Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/344E6DAED46F11EE9D5856A7775412E6.roa
File: 344E6DAED46F11EE9D5856A7775412E6.roa (raw, json)
Hash identifier: HNixQXIQEAfKae6OYIz45XjcR9ONEcIMjVJCHDIsSdY=
Subject key identifier: 23:E2:B4:CB:D7:FE:81:39:67:95:4D:94:88:06:64:0E:53:75:90:3B
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 14D1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/344E6DAED46F11EE9D5856A7775412E6.roa
Signing time: Mon 26 Feb 2024 06:20:58 +0000
ROA not before: Mon 26 Feb 2024 06:20:55 +0000
ROA not after: Thu 26 Feb 2026 06:20:55 +0000
asID: 834
IP address blocks: 154.127.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 11:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5329 (0x14d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 26 06:20:55 2024 GMT
Not After : Feb 26 06:20:55 2026 GMT
Subject: CN=65dc2dca-e02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8b:ad:21:7b:39:6f:8c:aa:a8:bc:78:2d:e6:
c8:1d:c4:5c:4b:4a:97:75:af:78:d3:6d:1f:93:44:
4d:3c:e5:20:5f:06:68:42:7c:49:e1:aa:35:09:55:
0b:42:33:3f:de:92:e5:df:2f:21:b4:e7:36:86:aa:
19:8e:90:51:cd:1a:98:06:12:48:e4:7d:5e:dc:d9:
53:00:bd:33:14:c0:15:fa:e3:64:c7:46:d7:4b:2d:
d9:3c:cd:26:eb:fd:71:a3:51:7d:f2:14:8f:23:69:
9c:c1:de:ad:0d:18:ae:07:8a:ac:ad:7e:3e:63:ca:
1e:83:e7:c4:b1:09:cf:4a:70:ce:d6:11:da:80:31:
1f:af:a6:0c:89:bf:32:a2:da:93:51:54:97:e6:e4:
76:0f:1e:e7:ed:78:9d:38:ad:c3:c1:0b:44:64:85:
94:b8:5b:aa:e6:03:fb:e0:5e:7a:64:25:02:40:0a:
d0:a0:bd:f8:b4:cd:c4:77:72:c4:b6:23:75:dc:aa:
1c:52:50:52:6a:70:ad:c9:88:70:a9:ca:03:74:d2:
9b:cf:8b:b1:32:07:b5:60:41:91:33:84:ba:98:da:
65:59:43:71:e8:29:53:18:d1:1f:a0:ef:a4:e7:78:
45:02:65:fa:0e:6d:b8:52:f1:09:3f:ab:f2:cb:c2:
9c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E2:B4:CB:D7:FE:81:39:67:95:4D:94:88:06:64:0E:53:75:90:3B
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/344E6DAED46F11EE9D5856A7775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.56.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:a2:94:c0:bd:97:f4:c3:b1:32:b3:a9:82:d1:81:43:8f:9b:
48:fb:5d:79:0d:da:0c:cb:bc:91:7e:ff:d2:1a:d6:49:3d:48:
f1:9e:e1:b5:6d:60:b2:8d:f3:14:da:45:e6:3f:8e:f7:4f:a0:
68:90:a8:d9:27:92:02:b0:e4:87:87:40:67:f2:31:8a:61:a6:
a8:d1:12:bb:c5:64:99:54:27:34:1c:32:3e:13:fe:e7:bc:be:
bf:ce:05:d1:37:d0:0a:ee:32:ee:25:43:74:d8:c5:17:63:02:
98:4a:2d:c7:92:db:1d:1b:87:66:16:b7:97:4f:92:0f:05:58:
cd:19:b7:05:26:1a:36:b0:18:9d:07:bb:21:32:d5:3e:3b:85:
2f:05:12:c4:ec:06:c3:ba:3c:50:db:ac:fc:a0:15:7c:0e:2d:
e3:ed:ef:0a:29:5a:2f:6a:c6:76:ad:c5:66:14:f9:8e:32:ea:
21:22:c6:08:dd:a6:b1:9c:1d:97:1d:ed:34:a2:94:13:1e:d0:
57:80:60:6f:25:a1:7b:3c:7c:f5:52:d7:d5:41:62:fc:9f:89:
59:95:ff:5c:cd:6e:f0:8f:e8:fa:a5:6e:cf:18:c2:84:6c:17:
d4:de:8b:8b:e1:e3:ab:a6:5b:3f:31:6c:f8:bc:82:ce:87:19:
4b:05:fe:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 15:32:16 2024 by rpki-client on console-fra.rpki-client.org