Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/668255E4B50511EEB8C815B9775412E6.roa
File: 668255E4B50511EEB8C815B9775412E6.roa (raw, json)
Hash identifier: DuhwD49JdwUbqo1u4oNpezOGLoKKCZhe9SscCr35LmE=
Subject key identifier: 74:91:4F:69:23:E1:45:D6:E4:61:97:47:6A:E2:5C:9E:40:6E:C5:4B
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1463
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/668255E4B50511EEB8C815B9775412E6.roa
Signing time: Wed 17 Jan 2024 06:55:29 +0000
ROA not before: Wed 17 Jan 2024 06:55:26 +0000
ROA not after: Sat 17 Jan 2026 06:55:26 +0000
asID: 24768
IP address blocks: 154.127.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 06:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5219 (0x1463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 17 06:55:26 2024 GMT
Not After : Jan 17 06:55:26 2026 GMT
Subject: CN=65a779e1-6164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:13:f5:f9:08:98:37:36:01:45:23:8a:b5:
d0:ae:77:e4:2e:5e:46:ca:38:04:d9:4b:12:4e:5d:
78:cf:b5:42:92:70:2d:49:47:ec:74:f6:bf:8b:0d:
b0:d9:2e:39:cd:8c:3a:70:f8:a2:1d:79:d5:d1:af:
10:57:a9:a1:3e:e4:18:2a:22:6f:94:2b:9f:61:17:
82:bf:69:3f:5d:3b:59:eb:12:35:4b:97:33:77:09:
b6:c8:d4:39:88:b6:3d:ce:93:af:04:80:e1:ab:6e:
86:ed:ea:8f:f6:9d:7f:41:73:0e:0b:31:66:82:6f:
fa:a6:b0:e9:94:b0:69:18:c7:4e:7c:84:ab:a4:dd:
71:bb:46:22:09:3e:bc:61:22:4e:4c:c0:df:9d:19:
28:38:c3:2b:b1:a5:3b:e1:c4:c1:f4:74:17:d5:89:
b7:19:9c:5e:8b:af:07:76:1f:06:e8:39:df:c6:23:
0d:0b:03:f9:db:a7:e6:78:78:bb:ab:b1:4b:3e:f7:
06:70:ab:d8:f9:31:10:ff:e2:aa:03:c8:2e:81:53:
23:0e:fd:b6:d0:0e:5a:b1:27:81:48:ea:8e:87:2b:
ee:05:dc:5e:aa:fb:f0:05:28:00:64:08:f3:80:72:
c5:bc:ab:68:ed:59:20:9f:a6:43:b5:54:5c:57:7a:
26:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:91:4F:69:23:E1:45:D6:E4:61:97:47:6A:E2:5C:9E:40:6E:C5:4B
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/668255E4B50511EEB8C815B9775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.56.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:95:6d:3c:aa:48:53:0a:91:f5:d7:3c:90:6a:42:af:5f:ae:
3a:8a:ce:8e:dc:62:3c:1c:4d:db:dd:22:ae:48:0d:b3:d4:17:
32:20:2c:9e:b3:03:1e:88:53:5c:aa:12:70:33:55:a4:f1:5d:
15:9e:5a:9a:2c:b7:d5:8e:d2:76:37:51:02:a6:14:e7:dc:52:
df:3a:70:44:37:67:69:48:a4:54:9b:a7:32:df:5f:d9:fb:c4:
e2:de:d7:33:de:27:ea:7f:3f:4c:fe:da:b0:39:07:4f:d0:d2:
04:3a:4a:84:ae:ef:e8:25:fa:7a:29:6f:9d:0d:79:e4:26:2d:
e6:3d:2e:ff:c2:46:e0:aa:cd:0b:b1:ea:92:31:fe:de:2c:a3:
cf:2c:c3:8d:95:17:1a:bf:df:94:f6:b7:8d:fc:62:9d:7b:f5:
dd:1e:5f:9a:f4:f0:ba:14:25:4d:85:5a:0d:4b:36:bb:86:e1:
84:87:bf:3f:43:e7:57:0e:0e:b8:d0:c8:11:2b:6b:dc:ba:96:
d5:51:6e:40:5d:40:de:36:27:7e:73:17:c8:30:a0:29:4a:7f:
52:89:48:52:f3:5a:0a:42:a1:21:55:fe:60:41:13:07:5c:e3:
29:f2:63:15:4d:f6:26:02:7b:99:78:ef:65:7b:9f:d0:e1:3d:
0f:68:21:01
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFGMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDAxMTcwNjU1MjZaFw0yNjAxMTcwNjU1MjZaMBgxFjAU
BgNVBAMTDTY1YTc3OWUxLTYxNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+jBP1+QiYNzYBRSOKtdCud+QuXkbKOATZSxJOXXjPtUKScC1JR+x09r+L
DbDZLjnNjDpw+KIdedXRrxBXqaE+5BgqIm+UK59hF4K/aT9dO1nrEjVLlzN3CbbI
1DmItj3Ok68EgOGrbobt6o/2nX9Bcw4LMWaCb/qmsOmUsGkYx058hKuk3XG7RiIJ
PrxhIk5MwN+dGSg4wyuxpTvhxMH0dBfVibcZnF6Lrwd2HwboOd/GIw0LA/nbp+Z4
eLursUs+9wZwq9j5MRD/4qoDyC6BUyMO/bbQDlqxJ4FI6o6HK+4F3F6q+/AFKABk
CPOAcsW8q2jtWSCfpkO1VFxXeibXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUdJFP
aSPhRdbkYZdHauJcnkBuxUswHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzY2ODI1NUU0QjUwNTExRUVCOEM4MTVCOTc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACafzgwDQYJKoZIhvcNAQEL
BQADggEBAJuVbTyqSFMKkfXXPJBqQq9frjqKzo7cYjwcTdvdIq5IDbPUFzIgLJ6z
Ax6IU1yqEnAzVaTxXRWeWpost9WO0nY3UQKmFOfcUt86cEQ3Z2lIpFSbpzLfX9n7
xOLe1zPeJ+p/P0z+2rA5B0/Q0gQ6SoSu7+gl+nopb50NeeQmLeY9Lv/CRuCqzQux
6pIx/t4so88sw42VFxq/35T2t438Yp179d0eX5r08LoUJU2FWg1LNruG4YSHvz9D
51cODrjQyBEra9y6ltVRbkBdQN42J35zF8gwoClKf1KJSFLzWgpCoSFV/mBBEwdc
4ynyYxVN9iYCe5l472V7n9DhPQ9oIQE=
-----END CERTIFICATE-----
Generated at Mon Feb 26 08:57:00 2024 by rpki-client on console-fra.rpki-client.org