Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/44813232951911EE82EF5A62D25BE465.roa
File: 44813232951911EE82EF5A62D25BE465.roa (raw, json)
Hash identifier: m6s+BxZiFnl3VdJH/6XyUWYdqkqi1+Tt1UldxyI9Wjc=
Subject key identifier: 27:A0:B1:C4:5E:DA:3D:24:AC:CE:6D:14:2E:FB:FE:F2:78:9F:3C:8A
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 13CB
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/44813232951911EE82EF5A62D25BE465.roa
Signing time: Thu 07 Dec 2023 15:57:05 +0000
ROA not before: Thu 07 Dec 2023 15:57:02 +0000
ROA not after: Sun 07 Dec 2025 15:57:02 +0000
asID: 35916
IP address blocks: 154.127.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5067 (0x13cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 7 15:57:02 2023 GMT
Not After : Dec 7 15:57:02 2025 GMT
Subject: CN=6571eb51-d719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:05:82:8d:53:f7:32:bb:a8:29:76:cb:be:
2d:6e:31:8e:1d:9c:48:7d:aa:a6:b8:0b:82:9e:cc:
4a:bd:ea:d5:6a:58:d2:e8:d7:a0:8e:41:d6:14:69:
f9:9f:54:bb:6f:58:ab:fa:a3:26:a3:8a:81:49:62:
f6:0e:2d:72:11:22:f7:1d:a5:4d:dc:11:fb:6e:dc:
28:f8:1a:61:a7:e4:51:0c:63:9c:f5:2e:b3:1d:76:
f0:95:a1:b8:58:0d:44:5b:96:74:47:d8:80:16:79:
db:dc:40:17:ed:10:9c:8a:bd:5c:c7:54:0b:06:ae:
4b:83:6a:c1:fd:ee:15:32:2d:36:4e:87:ed:23:4a:
c5:ed:43:cf:ea:1f:b0:85:17:e5:00:63:9b:80:6e:
01:e8:23:ce:8d:b9:43:95:d7:dc:20:a5:78:20:35:
96:7e:80:ea:9c:ee:f6:7e:59:b0:e8:66:d8:14:5c:
5d:c9:4b:a2:42:cf:cf:13:11:dd:6b:68:27:cb:c8:
c5:b7:01:9e:cf:17:29:6b:77:e0:0b:ba:3b:90:8c:
b1:ea:b7:5c:c7:f5:bf:e0:e3:c9:82:45:b3:f4:e0:
d1:16:96:fc:a3:8b:a6:30:6c:bb:7a:04:f0:e2:20:
9a:24:33:48:16:08:55:92:d3:98:70:85:55:29:08:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A0:B1:C4:5E:DA:3D:24:AC:CE:6D:14:2E:FB:FE:F2:78:9F:3C:8A
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/44813232951911EE82EF5A62D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.48.0/24
Signature Algorithm: sha256WithRSAEncryption
14:c1:30:59:d1:4c:6b:e8:ff:c5:ff:5a:4b:5d:c6:3d:a4:89:
0e:24:40:44:c1:b1:3d:e0:13:0e:95:eb:2d:76:8b:5d:9e:49:
dc:e3:13:99:a5:6b:4f:0a:36:bb:b8:cc:aa:a1:ab:47:44:f2:
e0:b6:57:25:f5:d6:2d:3a:aa:4a:85:2f:91:fb:84:9d:9e:c3:
0e:90:70:2c:d4:d5:48:8f:ac:79:35:dd:55:94:71:20:e2:4f:
1f:af:4c:5c:5b:8c:5d:e2:48:22:d2:ba:01:85:4a:e6:ae:de:
ce:eb:ae:e6:3e:61:61:71:1b:25:6a:d2:97:8a:d0:cc:0c:19:
04:6d:dc:21:09:98:da:c6:ec:bb:42:c6:e7:ed:e1:42:3e:0a:
1b:49:e7:4b:4c:1a:fc:6a:8a:09:47:e5:1b:36:dd:a3:f4:fc:
77:c6:8a:11:b9:5c:62:bc:6e:0c:46:f2:3d:d3:4d:0e:fe:8d:
35:19:40:ad:af:f2:97:3f:81:43:cc:b0:8b:ac:de:9f:08:b5:
1b:39:0f:e2:cc:b4:de:2b:a2:3f:46:1f:2a:31:52:d6:64:44:
06:6d:d6:fa:ad:82:b5:fe:aa:25:a2:38:bb:20:02:0f:a9:6c:
80:d3:8d:38:4f:b5:92:e8:c3:4a:1b:8a:f6:f0:ed:d7:54:fe:
d8:29:97:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 12 09:01:23 2023 by rpki-client on console-ams.rpki-client.org