Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/41E87A5C848F11EEA1E9E77E4AD9E6FC.roa
File: 41E87A5C848F11EEA1E9E77E4AD9E6FC.roa (raw, json)
Hash identifier: kotAlMPsDKRIriL5jVQsUVI4Tq/7w1c2Emu3F3Saoww=
Subject key identifier: 1C:E7:8D:FB:C1:BA:D0:6B:4A:6C:4E:D3:5E:58:80:96:D4:48:EB:F3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 131C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/41E87A5C848F11EEA1E9E77E4AD9E6FC.roa
Signing time: Thu 16 Nov 2023 14:48:52 +0000
ROA not before: Thu 16 Nov 2023 14:48:48 +0000
ROA not after: Sat 30 Nov 2024 14:48:48 +0000
asID: 834
IP address blocks: 154.127.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4892 (0x131c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 16 14:48:48 2023 GMT
Not After : Nov 30 14:48:48 2024 GMT
Subject: CN=65562bd4-6100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:9f:69:cc:3b:ab:c5:51:81:9a:00:43:41:
7c:27:5e:8e:ae:30:a5:ea:48:b7:74:23:c6:8c:32:
07:33:1a:de:61:aa:c6:66:48:66:0e:70:36:07:de:
0b:5c:b5:71:5f:82:3c:7c:f3:5c:b3:2b:22:c1:4a:
15:88:ef:49:50:31:06:0d:6f:b1:29:e0:36:d4:59:
ed:31:c8:65:fd:ec:ba:7d:68:fe:5b:28:46:af:1a:
88:2e:b4:ae:a8:a2:63:20:4e:ea:4c:f2:ad:1e:3b:
73:68:66:e9:7d:64:82:76:8d:99:ee:0a:33:f1:25:
dd:74:f6:77:b9:e4:f5:f0:00:11:a2:c3:1b:34:dc:
0c:fa:b6:2f:da:c6:58:a8:e6:56:3a:bc:93:be:ef:
c3:54:f6:2e:ef:a0:77:d3:0a:a6:c6:50:ae:88:23:
df:00:24:f9:08:eb:01:61:2c:2d:bb:62:21:50:dd:
82:1b:69:16:9c:d6:06:b9:d5:9f:56:30:95:b5:62:
de:d4:22:b7:2b:39:1d:0d:3c:43:64:36:65:ea:90:
b5:e3:bf:f3:4e:29:eb:1a:51:ae:17:50:eb:1f:ce:
89:14:7a:4c:ee:3c:5d:e1:a3:b8:1b:35:62:7f:9d:
c1:10:f8:ea:92:07:c4:96:70:98:97:3e:98:a1:e1:
9b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E7:8D:FB:C1:BA:D0:6B:4A:6C:4E:D3:5E:58:80:96:D4:48:EB:F3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/41E87A5C848F11EEA1E9E77E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.50.0/24
Signature Algorithm: sha256WithRSAEncryption
60:6e:6e:12:34:98:e4:3b:d3:e6:88:7c:fc:e2:63:fc:fa:9a:
83:27:f2:17:21:03:cd:a2:b6:a0:28:4f:5f:07:d3:31:08:c9:
13:a8:02:5a:6a:c6:72:9c:34:89:a8:c2:3f:8a:54:64:5c:ff:
52:06:1e:cd:88:65:f2:29:07:2d:55:85:37:c6:41:95:9d:25:
8c:e1:82:25:6d:5a:a9:e0:b5:8c:b9:aa:0c:e3:3d:43:32:b4:
2a:6f:e6:f0:9d:fa:28:d7:4b:85:2b:f3:21:0f:0d:04:df:df:
b1:68:bc:97:29:70:7a:07:7e:6e:c4:3f:3b:c9:bb:83:85:12:
10:a5:b5:52:50:f6:05:6f:8b:74:36:ee:ae:dd:c7:1b:fe:10:
bc:b9:d7:53:af:15:95:49:91:f1:54:79:43:54:5e:b7:b3:54:
57:16:0a:32:bc:41:a6:78:b8:8f:82:3f:e2:f5:bc:e7:81:d3:
43:23:9c:0f:7a:35:15:41:7f:ae:da:e2:99:9a:ea:a1:f7:56:
f4:47:81:c8:14:ae:f9:aa:b8:d9:0f:7c:7c:b8:09:b1:27:da:
c7:37:f1:15:46:31:43:1a:c3:82:7a:af:f3:af:ff:77:ca:19:
a0:6f:d1:16:78:13:ab:f1:e6:f5:1d:50:ba:6e:ad:c1:52:aa:
1d:9c:ee:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 16:33:50 2023 by rpki-client on console-ams.rpki-client.org