Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D9E3958CB68E11EDB6CBADADF1222468.roa
File: D9E3958CB68E11EDB6CBADADF1222468.roa (raw, json)
Hash identifier: +HmithasFQpTyJbIBPJBxHkorgARBpTx4mcG3Qx4EYg=
Subject key identifier: 5C:7D:71:BF:B7:6D:E1:9A:F9:91:97:E0:AF:67:C9:70:88:36:4C:DE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0C2A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D9E3958CB68E11EDB6CBADADF1222468.roa
Signing time: Mon 27 Feb 2023 11:06:58 +0000
ROA not before: Mon 27 Feb 2023 11:06:53 +0000
ROA not after: Fri 28 Feb 2025 11:06:53 +0000
asID: 834
IP address blocks: 154.127.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3114 (0xc2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 27 11:06:53 2023 GMT
Not After : Feb 28 11:06:53 2025 GMT
Subject: CN=63fc8ed2-97cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:01:4d:75:c2:17:cd:b2:93:24:03:bf:e7:24:
d0:65:9c:62:30:08:f5:19:80:1f:37:51:4c:9c:3b:
fc:bc:4f:7a:60:2a:0c:cf:37:61:5a:b0:bc:38:2a:
ca:93:13:29:db:97:0a:e7:b3:07:57:9b:8e:9f:d5:
5b:79:35:ba:1b:c1:de:36:b1:90:2f:48:59:3a:78:
bd:ca:73:f9:68:30:72:7e:44:60:18:a2:b5:94:28:
6d:74:fe:84:35:b2:bd:b2:81:81:11:9d:95:e6:2d:
d8:7c:b6:ee:31:77:ef:0c:9a:5b:27:62:80:63:c3:
c5:1d:fe:d2:2e:0f:48:7a:72:0c:3d:a7:db:1f:ca:
eb:b3:02:c6:4b:a5:c3:fa:35:09:7b:09:0b:af:b3:
f3:34:4c:11:b8:cb:f8:39:b0:fa:9f:32:b0:74:ce:
33:6a:c6:60:f2:eb:23:8e:10:ca:45:90:dc:e3:4d:
3d:0d:b2:cd:3f:10:09:76:95:77:18:f1:95:c3:7f:
2a:59:d0:84:25:71:c6:89:ac:9b:58:f2:61:52:62:
a4:b1:8e:cb:01:f9:7f:ec:0b:27:63:e4:68:bd:d0:
cf:9b:b1:45:85:e6:ae:41:01:ad:52:86:51:6a:da:
80:0d:3f:9c:ae:c8:0b:86:9f:68:0f:17:f4:60:f6:
b5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7D:71:BF:B7:6D:E1:9A:F9:91:97:E0:AF:67:C9:70:88:36:4C:DE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D9E3958CB68E11EDB6CBADADF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.62.0/24
Signature Algorithm: sha256WithRSAEncryption
81:57:f8:78:e4:02:cf:e1:53:d9:97:47:4b:99:70:12:05:ba:
da:5b:dc:86:de:2d:22:fe:05:aa:44:cc:3f:b7:33:75:8e:a3:
1b:62:12:2e:6d:78:57:1c:f1:8d:1d:1d:d1:5c:f8:79:e7:9b:
20:76:71:f4:c3:9d:4a:ac:e9:83:9a:98:b4:66:0e:ee:b4:5f:
31:eb:ee:e6:45:8b:56:b0:20:4d:b2:e6:ee:ad:58:eb:40:90:
a8:af:65:50:10:7d:66:3c:61:f3:87:31:64:b0:9c:39:58:bd:
79:b9:d9:6f:bb:d6:b5:d8:64:bd:1f:ea:f0:c0:f7:7d:22:65:
94:1c:14:70:fb:6a:20:a0:ab:ed:d1:26:c5:35:47:c5:d1:b0:
9e:80:d2:c4:0f:95:f7:b0:ec:bf:d8:31:e2:c3:59:24:50:7d:
61:29:dd:b3:50:7f:10:59:ec:4b:7a:be:c0:bb:1d:c4:d0:97:
4c:a2:a7:b1:c9:a2:7f:b8:2c:73:ca:73:a7:85:8c:ef:49:e4:
b2:32:42:4a:d5:67:6e:68:50:b1:e9:0a:5c:32:ad:11:7f:9c:
d4:0a:f3:6b:c0:ff:6b:79:be:e0:fb:e3:03:16:41:f2:ea:f3:
6c:d0:60:fe:cc:94:a1:11:e9:39:1b:67:0a:bb:d4:8e:8d:51:
5c:f7:39:2c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDCowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yMzAyMjcxMTA2NTNaFw0yNTAyMjgxMTA2NTNaMBgxFjAU
BgNVBAMMDTYzZmM4ZWQyLTk3Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCiAU11whfNspMkA7/nJNBlnGIwCPUZgB83UUycO/y8T3pgKgzPN2FasLw4
KsqTEynblwrnswdXm46f1Vt5Nbobwd42sZAvSFk6eL3Kc/loMHJ+RGAYorWUKG10
/oQ1sr2ygYERnZXmLdh8tu4xd+8MmlsnYoBjw8Ud/tIuD0h6cgw9p9sfyuuzAsZL
pcP6NQl7CQuvs/M0TBG4y/g5sPqfMrB0zjNqxmDy6yOOEMpFkNzjTT0Nss0/EAl2
lXcY8ZXDfypZ0IQlccaJrJtY8mFSYqSxjssB+X/sCydj5Gi90M+bsUWF5q5BAa1S
hlFq2oANP5yuyAuGn2gPF/Rg9rXnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUXH1x
v7dt4Zr5kZfgr2fJcIg2TN4wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0Q5RTM5NThDQjY4RTExRURCNkNCQURBREYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACafz4wDQYJKoZIhvcNAQEL
BQADggEBAIFX+HjkAs/hU9mXR0uZcBIFutpb3IbeLSL+BapEzD+3M3WOoxtiEi5t
eFcc8Y0dHdFc+HnnmyB2cfTDnUqs6YOamLRmDu60XzHr7uZFi1awIE2y5u6tWOtA
kKivZVAQfWY8YfOHMWSwnDlYvXm52W+71rXYZL0f6vDA930iZZQcFHD7aiCgq+3R
JsU1R8XRsJ6A0sQPlfew7L/YMeLDWSRQfWEp3bNQfxBZ7Et6vsC7HcTQl0yip7HJ
on+4LHPKc6eFjO9J5LIyQkrVZ25oULHpClwyrRF/nNQK82vA/2t5vuD74wMWQfLq
82zQYP7MlKER6TkbZwq71I6NUVz3OSw=
-----END CERTIFICATE-----
Generated at Sat Dec 23 09:09:15 2023 by rpki-client on console-ams.rpki-client.org