Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4B2A410CD39811ED9F3FBEBAF1222468.roa
File: 4B2A410CD39811ED9F3FBEBAF1222468.roa (raw, json)
Hash identifier: tPNI2GFe+fP+Ol8EtCv+RilQcbpTbGaroQhcptVSbsw=
Subject key identifier: AA:A6:BD:83:26:57:CF:E0:B9:CD:C9:A7:68:1A:C3:80:3B:F6:75:07
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0D25
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4B2A410CD39811ED9F3FBEBAF1222468.roa
Signing time: Wed 05 Apr 2023 09:57:37 +0000
ROA not before: Wed 05 Apr 2023 09:57:33 +0000
ROA not after: Sat 05 Apr 2025 09:57:33 +0000
asID: 212708
IP address blocks: 154.127.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3365 (0xd25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Apr 5 09:57:33 2023 GMT
Not After : Apr 5 09:57:33 2025 GMT
Subject: CN=642d4611-0f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:b3:29:14:2a:f6:06:43:94:17:f8:4c:26:
ad:85:91:cb:7e:4f:69:f7:8a:35:e9:d2:55:e9:cb:
76:a4:32:89:26:45:b7:e3:d6:4b:76:a4:c2:45:81:
8f:8c:2f:b4:0b:7a:6a:c9:e8:0f:2a:f8:56:24:fc:
12:05:eb:bd:70:f9:ac:36:fa:91:b7:6b:64:be:88:
68:41:94:52:fd:34:54:33:e3:42:46:8b:0f:34:b6:
0e:5f:f1:ca:f9:95:ea:03:a8:d8:bc:37:26:80:55:
5f:61:b2:0d:e5:56:62:dc:75:f1:ac:01:fe:40:9a:
c4:c5:d0:6a:5f:9e:2e:da:8c:c6:c7:11:5c:39:b0:
df:ac:89:6c:0c:2a:09:00:53:67:cc:8f:c5:50:fb:
82:ac:ec:fd:cc:0e:8b:2c:3c:1f:01:67:30:f9:e3:
81:ba:63:57:81:3b:7f:8b:78:62:90:5a:1c:18:55:
b7:35:86:a5:3f:0b:11:06:cc:68:96:b9:71:78:69:
31:d6:fb:ad:47:55:a4:51:55:2c:22:6e:f3:30:25:
cf:7f:5d:af:af:73:70:48:28:7b:7c:cb:6b:b1:86:
90:cd:ee:39:c6:7f:30:d0:e6:85:0d:09:0e:42:d7:
f8:f3:5a:e3:7a:7b:1e:d5:01:65:ec:ef:b6:e5:1e:
f8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A6:BD:83:26:57:CF:E0:B9:CD:C9:A7:68:1A:C3:80:3B:F6:75:07
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4B2A410CD39811ED9F3FBEBAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.50.0/24
Signature Algorithm: sha256WithRSAEncryption
25:d1:60:0c:9d:3d:17:e5:2e:5a:02:1b:3f:8f:e9:9d:61:94:
97:47:40:b6:d8:be:fa:e1:53:f6:22:30:67:a6:a1:39:21:a4:
4f:69:fe:0b:ca:56:2d:e2:1c:37:8a:bc:4d:b0:a0:25:da:3a:
fa:e3:ec:01:e9:c2:da:2a:f7:f1:35:9c:e8:0a:46:d6:a4:17:
65:f7:db:48:59:7d:d9:01:9f:74:89:8b:d3:54:4d:0c:b9:95:
c9:27:14:11:1c:f8:bf:1a:b7:d2:93:79:c2:ef:c3:3d:b0:11:
73:82:f9:29:b5:1a:aa:9b:35:8c:e2:f6:04:bb:d8:27:28:a7:
1f:e6:13:7c:72:ba:3e:93:98:d8:2e:ab:d0:ae:bd:b4:4c:3a:
ff:23:f6:fe:5b:ce:99:a2:52:16:b5:ee:3f:cf:d1:ec:4a:cb:
55:ac:0d:31:c7:a4:ca:71:78:8a:90:43:a2:6c:52:2e:0d:9b:
e3:36:6c:06:2f:aa:dc:25:91:1e:0c:25:e6:e9:d3:46:5a:c4:
15:a1:41:16:5e:45:03:e3:16:70:ed:b0:eb:24:48:a5:22:76:
08:ce:52:9e:89:3a:0c:64:09:94:72:f0:21:04:b4:c7:61:75:
e7:02:9f:c5:df:c1:ed:cb:24:1c:9c:8c:f2:56:64:50:cc:61:
8c:21:1e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:01 2023 by rpki-client on console-fra.rpki-client.org