Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BB99529E4CE611EE94289D6B4AD9E6FC.roa
File: BB99529E4CE611EE94289D6B4AD9E6FC.roa (raw, json)
Hash identifier: HE919EcnnmQSPZnEiSBHS+4phZ7LqjAdkOe24H8/JIM=
Subject key identifier: 92:42:75:DF:27:18:49:C8:72:80:36:84:EE:BF:A9:82:13:77:4D:A9
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 11FC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BB99529E4CE611EE94289D6B4AD9E6FC.roa
Signing time: Wed 06 Sep 2023 18:53:57 +0000
ROA not before: Wed 06 Sep 2023 18:53:54 +0000
ROA not after: Sat 06 Sep 2025 18:53:54 +0000
asID: 61317
IP address blocks: 154.127.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4604 (0x11fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 6 18:53:54 2023 GMT
Not After : Sep 6 18:53:54 2025 GMT
Subject: CN=64f8cac5-4eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:c3:77:52:f7:8e:d9:cb:b6:b0:c2:89:fc:
8d:f9:c3:58:c4:be:0e:0d:56:cd:6e:2e:6b:57:dc:
7e:e2:f9:19:72:d8:26:39:80:4d:60:96:6e:80:e3:
fa:01:89:a9:9e:6c:fd:12:08:40:19:6d:20:45:42:
81:ac:d2:19:13:60:78:e6:4d:67:48:ed:1d:cd:38:
01:00:d2:e1:23:83:8d:a7:99:f6:6c:b9:11:7e:d3:
79:3a:89:10:ae:a0:f4:f4:c6:e9:fa:9f:59:6b:39:
6c:97:e4:d8:6b:5a:6f:86:6c:74:06:e0:ac:2e:ef:
45:63:7b:40:f5:f9:13:2e:8b:15:1b:21:a2:79:87:
3e:cd:0c:9f:6f:b7:e5:20:64:6e:d3:d3:44:85:b8:
c5:4c:97:24:9e:da:d8:15:a6:81:2d:ed:31:70:eb:
6f:cf:8e:09:05:b5:15:a8:7e:74:75:c3:11:b6:d8:
0c:c0:a3:bc:2b:70:4c:90:f5:41:f8:fd:e7:ae:a8:
af:fa:b0:e6:18:d6:fb:2f:aa:34:88:9a:f8:b7:79:
76:b4:0b:e1:7c:dc:0c:26:8e:df:a9:dd:53:58:4a:
29:fe:2c:54:5d:ec:b6:04:11:1c:42:20:fc:6c:4c:
a5:dd:e0:e2:73:53:5e:2d:73:b2:e8:3d:fe:12:a7:
d1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:42:75:DF:27:18:49:C8:72:80:36:84:EE:BF:A9:82:13:77:4D:A9
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BB99529E4CE611EE94289D6B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.48.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:fd:fd:0e:56:91:34:b9:3e:14:73:10:11:5d:1c:fc:d1:e9:
ba:2e:9f:4d:b4:55:9e:2f:10:fe:22:3f:b7:f1:88:57:98:1f:
30:77:89:b8:e4:38:72:ae:2d:57:63:a9:1b:40:78:f1:59:9c:
f1:e8:09:cc:f0:f1:03:e8:9f:2e:f6:10:5c:75:fc:b7:6a:91:
0f:d4:0f:32:98:33:f1:17:55:52:e9:a2:57:84:4b:4d:83:f1:
52:cf:fd:cc:49:f0:db:34:98:62:21:2b:56:c7:8c:4b:38:64:
a6:4d:1a:59:61:e1:31:cb:95:56:44:f3:6a:bd:14:25:be:59:
35:4a:a4:00:26:5e:c4:18:a5:fb:d6:4d:d6:8a:d3:47:a6:33:
e8:3f:ad:ba:0b:04:86:c1:bb:dc:0e:a3:97:79:31:f5:03:10:
fd:73:73:06:f0:02:ec:4f:55:ac:f1:35:60:e8:c5:8a:cb:a5:
b9:a1:25:63:9a:26:1a:86:13:f0:84:87:d1:c6:f8:6f:5e:60:
4c:c4:bc:f2:6f:02:af:93:de:ff:dc:e0:d6:4b:4e:ec:e6:ee:
4b:b4:1c:47:db:a9:36:b0:fb:55:1c:37:75:71:70:80:07:f7:
d6:1d:6a:49:33:be:56:54:23:47:21:fb:eb:6b:1b:93:fa:b0:
69:3d:67:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 6 12:17:26 2023 by rpki-client on console-fra.rpki-client.org