Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C8D70BE23B3711EE9A9A55684AD9E6FC.roa
File: C8D70BE23B3711EE9A9A55684AD9E6FC.roa (raw, json)
Hash identifier: O97nmtr1V+3sIwrT0J/9sc0sPEdWmjwawY+KU8VuXug=
Subject key identifier: DC:E2:6E:5B:DF:38:B5:22:49:25:88:80:A8:4B:59:19:8A:57:A0:70
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 116C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C8D70BE23B3711EE9A9A55684AD9E6FC.roa
Signing time: Tue 15 Aug 2023 06:48:47 +0000
ROA not before: Tue 15 Aug 2023 06:48:44 +0000
ROA not after: Sat 16 Aug 2025 06:48:44 +0000
asID: 834
IP address blocks: 154.127.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4460 (0x116c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Aug 15 06:48:44 2023 GMT
Not After : Aug 16 06:48:44 2025 GMT
Subject: CN=64db1fcf-6d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:b4:73:60:f6:d7:be:cf:77:ed:c0:27:b2:
dc:25:68:2b:e4:be:66:53:90:1f:92:49:08:60:3f:
e6:77:07:3d:8e:47:dd:b9:55:ae:a1:2a:c7:7b:25:
6f:63:3c:59:c0:eb:6b:ce:a8:e0:9b:60:74:5e:4b:
c3:a8:60:5c:6a:16:c8:e4:c3:67:e1:0a:04:ab:04:
f1:ad:3f:dc:91:4b:67:d5:fd:3d:4b:5f:b8:29:92:
0d:ce:b5:e5:39:92:dd:92:71:0e:7b:d8:ed:04:88:
0b:f1:30:57:36:0d:b7:0d:d0:2a:5d:a0:ee:83:e8:
3d:1b:22:75:5a:68:c5:c0:da:ee:5c:20:a7:93:8d:
6e:d7:cd:4c:7d:64:62:0e:06:65:79:90:06:ca:39:
1c:e4:1b:21:03:0e:00:d3:d6:cd:1d:17:04:bd:8f:
aa:cc:37:bf:a3:0b:fc:0e:4d:4b:de:b4:09:c4:4a:
fb:3a:4c:17:9b:fc:83:f3:f5:df:86:a6:26:4f:32:
a6:df:17:ec:6d:eb:d4:4c:8a:6f:d3:21:d3:51:d7:
58:c5:ec:50:61:f1:16:68:28:5a:a2:25:7c:a9:38:
3a:1a:e0:43:01:55:8d:c1:2c:3c:37:62:48:7b:bf:
a6:71:9c:3e:a5:ab:47:00:31:76:b3:2f:1d:9d:64:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E2:6E:5B:DF:38:B5:22:49:25:88:80:A8:4B:59:19:8A:57:A0:70
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C8D70BE23B3711EE9A9A55684AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.48.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:28:39:44:42:55:80:f3:7a:07:96:28:a2:f0:7d:f2:55:93:
af:85:23:c2:0b:c0:60:80:3f:21:6b:50:c9:cd:96:f8:d4:a5:
7f:15:67:56:30:0c:9a:a3:82:bb:5c:ed:b6:a4:2d:47:a5:c1:
1a:31:51:10:91:02:a4:10:66:be:06:c1:53:9a:5e:5c:bc:e3:
d5:2e:3d:ac:dd:db:b7:3a:0c:b5:3c:ef:39:1f:da:61:c2:b0:
00:f0:20:69:5a:f9:d9:a0:89:cc:3c:54:64:44:67:9c:4b:94:
63:2a:93:8f:d4:50:14:e0:b0:af:96:40:3f:66:58:44:7e:1f:
09:8b:03:e7:1e:e6:8e:08:a9:1a:75:40:67:50:02:38:f5:74:
90:09:bf:a3:e1:77:b0:4d:51:16:f4:0e:78:15:bd:4d:27:ca:
83:c7:26:fd:47:d9:7f:27:0d:c8:a7:39:2e:4f:73:75:88:d8:
60:0b:6d:22:66:ac:2d:76:a6:59:78:d9:7a:0f:5d:78:c8:c9:
0d:8c:e9:07:69:76:81:f8:fe:de:e8:e6:fe:ca:d8:bb:24:af:
50:22:52:88:0e:ef:8e:02:d8:b9:bc:18:44:53:9e:a7:83:b9:
b4:6b:ca:40:60:dd:9d:34:33:2e:70:2f:d2:d1:f5:c2:4c:fb:
63:1d:0f:c3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICEWwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzA4MTUwNjQ4NDRaFw0yNTA4MTYwNjQ4NDRaMBgxFjAU
BgNVBAMTDTY0ZGIxZmNmLTZkMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCb1rRzYPbXvs937cAnstwlaCvkvmZTkB+SSQhgP+Z3Bz2OR925Va6hKsd7
JW9jPFnA62vOqOCbYHReS8OoYFxqFsjkw2fhCgSrBPGtP9yRS2fV/T1LX7gpkg3O
teU5kt2ScQ572O0EiAvxMFc2DbcN0CpdoO6D6D0bInVaaMXA2u5cIKeTjW7XzUx9
ZGIOBmV5kAbKORzkGyEDDgDT1s0dFwS9j6rMN7+jC/wOTUvetAnESvs6TBeb/IPz
9d+GpiZPMqbfF+xt69RMim/TIdNR11jF7FBh8RZoKFqiJXypODoa4EMBVY3BLDw3
Ykh7v6ZxnD6lq0cAMXazLx2dZKNTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU3OJu
W984tSJJJYiAqEtZGYpXoHAwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0M4RDcwQkUyM0IzNzExRUU5QTlBNTU2ODRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACafzAwDQYJKoZIhvcNAQEL
BQADggEBAIwoOURCVYDzegeWKKLwffJVk6+FI8ILwGCAPyFrUMnNlvjUpX8VZ1Yw
DJqjgrtc7bakLUelwRoxURCRAqQQZr4GwVOaXly849UuPazd27c6DLU87zkf2mHC
sADwIGla+dmgicw8VGREZ5xLlGMqk4/UUBTgsK+WQD9mWER+HwmLA+ce5o4IqRp1
QGdQAjj1dJAJv6Phd7BNURb0DngVvU0nyoPHJv1H2X8nDcinOS5Pc3WI2GALbSJm
rC12pll42XoPXXjIyQ2M6QdpdoH4/t7o5v7K2Lskr1AiUogO744C2Lm8GERTnqeD
ubRrykBg3Z00My5wL9LR9cJM+2MdD8M=
-----END CERTIFICATE-----
Generated at Thu Dec 7 16:04:51 2023 by rpki-client on console-ams.rpki-client.org