Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/383CCB3C565111EEBAC919714AD9E6FC.roa
File: 383CCB3C565111EEBAC919714AD9E6FC.roa (raw, json)
Hash identifier: AYPjl+YP4HsSsBWrMArafwI9BrSaj0IwYq6KKKwjsLI=
Subject key identifier: F3:3A:9C:13:73:49:EE:DE:2C:F4:58:46:73:EA:8A:A6:7D:EA:14:12
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1244
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/383CCB3C565111EEBAC919714AD9E6FC.roa
Signing time: Mon 18 Sep 2023 18:28:53 +0000
ROA not before: Mon 18 Sep 2023 18:28:50 +0000
ROA not after: Sat 20 Sep 2025 18:28:50 +0000
asID: 49468
IP address blocks: 154.127.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4676 (0x1244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 18 18:28:50 2023 GMT
Not After : Sep 20 18:28:50 2025 GMT
Subject: CN=650896e5-efed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:be:55:3d:7f:49:86:6e:81:0b:30:6b:12:
17:10:5f:f1:d5:22:c4:71:15:cb:65:18:01:8b:14:
c5:b8:b9:9e:23:81:3c:24:60:79:31:3c:e7:9a:bb:
17:af:10:36:64:ce:9b:9f:8b:65:65:df:2f:11:4a:
c2:9f:4a:5b:e3:4b:18:e0:ad:c5:f6:10:84:4e:20:
d0:a8:87:9a:72:62:3d:bf:ed:94:2f:57:41:08:d1:
5e:8e:6e:25:26:98:bd:f7:a0:17:46:76:0f:ec:2f:
3d:a6:ca:5d:bd:35:ed:b0:2b:82:72:d6:cb:a3:af:
10:84:33:74:cd:c7:31:f6:27:3e:e5:29:b1:f9:d5:
5e:36:f6:ad:c1:31:44:ad:06:1e:6d:e7:65:cb:20:
84:57:12:09:29:a7:0a:89:68:1a:f6:d9:76:f1:e7:
1f:50:0d:39:8f:83:32:de:e3:fe:62:7d:ad:c9:56:
33:dd:aa:5c:47:e8:4f:c7:28:31:f9:94:8d:15:c7:
6e:94:3e:da:47:40:36:8d:fe:42:70:92:a9:f2:9b:
78:88:93:bb:a9:e2:b6:96:06:61:4c:87:f6:60:8b:
54:de:9f:c0:4c:49:d3:d1:71:d1:ed:37:c6:5b:33:
d4:c1:6a:ea:7f:c0:0f:82:33:57:76:83:15:6b:71:
1a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3A:9C:13:73:49:EE:DE:2C:F4:58:46:73:EA:8A:A6:7D:EA:14:12
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/383CCB3C565111EEBAC919714AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.63.0/24
Signature Algorithm: sha256WithRSAEncryption
94:fb:88:8d:b9:1f:01:e6:77:1d:78:a4:db:64:1f:f0:1c:47:
70:15:b8:87:bd:f5:f9:2d:23:5e:a8:42:b0:fb:9d:a6:e4:12:
c5:64:3a:a3:be:da:e6:c8:ed:3b:eb:f7:de:73:28:89:c1:ae:
9e:7f:57:80:13:c5:c1:d7:f1:a5:cf:d5:3f:79:16:26:56:a5:
3d:a1:67:d6:fe:7e:fa:4f:34:d1:83:47:8d:d8:90:99:1d:1e:
f0:18:ec:5d:2f:02:54:e7:ac:2b:6e:4b:b7:c1:e9:0e:59:a2:
e4:3f:d9:62:6c:f0:7a:32:8a:c9:f8:3f:27:7a:89:c4:3a:f2:
b8:72:41:55:46:5b:59:62:30:24:f5:41:50:69:9c:d6:ab:91:
7a:db:45:07:d0:dd:2b:b1:46:fe:7e:fd:bc:6d:31:11:57:9e:
6a:e9:92:51:8c:04:ff:cf:bb:45:98:d1:bc:3b:c4:e5:0b:70:
c5:b5:39:23:7f:0d:69:00:50:fa:ff:7c:75:39:7e:e9:b0:45:
b8:8c:74:cb:47:54:e2:87:8d:32:94:24:67:9e:38:86:f7:36:
43:60:33:df:03:74:c3:f1:ce:0d:4e:d7:49:84:be:4c:9d:24:
cd:ee:12:93:2e:95:97:f7:99:f4:20:74:30:18:71:cf:2b:58:
c8:a2:3f:30
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEkQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA5MTgxODI4NTBaFw0yNTA5MjAxODI4NTBaMBgxFjAU
BgNVBAMTDTY1MDg5NmU1LWVmZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4F75VPX9Jhm6BCzBrEhcQX/HVIsRxFctlGAGLFMW4uZ4jgTwkYHkxPOea
uxevEDZkzpufi2Vl3y8RSsKfSlvjSxjgrcX2EIROINCoh5pyYj2/7ZQvV0EI0V6O
biUmmL33oBdGdg/sLz2myl29Ne2wK4Jy1sujrxCEM3TNxzH2Jz7lKbH51V429q3B
MUStBh5t52XLIIRXEgkppwqJaBr22Xbx5x9QDTmPgzLe4/5ifa3JVjPdqlxH6E/H
KDH5lI0Vx26UPtpHQDaN/kJwkqnym3iIk7up4raWBmFMh/Zgi1Ten8BMSdPRcdHt
N8ZbM9TBaup/wA+CM1d2gxVrcRp9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU8zqc
E3NJ7t4s9FhGc+qKpn3qFBIwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzM4M0NDQjNDNTY1MTExRUVCQUM5MTk3MTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACafz8wDQYJKoZIhvcNAQEL
BQADggEBAJT7iI25HwHmdx14pNtkH/AcR3AVuIe99fktI16oQrD7nabkEsVkOqO+
2ubI7Tvr995zKInBrp5/V4ATxcHX8aXP1T95FiZWpT2hZ9b+fvpPNNGDR43YkJkd
HvAY7F0vAlTnrCtuS7fB6Q5ZouQ/2WJs8Hoyisn4Pyd6icQ68rhyQVVGW1liMCT1
QVBpnNarkXrbRQfQ3SuxRv5+/bxtMRFXnmrpklGMBP/Pu0WY0bw7xOULcMW1OSN/
DWkAUPr/fHU5fumwRbiMdMtHVOKHjTKUJGeeOIb3NkNgM98DdMPxzg1O10mEvkyd
JM3uEpMulZf3mfQgdDAYcc8rWMiiPzA=
-----END CERTIFICATE-----
Generated at Thu Oct 12 12:25:22 2023 by rpki-client on console-fra.rpki-client.org