Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/392BE9C4D42911EDAAB162F3F1222468.roa
File: 392BE9C4D42911EDAAB162F3F1222468.roa (raw, json)
Hash identifier: ZFS77SfgBTZ1t5QZsm9gZrGD8vpItNWiOFWVoknZ5O8=
Subject key identifier: 27:C9:EF:8C:E3:32:2C:4C:A8:7F:1E:A5:51:B8:DE:5C:A5:99:6A:D8
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D28
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/392BE9C4D42911EDAAB162F3F1222468.roa
Signing time: Thu 06 Apr 2023 03:15:04 +0000
ROA not before: Thu 06 Apr 2023 03:14:58 +0000
ROA not after: Sat 05 Apr 2025 03:14:58 +0000
asID: 211826
IP address blocks: 154.127.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3368 (0xd28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 6 03:14:58 2023 GMT
Not After : Apr 5 03:14:58 2025 GMT
Subject: CN=642e3938-5f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:40:82:38:df:43:60:d9:84:de:c9:55:34:e5:
b0:69:89:db:1b:7c:ad:33:f4:be:a3:fe:77:f2:df:
62:c3:b2:44:dc:64:b0:2a:66:53:16:26:92:70:f3:
b4:67:f0:2b:b6:ae:c5:58:93:0b:72:63:db:87:7d:
09:a5:73:c2:18:25:de:e0:69:ec:97:f3:3b:e9:77:
2e:5e:a4:5a:c9:cf:b2:09:60:ca:fd:fd:c8:54:c2:
87:f7:71:a7:21:f0:c6:90:3b:e2:f6:49:ea:9d:1f:
74:98:6c:9b:89:80:44:fa:16:2e:bb:db:e7:63:e9:
22:44:df:38:ee:dc:b4:8d:c1:06:7f:ac:6b:23:e8:
68:63:cb:09:38:0a:bb:95:fa:b3:5e:3f:c7:aa:73:
04:fd:6c:7f:56:43:c8:f3:cf:dc:15:09:e5:1e:96:
57:93:bb:59:db:ea:c0:11:07:b7:73:ff:fd:e0:da:
05:2f:76:36:6e:60:ee:51:d9:a3:b8:5a:ad:ed:12:
0d:03:ef:c1:30:c9:49:aa:10:b5:69:09:1c:f6:48:
a6:aa:c4:9f:67:66:61:6b:61:22:ab:e6:23:1d:0c:
de:19:1e:23:11:19:a3:de:a1:91:82:74:fe:92:81:
0a:08:cd:64:eb:f4:40:a7:4a:ba:99:aa:e7:17:cf:
9e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C9:EF:8C:E3:32:2C:4C:A8:7F:1E:A5:51:B8:DE:5C:A5:99:6A:D8
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/392BE9C4D42911EDAAB162F3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.60.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:99:d3:9c:0b:6b:ae:7d:3d:59:2d:c5:58:8b:65:7a:5d:99:
10:ae:f5:67:90:2a:1b:d5:e9:0a:f2:f3:34:47:88:78:f4:37:
53:d7:b0:f8:01:a5:53:b5:b8:42:16:87:8c:9f:a3:f3:b3:ea:
17:86:89:ed:3f:0f:13:e0:19:64:89:e5:ee:24:55:16:b0:c5:
09:42:41:6d:d2:38:d0:67:99:a2:41:e0:8e:e5:ce:93:57:3d:
91:69:a5:d6:5c:80:6d:82:b7:de:19:f1:f2:6a:a0:1e:8a:b0:
33:27:f1:bc:04:1e:cc:51:5f:48:4b:85:21:21:a1:92:af:87:
09:87:cb:ca:7a:4d:f2:4a:06:e8:77:4d:9c:21:89:bb:83:a6:
ee:01:37:a5:90:e0:11:6c:df:0a:03:3d:f4:c5:e2:2b:87:48:
da:88:bd:cc:f3:29:5e:0c:91:c0:bb:57:8b:ec:a1:df:bb:c1:
2e:b5:79:a8:24:1f:b3:6d:97:ea:be:d1:a5:31:fe:e8:24:14:
d6:58:b4:a5:92:c1:eb:b2:dc:3b:a2:d7:cc:73:9b:f8:87:d1:
43:9f:8e:da:37:a7:4d:ce:f1:1b:bc:dc:96:5a:e4:d1:6e:22:
8f:a4:f7:7f:f4:5f:11:bf:54:00:69:19:ec:9e:91:16:ba:3a:
3b:d6:86:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:57 2023 by rpki-client on console-ams.rpki-client.org