Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/82AF026A3EBE11EFB2E2B74A762E951A.roa
File: 82AF026A3EBE11EFB2E2B74A762E951A.roa (raw, json)
Hash identifier: np3t/AyJ4VNzgbI92A8WBHaUpc3MvEZWaDlHY5n2U/8=
Subject key identifier: D7:47:6C:5F:77:64:A1:15:1B:12:2D:0F:39:78:1A:29:BD:46:15:02
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1720
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/82AF026A3EBE11EFB2E2B74A762E951A.roa
Signing time: Wed 10 Jul 2024 13:15:43 +0000
ROA not before: Wed 10 Jul 2024 13:15:39 +0000
ROA not after: Sat 11 Jul 2026 13:15:39 +0000
asID: 834
IP address blocks: 154.127.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 12:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5920 (0x1720)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 10 13:15:39 2024 GMT
Not After : Jul 11 13:15:39 2026 GMT
Subject: CN=668e897f-a179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:c6:8e:0e:b0:2b:5d:34:37:34:f0:e7:70:
fb:d4:03:f0:80:b9:59:fd:a6:21:25:a6:8f:dd:03:
cd:a9:de:d6:51:5f:f5:8d:f5:3c:17:26:8e:c9:c3:
62:52:35:3a:f8:2b:b2:51:76:1f:87:bb:2e:64:2a:
bb:d6:86:46:25:a0:23:0d:92:e6:d5:54:f6:f8:cf:
9c:08:cf:7d:17:dd:4e:52:96:de:fd:9e:23:26:67:
c3:f8:7a:8f:56:12:b0:45:2d:a2:9e:58:4b:09:a2:
4f:f4:55:4a:79:7c:2b:4f:2b:c4:d9:09:e3:b9:b8:
23:93:13:c8:1f:f4:34:71:7b:58:7a:ff:8f:19:d5:
f6:e8:f8:e6:48:87:9d:77:5e:2c:27:48:53:52:9c:
7a:5a:bb:7c:31:33:77:a3:fc:1b:0a:f6:64:73:31:
d8:b2:e3:41:12:ff:1b:b2:3d:f8:26:00:1e:5a:ec:
9d:16:c8:94:da:eb:51:75:b8:f9:3d:47:e2:fb:eb:
a1:f9:b4:76:3f:85:41:03:c1:3a:e2:fa:41:00:73:
b6:0a:52:8d:7e:48:0f:5a:ee:55:6b:77:d5:e3:2b:
59:09:4a:3e:3d:ee:88:0e:05:72:58:32:6c:9a:92:
3a:01:a4:53:21:c4:52:8c:60:3c:6c:75:27:07:87:
b6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:47:6C:5F:77:64:A1:15:1B:12:2D:0F:39:78:1A:29:BD:46:15:02
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/82AF026A3EBE11EFB2E2B74A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.56.0/24
Signature Algorithm: sha256WithRSAEncryption
26:e4:98:af:3a:e6:16:1d:f3:13:f9:af:0f:59:a9:52:33:31:
31:22:82:84:94:1c:19:aa:d4:e2:ea:f2:8f:ee:67:00:b8:cb:
fe:93:df:f3:3f:4a:c0:a8:f6:7d:82:4a:b2:cb:1e:a1:97:58:
e8:c6:c9:5e:83:a8:ca:c0:77:b1:49:64:58:15:51:34:5d:6e:
b9:1c:89:ab:6a:e1:17:9f:dd:ca:27:43:96:6f:24:af:94:09:
69:8f:70:b5:b3:12:7f:89:0a:cd:8a:dd:3e:2e:6a:9a:63:d7:
2e:93:12:94:77:f0:21:3b:1c:54:44:f1:22:46:95:d2:02:6f:
4a:f2:67:f2:db:2a:29:85:bd:a8:26:93:88:c8:29:19:86:68:
ef:bd:76:04:73:0f:90:79:e8:49:b3:82:c1:2d:f3:32:94:6a:
95:c4:e3:26:d2:50:c7:80:fd:4f:38:3e:0a:f4:25:13:33:cb:
85:ff:8b:f8:61:56:ea:54:ca:d1:b5:31:dc:76:88:92:73:3a:
1a:8d:62:76:1f:24:e2:34:58:fe:07:ff:2c:30:18:51:0b:10:
25:ea:e4:af:50:40:e1:00:e5:79:03:3a:bf:aa:1a:db:21:b8:
46:a7:38:17:1b:14:b9:7c:b7:28:85:e6:5b:ec:ed:ed:3d:9b:
98:e7:f5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 14:14:27 2024 by rpki-client on console-ams.rpki-client.org