Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D7A168806BF111EEBDACD95D4AD9E6FC.roa
File: D7A168806BF111EEBDACD95D4AD9E6FC.roa (raw, json)
Hash identifier: QBfWnXvL/9Qa5SgrC1avMJ9PCeYbhpAM2tTuycSnFX0=
Subject key identifier: 8E:06:1C:96:5F:68:13:BE:78:FC:AE:84:02:8C:B4:4D:26:9D:70:72
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 12D6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D7A168806BF111EEBDACD95D4AD9E6FC.roa
Signing time: Mon 16 Oct 2023 07:01:34 +0000
ROA not before: Mon 16 Oct 2023 07:01:31 +0000
ROA not after: Wed 16 Oct 2024 07:01:31 +0000
asID: 62240
IP address blocks: 154.127.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 06:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4822 (0x12d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 16 07:01:31 2023 GMT
Not After : Oct 16 07:01:31 2024 GMT
Subject: CN=652cdfce-a4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:db:01:6d:85:54:35:b8:3d:5c:53:d3:d3:
53:78:d5:d8:43:73:60:7b:3d:b1:a7:b2:6b:04:56:
91:0f:0c:3e:51:6d:61:cc:cc:59:31:79:67:2d:78:
d3:f7:27:1e:de:6e:ab:83:48:6f:3b:26:c5:24:f1:
6d:ef:c3:13:16:90:9b:91:92:57:20:17:8b:d3:16:
b0:81:e6:db:e7:fc:6d:77:a2:23:d7:11:3a:4c:44:
86:41:51:78:99:cd:a5:53:1a:9d:f1:0e:40:d2:0f:
50:61:81:e9:12:a7:05:07:44:85:e0:a9:a2:93:6e:
76:c5:95:c1:74:c3:98:54:30:7f:27:d7:10:3b:32:
9f:d6:d7:e7:53:0f:d6:38:24:fe:2c:35:e6:88:70:
99:8f:b6:ab:cb:89:02:f7:82:94:07:f8:74:02:e7:
8c:d0:69:e2:5f:83:4b:7f:db:a0:7a:e2:a7:28:2f:
62:7a:fc:01:c1:1c:bc:06:1c:09:21:a1:ea:95:37:
36:de:7d:e8:99:b5:00:91:f1:b7:73:48:5f:54:d6:
f9:c9:d9:59:aa:32:ef:b1:f5:9a:97:b7:85:26:75:
e4:a0:82:e5:4c:d6:aa:b9:4f:a8:c6:f9:d6:80:39:
b1:1f:89:e4:ff:df:14:f4:0d:a1:ef:47:e2:bc:80:
8e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:06:1C:96:5F:68:13:BE:78:FC:AE:84:02:8C:B4:4D:26:9D:70:72
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D7A168806BF111EEBDACD95D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.63.0/24
Signature Algorithm: sha256WithRSAEncryption
25:fb:cc:96:c8:db:ab:e1:84:aa:df:18:fe:9e:05:e1:49:6c:
88:1b:32:5f:52:f6:71:9c:d5:17:b2:73:16:30:ac:f0:35:aa:
8d:ea:e3:05:3d:22:ba:71:dc:d7:af:e2:c7:f5:3f:d1:76:a9:
f8:d8:c1:7b:c1:49:9f:b6:6c:f4:55:5d:53:3f:34:0e:33:32:
55:1d:b0:48:6d:c2:6d:1e:2c:33:44:89:49:ce:f7:bd:66:68:
cb:46:bc:f0:fa:13:d1:96:a2:f1:83:f2:ef:a6:9b:ae:4c:dc:
07:a4:09:f1:57:b5:87:cc:dc:30:6c:48:89:9d:e0:b5:53:9b:
5d:d8:48:e5:0f:da:46:d4:5d:68:62:d1:2c:ae:9d:fc:03:6b:
ad:eb:a6:ae:bb:39:78:0d:80:a7:90:16:8c:be:0c:ed:c0:2d:
e0:39:52:70:95:14:df:40:c2:48:23:85:09:9e:13:51:e3:9f:
61:44:ce:1c:c9:ea:e6:14:86:6b:f9:71:bf:fa:b5:48:5e:dd:
75:56:99:11:dc:43:3a:dd:a8:21:a5:11:32:28:76:b0:9e:d0:
19:06:b7:5c:00:08:11:1d:4f:c3:e7:39:5f:39:b1:42:38:73:
e4:7a:99:5d:7b:0c:8b:5a:c1:80:91:70:07:d7:4f:41:24:69:
54:c5:61:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 11:27:25 2024 by rpki-client on console-fra.rpki-client.org