Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/441AFD680C0D11EE951BD6134AD9E6FC.roa
File: 441AFD680C0D11EE951BD6134AD9E6FC.roa (raw, json)
Hash identifier: u8NIas1UO/Do4KLsqDlFxikC1AlLgEZHXGv5GTz13Uw=
Subject key identifier: 0C:50:06:42:9A:C1:1A:81:4B:28:3A:77:D9:6C:A7:4A:1F:9C:4A:45
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0F87
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/441AFD680C0D11EE951BD6134AD9E6FC.roa
Signing time: Fri 16 Jun 2023 06:16:01 +0000
ROA not before: Fri 16 Jun 2023 06:15:56 +0000
ROA not after: Sun 15 Jun 2025 06:15:56 +0000
asID: 49999
IP address blocks: 154.127.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3975 (0xf87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 16 06:15:56 2023 GMT
Not After : Jun 15 06:15:56 2025 GMT
Subject: CN=648bfe21-1cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:63:7f:37:71:04:e6:da:4c:13:36:95:73:
04:0a:7e:ae:8f:56:52:70:6e:e7:45:ca:9f:11:3e:
ba:2b:73:25:ab:b0:ef:ff:ff:f1:8a:83:2c:a5:21:
c1:1e:05:6d:ab:5b:c7:97:0d:7c:ef:df:26:b5:15:
6d:68:b5:58:f5:91:f4:6d:d0:e3:44:03:3e:69:05:
7c:b0:c6:a2:3d:98:a8:2c:0f:23:3b:aa:8f:9e:38:
cf:cb:92:1a:74:57:00:41:27:89:0c:d9:cf:b3:9c:
69:57:58:33:ef:3a:5e:bb:8c:e6:a0:52:9d:07:48:
0d:d8:10:5b:7a:1b:72:0b:e1:62:aa:8c:ae:6b:b6:
be:0f:a1:29:aa:f3:43:d4:3c:9e:27:fd:1b:5f:de:
ea:52:19:d1:0f:9d:dd:7a:15:c6:f1:05:1b:48:cd:
fb:a2:0d:c5:cb:e5:1b:78:ba:72:b8:b4:33:ae:99:
80:b5:0b:01:56:31:2f:ad:ba:e5:7e:50:5f:0b:86:
d7:1d:ce:4a:43:0a:93:36:5a:86:ff:17:33:5b:68:
2c:6c:7a:b9:55:c6:f1:ce:5e:e0:8e:53:ef:ff:ba:
7b:bb:39:3b:d3:70:0d:a5:93:e7:1c:bb:d7:3e:da:
80:cb:d8:35:16:02:8b:4c:ee:7d:31:b7:2a:da:0f:
eb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:50:06:42:9A:C1:1A:81:4B:28:3A:77:D9:6C:A7:4A:1F:9C:4A:45
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/441AFD680C0D11EE951BD6134AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.48.0/24
Signature Algorithm: sha256WithRSAEncryption
41:0b:40:6e:7d:4a:74:7d:83:16:40:51:bc:f9:dd:9c:c6:af:
47:46:a7:4f:c7:f5:6d:44:ab:c4:ca:28:9e:18:95:a4:5d:90:
0f:98:c1:c1:07:48:fa:48:a7:77:5b:90:38:40:bd:a6:8f:33:
42:fd:e0:41:69:0d:76:d6:06:3d:91:4c:1f:c5:d2:de:5d:44:
93:8d:92:f1:29:65:dc:2a:03:fd:f1:37:1d:06:ed:dd:a2:4f:
cf:5e:ee:c5:f8:ee:24:ca:83:c1:65:a9:eb:cd:36:38:f5:23:
97:42:52:14:e6:a2:8a:1d:aa:3a:28:db:0b:e4:4b:65:89:bf:
e5:e9:2f:20:bf:f1:13:ea:9e:54:e2:2d:0b:22:02:d0:21:1a:
29:01:dd:38:be:27:30:30:df:9e:35:93:24:ed:5e:fd:dc:de:
88:ae:f2:cd:22:29:9b:b3:3e:38:c4:2b:60:3c:a8:1d:62:0b:
39:39:b2:19:84:28:d9:ce:5a:20:69:ef:14:05:96:31:85:a8:
f1:9c:bb:72:71:fc:39:2e:a9:ad:f8:7e:5c:07:6e:33:7c:d7:
10:15:59:da:56:0c:ad:0d:98:95:18:62:cd:5c:2a:5f:0e:a2:
51:26:40:a1:7c:3a:b7:f0:e0:27:6e:e5:57:9c:02:9e:63:d1:
ba:01:0f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 15 07:20:22 2023 by rpki-client on console-ams.rpki-client.org