Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7BF3FDCCB37211EE938E48C7775412E6.roa
File: 7BF3FDCCB37211EE938E48C7775412E6.roa (raw, json)
Hash identifier: DRULtrw/HpF/rQxPV9kJRcQ+/oIhx5b4P9+jHuhPYd4=
Subject key identifier: AC:C8:C9:24:3D:FC:4B:1A:81:44:EE:67:F5:B9:11:E2:7D:1D:5E:7E
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1452
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7BF3FDCCB37211EE938E48C7775412E6.roa
Signing time: Mon 15 Jan 2024 06:51:18 +0000
ROA not before: Mon 15 Jan 2024 06:51:15 +0000
ROA not after: Thu 15 Jan 2026 06:51:15 +0000
asID: 834
IP address blocks: 154.127.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 06:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5202 (0x1452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 15 06:51:15 2024 GMT
Not After : Jan 15 06:51:15 2026 GMT
Subject: CN=65a4d5e6-65c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:c7:29:6b:31:49:22:c5:48:56:b5:80:f1:
12:f6:4b:41:9f:74:da:a4:7f:4d:87:c9:4f:48:5c:
22:29:ba:d0:ec:8f:dc:7e:26:57:43:f1:61:a6:5d:
46:5e:bd:06:64:9b:57:c5:94:9f:6d:17:5c:f9:fc:
54:e4:ae:47:37:27:2c:64:be:fd:d9:52:ae:7e:cf:
fd:c2:94:a8:01:84:34:8c:94:3e:46:ab:52:e5:9a:
f5:a6:9e:7a:d0:ac:40:69:17:b2:a4:0f:af:2f:77:
64:e7:38:bc:8d:31:28:47:c2:6b:1c:ac:7d:16:36:
ea:68:98:fc:77:99:f8:f3:78:f0:a9:a1:5f:ef:09:
4a:e6:19:ac:70:66:99:25:e1:67:a5:88:5c:4b:e3:
ea:75:5a:31:18:93:fb:e6:2c:55:05:5c:3e:ce:90:
48:42:39:f2:1f:e9:15:64:4d:51:3c:94:b2:95:e5:
91:9e:3a:14:d0:b9:8d:e0:ad:e7:bd:87:0a:96:dd:
e2:57:ff:9a:47:d1:41:c1:d3:6c:c1:84:82:e3:06:
74:96:9b:62:26:7d:01:22:16:0f:e9:fa:96:b9:db:
e4:d8:77:dd:d4:00:51:2a:99:e2:4c:c5:5f:e5:7e:
09:0d:ea:3e:7a:83:0f:53:70:cd:f8:66:94:d0:78:
41:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C8:C9:24:3D:FC:4B:1A:81:44:EE:67:F5:B9:11:E2:7D:1D:5E:7E
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7BF3FDCCB37211EE938E48C7775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.63.0/24
Signature Algorithm: sha256WithRSAEncryption
21:04:f8:94:51:01:9d:68:93:cd:37:37:7b:11:52:f3:ec:ba:
fc:f9:1b:7b:48:74:45:f5:52:ee:af:22:04:f9:8e:b2:d3:bb:
0d:13:5a:a7:a4:eb:6c:ba:24:42:fc:68:8e:ca:fb:51:db:ad:
34:50:3f:0c:d0:d7:e9:73:a7:44:4e:ba:0a:d1:49:e5:86:32:
14:df:5f:5f:0d:d6:1e:45:77:51:66:5a:1d:d7:7f:8a:ab:29:
4c:7f:0a:09:92:90:0e:49:b1:e2:9d:dd:84:b6:b0:7a:58:30:
f6:1e:99:cb:0b:8d:d8:a9:5f:2a:bc:34:1c:5c:c9:4c:cc:32:
21:08:44:d4:70:59:7b:5d:9c:52:9f:07:81:93:25:4c:0e:8a:
5d:14:a1:e0:da:51:78:41:d2:73:84:35:67:8d:d3:88:0d:bb:
7b:ea:07:0d:40:bd:c1:80:ca:a8:f1:54:39:32:3e:01:4b:1c:
7c:68:5d:a6:12:42:37:b3:a9:b6:41:8a:b7:aa:9d:e1:4c:8c:
59:d2:2e:6c:5b:9b:26:9f:ad:5a:59:d5:cc:93:7b:61:d8:27:
f2:d3:36:a8:c3:dd:21:9e:cd:94:e0:06:6a:bf:33:56:68:25:
6e:32:89:0c:90:af:7c:cc:6d:08:d7:a8:94:f0:d2:f4:9a:30:
c9:68:a2:bd
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFFIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDAxMTUwNjUxMTVaFw0yNjAxMTUwNjUxMTVaMBgxFjAU
BgNVBAMTDTY1YTRkNWU2LTY1YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCmhMcpazFJIsVIVrWA8RL2S0GfdNqkf02HyU9IXCIputDsj9x+JldD8WGm
XUZevQZkm1fFlJ9tF1z5/FTkrkc3Jyxkvv3ZUq5+z/3ClKgBhDSMlD5Gq1LlmvWm
nnrQrEBpF7KkD68vd2TnOLyNMShHwmscrH0WNupomPx3mfjzePCpoV/vCUrmGaxw
Zpkl4WeliFxL4+p1WjEYk/vmLFUFXD7OkEhCOfIf6RVkTVE8lLKV5ZGeOhTQuY3g
ree9hwqW3eJX/5pH0UHB02zBhILjBnSWm2ImfQEiFg/p+pa52+TYd93UAFEqmeJM
xV/lfgkN6j56gw9TcM34ZpTQeEG7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUrMjJ
JD38SxqBRO5n9bkR4n0dXn4wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzdCRjNGRENDQjM3MjExRUU5MzhFNDhDNzc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACafz8wDQYJKoZIhvcNAQEL
BQADggEBACEE+JRRAZ1ok803N3sRUvPsuvz5G3tIdEX1Uu6vIgT5jrLTuw0TWqek
62y6JEL8aI7K+1HbrTRQPwzQ1+lzp0ROugrRSeWGMhTfX18N1h5Fd1FmWh3Xf4qr
KUx/CgmSkA5JseKd3YS2sHpYMPYemcsLjdipXyq8NBxcyUzMMiEIRNRwWXtdnFKf
B4GTJUwOil0UoeDaUXhB0nOENWeN04gNu3vqBw1AvcGAyqjxVDkyPgFLHHxoXaYS
QjezqbZBireqneFMjFnSLmxbmyafrVpZ1cyTe2HYJ/LTNqjD3SGezZTgBmq/M1Zo
JW4yiQyQr3zMbQjXqJTw0vSaMMloor0=
-----END CERTIFICATE-----
Generated at Wed Jan 17 07:32:30 2024 by rpki-client on console-fra.rpki-client.org