Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/354CB29AB2DE11EE9219E0B4775412E6.roa
File: 354CB29AB2DE11EE9219E0B4775412E6.roa (raw, json)
Hash identifier: JyCgd+AkkMpqjG8ybqq4pHKewk+tZEeUI1zXpjkPfbg=
Subject key identifier: FC:38:4F:70:E4:54:53:4C:98:58:D7:60:2B:53:66:B4:D8:B1:62:61
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 144E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/354CB29AB2DE11EE9219E0B4775412E6.roa
Signing time: Sun 14 Jan 2024 13:09:54 +0000
ROA not before: Sun 14 Jan 2024 13:09:51 +0000
ROA not after: Sat 17 Jan 2026 13:09:51 +0000
asID: 834
IP address blocks: 154.127.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 09:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5198 (0x144e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 14 13:09:51 2024 GMT
Not After : Jan 17 13:09:51 2026 GMT
Subject: CN=65a3dd22-eb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:18:5a:c2:e1:42:bb:4f:82:78:88:48:7e:ec:
99:f8:69:c6:c3:c2:33:68:e4:f9:e5:4b:6c:a5:76:
c5:a1:29:7d:98:e1:13:a9:44:9b:1b:b0:9e:1b:b1:
18:a0:35:57:d8:42:bc:2d:7d:3b:9b:05:e1:42:5f:
19:66:38:e8:bf:7e:04:9e:78:9f:eb:42:e6:9a:46:
ea:dd:25:17:ba:2c:65:c4:32:a8:d0:4b:42:c1:ac:
14:b3:fb:d4:b7:1f:2d:60:f8:1f:67:99:fa:d6:e1:
73:3c:95:55:5f:19:98:9e:02:c9:4a:7e:4a:55:90:
d2:4a:63:ec:18:a1:67:19:a0:f9:b8:10:9f:b8:90:
a0:2a:3f:e1:af:eb:09:63:f9:aa:fc:50:16:14:2a:
a7:a2:46:e6:c6:65:d5:67:c1:38:f3:fe:98:d4:fd:
46:6d:b5:1c:6e:ba:f6:ac:d1:af:60:5c:65:69:dd:
0b:22:12:b8:55:0f:cc:85:e2:e4:ce:51:ed:5c:99:
5f:94:ba:cd:2b:73:d0:77:8b:76:66:87:0d:c0:0c:
67:28:08:98:50:87:f5:99:3c:8c:54:e1:93:36:6e:
a7:76:2e:b1:bd:a1:fd:09:e2:be:54:cf:8b:dc:0f:
eb:88:40:10:3b:9f:12:34:d3:bd:ca:fc:b3:ed:19:
0f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:38:4F:70:E4:54:53:4C:98:58:D7:60:2B:53:66:B4:D8:B1:62:61
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/354CB29AB2DE11EE9219E0B4775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.56.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:4d:50:35:ca:6f:49:ba:dc:23:7c:1d:b6:f4:9c:c2:6b:a6:
2f:68:5e:40:26:77:12:e7:3b:a5:7a:52:5d:a4:40:62:6c:d2:
e6:f5:8b:7b:81:36:58:6f:68:a4:c2:b1:fe:b4:75:e5:6e:6f:
39:f3:e3:55:e3:b9:fc:9d:92:86:be:c7:bd:0a:97:78:74:01:
b0:68:b8:53:e2:85:74:58:e4:9c:d5:32:fb:e8:4c:b7:70:b3:
a3:ec:0a:f6:05:2a:9a:5c:f2:04:d4:33:69:87:40:ba:55:72:
23:bd:57:3d:24:a6:d4:4e:a5:1a:e1:d3:b1:de:1d:69:0c:e8:
9f:98:1b:bf:25:d0:66:5f:b2:8e:b2:b3:83:df:23:63:6f:22:
02:90:22:f8:7e:5d:89:cf:41:5a:94:74:60:76:e3:79:3f:bd:
09:a6:d4:fd:3f:f6:99:a5:12:93:f7:80:09:4e:62:96:f9:7c:
9a:0a:13:76:73:6b:65:85:3a:17:ca:07:e1:a0:66:5c:b9:f7:
05:5b:bb:57:c9:4f:03:e5:a6:51:27:78:fe:6c:c5:b3:8a:29:
8b:a0:90:4f:89:b9:ef:0d:8b:ac:f0:f5:89:67:27:40:0e:c2:
31:e9:76:2b:2d:6a:24:51:7a:01:c1:93:94:2f:3d:e3:13:1b:
6f:89:99:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 13:17:08 2024 by rpki-client on console-fra.rpki-client.org