Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/70B57B8A4CE711EEB143CF6D4AD9E6FC.roa
File: 70B57B8A4CE711EEB143CF6D4AD9E6FC.roa (raw, json)
Hash identifier: /fw8glIa6gqwVNXXnCmrhTqaLRn66sSxkNcBpXfd4AM=
Subject key identifier: 54:7D:73:9C:64:F5:B4:AF:65:C0:97:51:C9:6D:F5:EC:3C:18:24:FD
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1200
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/70B57B8A4CE711EEB143CF6D4AD9E6FC.roa
Signing time: Wed 06 Sep 2023 18:59:01 +0000
ROA not before: Wed 06 Sep 2023 18:58:58 +0000
ROA not after: Sat 06 Sep 2025 18:58:58 +0000
asID: 61317
IP address blocks: 154.127.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4608 (0x1200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 6 18:58:58 2023 GMT
Not After : Sep 6 18:58:58 2025 GMT
Subject: CN=64f8cbf5-5285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:66:3d:87:e0:22:aa:33:a2:10:dd:f8:6b:
10:1f:de:5f:06:d9:0c:0b:96:43:d7:a4:ad:0e:be:
d3:53:92:6f:07:e4:18:1d:3b:06:b7:42:65:a9:92:
f6:6c:27:53:c2:83:4d:63:ab:24:45:0b:26:ba:1b:
64:67:50:bc:fe:ab:a5:4a:73:e0:03:09:2c:d7:9a:
27:45:a4:b3:5f:77:c7:f3:f1:f0:33:77:be:60:d9:
e5:de:19:52:de:21:68:d0:81:1c:43:ad:e5:9d:7b:
5f:24:26:1b:8c:90:7e:29:89:67:19:f5:3e:b6:a6:
68:fd:1a:85:8f:f4:29:fd:aa:e4:a4:b5:1c:99:6c:
b9:6c:e6:57:5b:07:69:3e:19:e1:eb:04:58:7a:7b:
7d:ef:41:40:7f:97:85:38:9d:7b:bf:26:f8:ba:85:
28:fb:51:88:8e:46:37:50:ff:1d:f3:74:10:67:ba:
65:cd:61:9d:7c:64:86:19:35:c1:13:22:48:41:cd:
f8:40:fd:69:da:15:cb:3c:77:05:a4:52:84:d4:3a:
09:42:03:22:18:98:9b:00:1f:54:a9:48:45:0f:68:
46:a5:f2:36:ec:ff:fd:bf:e6:1e:a7:7e:6c:b9:b4:
7e:a6:90:c4:0a:33:13:04:f4:df:b7:06:f4:95:8b:
5d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7D:73:9C:64:F5:B4:AF:65:C0:97:51:C9:6D:F5:EC:3C:18:24:FD
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/70B57B8A4CE711EEB143CF6D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.48.0/24
Signature Algorithm: sha256WithRSAEncryption
02:64:78:0e:94:7a:52:d4:3e:b9:e4:c8:74:ca:37:2b:43:dd:
00:44:1a:f3:31:87:2d:60:6e:b1:b5:0f:e5:71:de:a5:9c:55:
2c:19:b4:81:8c:32:25:0f:30:e0:40:df:a1:2e:fe:6f:c9:92:
a0:12:6a:47:b2:05:79:5f:29:1d:48:e2:c0:2f:7c:fc:20:c9:
dc:65:dd:92:a9:5c:f9:94:e8:87:d0:bf:20:52:d6:94:91:2f:
a1:e3:c9:06:5d:c1:1b:55:8c:30:a6:be:23:67:f6:17:6e:ff:
6a:a3:36:2b:5d:94:08:6a:d3:1f:c1:2d:06:0f:4a:be:59:eb:
f5:f7:48:0b:35:7a:d5:e5:bf:ff:04:7e:6d:da:ea:69:fd:83:
02:8a:de:a6:60:63:81:e5:60:b4:b1:6e:e6:08:6c:f0:8f:9b:
3d:c5:5e:f1:2d:6a:90:e4:d7:2e:96:4e:39:ec:50:59:9e:0a:
8c:fb:b3:22:33:11:88:35:b0:28:e0:34:aa:4a:c8:8e:68:4e:
34:df:a1:f5:a2:bc:40:4f:1f:1a:43:43:0a:07:c5:79:9a:dd:
16:4d:11:d8:ac:5f:64:3d:d9:ef:2f:57:b8:8f:90:82:29:46:
23:52:14:47:77:c6:f2:5c:2d:7c:1c:13:8f:b0:f5:d0:d8:d8:
6d:72:4a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 6 12:31:03 2023 by rpki-client on console-ams.rpki-client.org