Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8B0E7C44141F11EEB3BE23874AD9E6FC.roa
File: 8B0E7C44141F11EEB3BE23874AD9E6FC.roa (raw, json)
Hash identifier: J7ES7LvVI927lnTI/6WZx0OcDya4ln5+rh6gfhiLQLk=
Subject key identifier: 75:62:A3:46:63:14:8D:9C:C8:69:E0:18:8E:3A:45:F1:98:AD:87:A6
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1005
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8B0E7C44141F11EEB3BE23874AD9E6FC.roa
Signing time: Mon 26 Jun 2023 12:47:01 +0000
ROA not before: Mon 26 Jun 2023 12:46:56 +0000
ROA not after: Sat 28 Jun 2025 12:46:56 +0000
asID: 834
IP address blocks: 154.127.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4101 (0x1005)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 26 12:46:56 2023 GMT
Not After : Jun 28 12:46:56 2025 GMT
Subject: CN=649988c4-e0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f2:97:b2:97:8e:73:71:01:dd:3e:3c:00:eb:
be:28:a4:1e:50:5b:2d:92:32:73:36:48:08:f8:b5:
8b:ce:5e:e2:c3:cc:ed:84:22:66:a8:a2:91:28:ab:
10:5c:ed:8f:50:6f:5b:28:e9:a8:6b:97:9c:b7:a9:
89:d2:67:8c:3d:42:90:11:37:38:dd:b6:07:e4:a6:
88:76:0f:a8:79:bf:72:1e:6a:9c:c0:59:ee:02:c4:
09:77:0f:8d:c1:42:5d:e4:74:5b:3d:88:5f:0a:44:
ea:71:de:8d:34:65:22:f0:c7:7c:49:16:92:31:c9:
a9:d3:c3:7d:a0:70:ef:de:5f:94:ef:e4:32:59:3b:
38:82:db:0a:d4:21:e3:6e:c5:38:9f:af:f5:e4:45:
55:b6:3d:44:7e:ed:06:be:7b:61:7c:cf:c8:c7:36:
02:a2:65:2a:db:0a:32:0c:06:db:92:65:3a:ef:01:
00:e7:6f:47:cb:63:da:f0:4d:be:95:77:52:ad:00:
5a:28:28:62:07:3f:5d:6d:99:2d:03:b1:17:60:cb:
a3:00:9e:6d:44:36:41:1d:35:43:49:ec:ce:5b:5f:
e6:f9:3f:d6:09:53:d3:56:24:2c:64:c2:cc:9b:a2:
3d:3a:f5:7d:62:54:22:26:e6:94:08:fe:54:ad:fc:
72:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:62:A3:46:63:14:8D:9C:C8:69:E0:18:8E:3A:45:F1:98:AD:87:A6
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8B0E7C44141F11EEB3BE23874AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.63.0/24
Signature Algorithm: sha256WithRSAEncryption
93:43:c6:1c:b2:52:f5:32:cf:6e:d2:0f:f8:8d:76:65:9c:70:
31:c6:44:10:d6:d6:3b:ca:25:28:98:08:33:72:d6:0e:3f:2b:
63:a7:d2:e6:cc:11:e8:39:25:8f:27:b1:6b:78:cc:15:c3:e6:
5f:76:3d:b7:ec:fd:9f:b5:c6:3e:fe:c1:bb:37:8b:64:e0:d0:
f6:5c:44:11:8a:ce:b9:17:19:6d:f7:5f:97:58:1c:a0:54:25:
8b:f9:39:40:01:5d:0a:2e:9d:9a:01:30:27:a5:92:ab:e0:a0:
54:21:5d:05:f9:97:18:7b:4c:14:d9:88:2e:4e:30:fa:8b:bf:
da:c9:06:47:54:7d:0c:68:49:fd:0a:85:d4:dc:9d:71:9c:f6:
ad:ab:ac:6f:cb:6c:0d:ae:6a:6e:61:60:f4:18:c2:cb:a3:b3:
14:5d:b4:c9:9a:2c:7d:3f:4a:7a:0b:96:24:0a:21:59:06:a2:
c6:6d:ab:95:7f:15:6a:d6:71:91:5a:4e:c8:50:6d:1f:da:c9:
8e:d3:53:3e:60:9a:97:a5:d1:81:27:95:67:b2:5f:cd:ea:cf:
e4:83:13:56:68:c7:e5:85:c6:4d:5d:44:62:d3:38:e0:4c:c5:
e4:03:84:34:71:42:6b:0b:80:16:ba:c7:c9:be:22:1d:23:a5:
4a:48:46:47
-----BEGIN CERTIFICATE-----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Generated at Mon Sep 18 19:13:01 2023 by rpki-client on console-ams.rpki-client.org