Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C2ADAF560E1711EFAD1DF936017001B1.roa
File: C2ADAF560E1711EFAD1DF936017001B1.roa (raw, json)
Hash identifier: jEz/exVDsvMoHj3uFxBtHFrLvE4yX80lfnMSu5FdFSM=
Subject key identifier: EF:0A:0F:EB:17:AF:B7:6A:F4:99:7C:77:61:84:0B:C5:40:52:13:50
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1637
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C2ADAF560E1711EFAD1DF936017001B1.roa
Signing time: Thu 09 May 2024 15:21:09 +0000
ROA not before: Thu 09 May 2024 15:21:05 +0000
ROA not after: Sat 09 May 2026 15:21:05 +0000
asID: 834
IP address blocks: 154.127.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 07:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5687 (0x1637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 9 15:21:05 2024 GMT
Not After : May 9 15:21:05 2026 GMT
Subject: CN=663ce9e4-fe45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f6:71:98:f8:f9:0a:c1:93:27:fa:82:a3:6e:
c1:6b:6b:54:29:80:2e:82:23:c6:15:55:52:a1:06:
cd:c1:48:05:09:96:ab:2e:f2:e9:e5:aa:41:da:dc:
8f:4c:03:d8:2a:7c:a4:9e:fb:f6:b2:89:6d:ae:a9:
9e:9c:cb:f4:a0:96:eb:13:c7:b7:d4:cd:bd:d4:3e:
ab:c4:ff:f1:82:cd:dd:a8:bd:2c:26:33:da:30:fb:
db:dd:7d:8e:2c:b5:fc:25:b6:5e:27:aa:3c:32:81:
d3:94:58:0d:5f:0f:9a:08:68:f5:35:33:e7:a9:71:
09:84:9d:81:34:a1:53:7e:42:ea:d9:0e:3e:2a:78:
9c:56:23:21:92:c4:3b:14:d0:cf:2c:49:a2:c5:2b:
08:72:3c:03:2b:b5:da:f5:46:ae:04:12:6a:fe:9d:
c2:14:de:d7:4b:46:eb:79:6c:f8:21:3a:f9:a8:ff:
bb:a4:21:61:ee:5c:0a:b5:c4:9a:2a:7c:0d:a1:50:
69:17:e3:8b:7d:ae:f3:fd:b8:1f:e4:9f:33:3b:ec:
b5:3e:43:06:55:0a:f8:c0:33:97:0e:2a:ca:e9:4f:
71:01:39:da:0e:c4:3d:0c:ba:a8:dc:6f:f3:49:2d:
90:41:50:e9:b1:cd:5b:ed:7a:03:eb:fd:75:16:36:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0A:0F:EB:17:AF:B7:6A:F4:99:7C:77:61:84:0B:C5:40:52:13:50
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C2ADAF560E1711EFAD1DF936017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.56.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:bf:b4:bd:b0:e5:39:6a:a6:3d:27:87:1a:91:0a:56:38:71:
a7:53:fb:5b:8d:47:5a:78:93:7e:ba:e5:e6:68:e7:dc:0c:bb:
2d:4d:0f:a3:e9:19:be:63:b7:1d:93:ac:3f:86:ea:6c:6c:0d:
88:9f:77:3c:29:bf:cc:89:19:6e:82:4f:64:98:fc:bc:b5:c8:
d3:7b:8e:09:b2:b6:06:ea:dc:e3:56:e9:65:8c:bb:28:21:45:
1a:bc:4c:e4:2a:2d:21:fe:29:76:fc:e5:d3:fe:89:55:18:0d:
5b:02:5d:b0:64:89:ff:63:2b:be:42:b3:bc:f4:4a:bd:21:9b:
df:45:f2:57:67:a3:d5:0e:cf:02:be:0c:7c:ef:86:a6:05:a3:
0e:a9:eb:f5:f1:d2:7b:79:2e:94:da:2c:c2:41:60:3e:cd:0f:
90:20:57:80:e3:56:89:ac:d9:42:25:e9:dd:d7:d4:84:49:14:
44:9e:db:03:f4:56:3f:57:9e:48:69:54:2c:f4:08:e4:2f:3e:
f7:39:8f:2f:2c:c4:03:27:ad:ed:94:ea:91:dc:be:ab:59:cd:
4e:e8:57:76:9b:9d:c8:e5:46:e1:10:bc:32:a5:f4:68:6a:34:
21:8b:f2:a8:b6:f2:b4:7a:54:3a:32:5b:c1:a6:61:50:9a:30:
45:27:ec:2a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFjcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNDA1MDkxNTIxMDVaFw0yNjA1MDkxNTIxMDVaMBgxFjAU
BgNVBAMTDTY2M2NlOWU0LWZlNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDT9nGY+PkKwZMn+oKjbsFra1QpgC6CI8YVVVKhBs3BSAUJlqsu8unlqkHa
3I9MA9gqfKSe+/ayiW2uqZ6cy/SglusTx7fUzb3UPqvE//GCzd2ovSwmM9ow+9vd
fY4stfwltl4nqjwygdOUWA1fD5oIaPU1M+epcQmEnYE0oVN+QurZDj4qeJxWIyGS
xDsU0M8sSaLFKwhyPAMrtdr1Rq4EEmr+ncIU3tdLRut5bPghOvmo/7ukIWHuXAq1
xJoqfA2hUGkX44t9rvP9uB/knzM77LU+QwZVCvjAM5cOKsrpT3EBOdoOxD0Muqjc
b/NJLZBBUOmxzVvtegPr/XUWNtDtAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU7woP
6xevt2r0mXx3YYQLxUBSE1AwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0MyQURBRjU2MEUxNzExRUZBRDFERjkzNjAxNzAwMUIxLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACafzgwDQYJKoZIhvcNAQEL
BQADggEBAC6/tL2w5Tlqpj0nhxqRClY4cadT+1uNR1p4k3665eZo59wMuy1ND6Pp
Gb5jtx2TrD+G6mxsDYifdzwpv8yJGW6CT2SY/Ly1yNN7jgmytgbq3ONW6WWMuygh
RRq8TOQqLSH+KXb85dP+iVUYDVsCXbBkif9jK75Cs7z0Sr0hm99F8ldno9UOzwK+
DHzvhqYFow6p6/Xx0nt5LpTaLMJBYD7ND5AgV4DjVoms2UIl6d3X1IRJFESe2wP0
Vj9XnkhpVCz0COQvPvc5jy8sxAMnre2U6pHcvqtZzU7oV3abncjlRuEQvDKl9Ghq
NCGL8qi28rR6VDoyW8GmYVCaMEUn7Co=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:40 2024 by rpki-client on console-ams.rpki-client.org