46:
2c:3c:5c:80:3d:b3:93:66:dc:3c:6e:cc:13:16:d6:
93:5a:f1:2c:fc:28:70:d9:42:c9:91:d3:d9:ab:a8:
dd:bf:d7:5b:d0:65:66:32:b8:7e:06:60:3d:f5:10:
1a:09:29:40:62:9c:c2:58:f4:76:3c:70:5e:ea:99:
0e:cf:22:d9:de:de:f2:db:80:9a:68:49:89:3a:10:
b0:2a:e0:ec:7c:e7:00:04:de:22:aa:8a:80:2a:37:
37:1a:18:1c:40:db:af:2f:ae:73:18:ce:90:bf:00:
c8:18:f6:6c:fb:36:95:d1:69:24:7c:3f:f6:5d:bb:
fd:9e:a4:24:d9:c6:3b:e2:10:66:fa:e7:15:cf:79:
21:3c:b4:c4:9d:42:c3:7b:a0:ab:0f:0a:80:f7:ed:
39:b8:8a:5c:ad:7c:cf:80:c5:06:6a:f2:34:1e:bf:
9f:a2:b0:aa:96:38:b5:a8:97:23:5e:61:17:46:83:
16:e5:6e:cd:ec:1e:a9:d9:13:cb:e3:63:d4:5c:f6:
1e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:82:BD:23:02:E5:ED:A4:17:A8:2C:72:5D:A7:6D:D6:F5:93:4E:7E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/313396FC033D11EEA8E30B6D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.60.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:24:ba:0d:98:9a:a3:89:03:c8:99:9b:26:3c:7d:c0:16:45:
fd:5c:4f:c9:d5:02:a2:04:5f:2a:de:5d:bf:7e:18:fc:01:7d:
1d:e9:64:96:ab:2b:99:91:2b:ad:d7:a9:03:e9:df:17:f4:f8:
8a:bc:b8:2c:35:61:00:76:0b:ec:3f:71:7c:ec:9e:e3:c8:97:
ad:84:e5:43:dd:34:15:94:ae:dc:c2:bf:c3:2d:9c:eb:b3:c1:
86:72:8e:82:0b:96:8a:d0:55:cf:20:dc:10:c0:59:5f:39:5a:
38:ee:28:d4:6f:f2:59:4f:56:68:22:5b:09:9c:d4:d7:8a:97:
19:f4:c5:d8:2b:95:87:0b:ae:6c:af:69:60:c6:b0:66:99:da:
e5:25:2a:4a:e5:89:83:8c:fa:42:89:73:7d:00:dd:6e:24:7d:
7b:3f:b1:8a:34:a5:c7:37:7f:2f:32:59:08:81:1a:65:8d:d0:
b6:3a:60:4f:ea:69:1f:47:8d:8f:ba:dd:90:2f:68:e3:a9:ea:
83:59:48:3c:a1:f6:d8:ff:ab:ae:3c:98:92:7c:7b:ca:89:5e:
8e:30:1a:08:6a:f2:15:97:32:ec:c1:f8:e4:49:85:37:6b:fa:
0c:b8:cd:d5:89:bd:f2:71:48:36:56:b5:dd:69:b9:bd:a3:97:
d6:e5:af:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org