Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C92E041C68F311EE9BB719514AD9E6FC.roa
File: C92E041C68F311EE9BB719514AD9E6FC.roa (raw, json)
Hash identifier: MK3Unrun1L37a5AgxwpVRzl5HB29diBq3z1VAd3Tkms=
Subject key identifier: 9C:68:25:83:AD:EB:8A:39:F3:D1:9B:BD:94:1E:54:29:B0:AD:F3:56
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 12CD
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C92E041C68F311EE9BB719514AD9E6FC.roa
Signing time: Thu 12 Oct 2023 11:37:56 +0000
ROA not before: Thu 12 Oct 2023 11:37:52 +0000
ROA not after: Sun 12 Oct 2025 11:37:52 +0000
asID: 834
IP address blocks: 154.127.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4813 (0x12cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 12 11:37:52 2023 GMT
Not After : Oct 12 11:37:52 2025 GMT
Subject: CN=6527da94-42d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:13:63:ae:86:ff:f1:ee:1a:dd:7e:6e:52:
48:20:c9:17:8f:37:28:7c:34:eb:7a:5c:11:04:16:
b0:1f:4f:7d:8b:27:61:3e:12:f8:08:44:45:bb:c0:
27:37:19:fc:fe:5a:ac:6d:dd:fe:53:b0:57:a0:0b:
ed:b4:f5:c9:9b:af:a9:04:7e:35:9a:c2:80:e8:5f:
81:1f:84:04:1c:89:bc:d4:b0:11:d5:3b:ae:0e:42:
36:5e:12:28:1f:09:e9:9c:40:6c:39:e4:d1:ea:cb:
aa:87:a9:5a:15:22:88:33:b9:ee:c7:3d:7b:1e:41:
f9:96:6f:db:58:63:32:b1:85:06:d0:36:76:16:98:
c1:b7:99:cc:7a:ed:55:73:85:5d:e0:70:ae:49:ab:
59:6b:e0:c9:59:e4:9e:43:15:11:a9:bb:ad:0e:0b:
b2:46:e2:46:68:f4:fe:ce:4e:68:20:a9:c8:12:cf:
9f:b1:49:d7:21:00:09:13:ca:3d:7e:5f:01:3c:bf:
1a:4d:31:26:2d:29:5f:dc:ad:94:32:74:a8:c5:c9:
98:1c:e7:1d:3d:8b:d5:b3:ac:47:24:d9:2f:66:1d:
de:40:11:70:bc:9e:93:41:9d:ad:82:d4:bd:6c:70:
2e:12:5b:83:f3:dd:7c:10:98:b7:9f:70:e7:d4:76:
18:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:68:25:83:AD:EB:8A:39:F3:D1:9B:BD:94:1E:54:29:B0:AD:F3:56
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/C92E041C68F311EE9BB719514AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.63.0/24
Signature Algorithm: sha256WithRSAEncryption
08:5e:5f:3f:4d:db:c5:b9:fc:e6:fa:b6:7f:0c:d0:3b:a8:54:
c3:b1:0b:af:73:69:8c:d6:ea:7e:b1:71:da:88:58:bc:a3:77:
9f:08:11:cc:d3:5d:ce:33:ad:e4:48:a2:c9:55:f6:1b:f2:59:
57:96:02:8c:60:1b:56:11:50:c3:af:86:68:c2:0b:d8:3f:e6:
9e:bb:a7:81:2d:ac:a0:b7:02:dc:21:b5:bd:06:c0:e5:c7:45:
69:f7:86:b5:63:62:68:66:5e:f7:92:30:58:90:44:c0:65:27:
98:cb:a1:4d:7b:5d:9d:4e:35:dd:90:ab:62:ad:d6:e7:47:73:
61:73:8f:a2:22:84:e6:da:e0:4a:19:80:65:b9:84:45:ea:ca:
b4:0e:04:fa:64:5f:2d:57:04:bb:c1:e4:d3:d1:e6:7a:8e:9a:
ad:e1:ef:aa:be:18:61:63:cc:79:71:c0:4a:7a:14:9b:7f:2b:
68:69:d1:60:fd:ef:d5:62:94:50:ba:15:1d:4a:b8:78:04:f7:
c7:17:67:f5:88:0d:31:d4:eb:f0:d1:7b:40:2b:57:3b:79:61:
58:29:3e:d7:65:e9:51:8c:0e:91:36:97:72:87:b0:a1:1e:66:
16:a8:31:c4:1e:07:e6:60:bd:00:28:5e:33:ec:3d:56:ae:bb:
18:25:7d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 07:27:52 2023 by rpki-client on console-fra.rpki-client.org