Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9472EE34AB3411EFB9BE7CA6762E951A.roa
File: 9472EE34AB3411EFB9BE7CA6762E951A.roa (raw, json)
Hash identifier: T72IE/Py1qBay7ZEDo8YtquYFKykYKtQyj02W9ErXd4=
Subject key identifier: BA:81:29:52:8D:26:EE:41:CA:54:FD:30:B5:8B:36:08:B6:5B:4D:01
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 190E
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9472EE34AB3411EFB9BE7CA6762E951A.roa
Signing time: Mon 25 Nov 2024 13:52:59 +0000
ROA not before: Mon 25 Nov 2024 13:52:55 +0000
ROA not after: Wed 25 Nov 2026 13:52:55 +0000
asID: 834
IP address blocks: 154.127.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Dec 2024 12:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6414 (0x190e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Nov 25 13:52:55 2024 GMT
Not After : Nov 25 13:52:55 2026 GMT
Subject: CN=6744813b-13d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:87:d9:3e:63:e3:bd:54:d4:0a:68:a6:53:
90:b8:50:02:76:a3:73:59:fd:fa:22:81:83:79:0a:
f0:50:05:4d:b3:cf:22:df:d1:1f:fa:96:08:10:58:
ac:06:96:8f:b1:9d:74:6c:45:ea:37:e5:d4:49:e3:
f6:60:32:3f:a0:7b:4e:ad:6e:4e:68:20:f6:8b:ce:
62:5c:b3:da:c6:a8:5e:dd:e0:c2:1f:07:6e:f5:ba:
1b:b0:46:73:2d:8d:06:74:04:1a:fa:2e:56:1a:16:
47:32:40:46:b6:88:c7:3f:53:48:8c:1b:22:ce:c1:
44:d4:bb:94:05:fb:d9:3b:f9:a3:51:89:81:36:4a:
74:32:af:86:cd:43:08:86:8a:6e:fd:9a:c8:d7:67:
63:cf:a8:6b:50:0c:e1:da:d2:46:7c:44:1f:33:2c:
de:51:5c:79:f0:25:c6:34:5f:5c:8b:e6:ba:b2:3d:
94:b1:33:de:36:80:46:6e:42:f1:0f:0d:7f:99:30:
ce:df:00:09:9b:72:8e:40:e9:83:4a:86:1c:8c:93:
f6:37:ac:a8:e7:55:30:67:0e:0c:90:5f:00:7d:3b:
14:cb:2d:95:b9:2f:2b:21:92:31:98:8c:54:67:01:
a6:78:48:95:7e:58:72:b1:c2:81:73:7d:8d:b2:4e:
91:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:81:29:52:8D:26:EE:41:CA:54:FD:30:B5:8B:36:08:B6:5B:4D:01
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9472EE34AB3411EFB9BE7CA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.59.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:d9:82:64:c4:3e:6c:e0:a2:3e:6d:a3:8b:56:e7:97:1a:4a:
d4:88:84:c9:23:ff:78:e8:2b:b0:d3:54:b7:b4:9b:eb:ef:91:
18:89:de:49:22:02:38:3e:02:dc:eb:3d:25:da:84:0a:fe:27:
8f:3a:29:b6:eb:91:d9:dc:0a:e1:ab:4d:2d:2c:eb:53:9c:77:
f3:21:d6:0c:6e:b9:51:9e:77:ba:fb:3f:99:47:b8:71:3d:fb:
47:5c:5f:bb:31:b4:a9:7c:b9:eb:9a:49:88:5b:4b:ea:a9:10:
c5:10:6f:e0:9d:2d:8f:ac:1d:0d:ee:76:54:89:72:10:ff:b9:
ea:fb:dc:44:67:cd:c1:41:c2:29:b4:24:18:6d:17:f5:84:34:
a9:9e:c2:25:58:c9:64:49:b2:bd:9a:6c:65:c3:9f:b8:8f:67:
53:c3:71:60:3e:82:b2:d4:4b:64:fc:8d:4d:c9:0b:c1:38:de:
26:8c:b9:50:49:46:4c:f0:2b:bf:8f:9b:27:cb:e7:17:8f:a7:
8a:b5:60:ea:44:46:28:a0:3a:43:e9:c3:d9:e1:5f:47:60:39:
78:e1:2b:92:32:b8:ef:06:aa:78:d3:16:94:0e:c6:63:6d:c7:
1c:f1:18:8f:dd:e6:4f:58:46:27:ab:5d:91:8f:e1:cd:38:65:
f8:13:51:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:58:51 2025 by rpki-client