Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D9F1AEA6053F11EEB021B4884AD9E6FC.roa
File: D9F1AEA6053F11EEB021B4884AD9E6FC.roa (raw, json)
Hash identifier: Z2CfK/4dyvJtccjUrbdPCG0OxHAJIpEBF5irZ6vTe6A=
Subject key identifier: 56:39:27:BC:F0:86:42:2F:CE:D3:E6:9C:FA:03:50:42:0E:80:B9:46
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0EF6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D9F1AEA6053F11EEB021B4884AD9E6FC.roa
Signing time: Wed 07 Jun 2023 14:30:29 +0000
ROA not before: Wed 07 Jun 2023 14:30:25 +0000
ROA not after: Sat 07 Jun 2025 14:30:25 +0000
asID: 209181
IP address blocks: 154.127.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3830 (0xef6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jun 7 14:30:25 2023 GMT
Not After : Jun 7 14:30:25 2025 GMT
Subject: CN=64809485-1ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ed:75:7c:af:39:30:19:08:78:04:a8:f4:eb:
a8:6d:a4:b6:d2:4f:c9:ce:51:e8:e4:9a:4a:1f:bd:
28:68:cc:61:2e:e4:b2:8c:a4:38:15:e6:40:f2:e6:
7a:ef:c2:5a:c4:10:67:6a:b3:f7:9b:ee:e9:db:ed:
fe:4a:69:88:1d:31:a9:44:f7:7b:c7:ca:89:34:d2:
96:95:68:a3:7d:04:21:31:0a:55:21:cd:d8:6f:59:
ac:28:9a:3f:e7:f5:30:22:f3:63:af:10:37:3e:a9:
ae:21:66:96:17:1a:1c:74:01:fa:68:80:73:7a:24:
be:ea:04:f9:fb:d9:e5:c8:5e:4e:b4:4d:4e:80:45:
17:d9:1d:e2:b0:ba:5a:0b:61:23:de:9b:0f:b1:ee:
eb:4f:7d:1e:6b:9d:05:25:ce:1e:cf:ee:db:25:7b:
21:81:eb:0c:0a:29:07:a6:61:e7:ab:4a:86:8f:e6:
0c:10:e7:b9:41:9e:af:b8:76:42:c5:97:be:73:4b:
54:1d:7f:04:63:8c:6d:e2:19:1d:17:8f:97:d0:9d:
89:af:1f:03:0e:9d:7d:e2:5a:24:36:23:6a:30:62:
e2:41:a7:ca:4a:13:39:b5:a8:c9:59:b6:a3:cf:ed:
fc:6a:d7:83:8b:58:7a:22:c8:78:cd:d7:eb:80:54:
05:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:39:27:BC:F0:86:42:2F:CE:D3:E6:9C:FA:03:50:42:0E:80:B9:46
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D9F1AEA6053F11EEB021B4884AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.60.0/24
Signature Algorithm: sha256WithRSAEncryption
94:c5:77:52:31:5e:fe:8d:e7:a5:b6:cc:34:e9:5d:54:13:41:
27:db:b9:68:8a:fb:52:83:c1:2b:bd:93:43:26:76:b3:59:40:
c0:4e:15:dd:b5:69:1d:45:05:99:ca:ce:aa:b9:f3:e7:64:c7:
9a:11:48:ef:f7:e2:9c:4c:ef:2d:ab:61:8e:37:ec:51:8b:66:
19:97:ed:a3:e2:67:94:01:ca:31:a4:b1:36:f6:61:fc:5e:17:
0e:23:a9:ce:a7:f1:5e:c1:81:7e:e6:b5:96:28:c6:b2:a3:87:
17:5a:c7:9a:8b:ce:75:09:98:de:7c:f1:03:63:9c:44:d6:bb:
43:fe:67:c8:2a:68:61:20:81:a3:02:59:c4:fa:d0:04:71:22:
bc:55:58:27:eb:23:47:06:60:b7:ee:ea:e0:1e:ac:ba:96:2f:
ee:d9:7b:b0:40:8e:25:9b:06:21:41:c4:1e:66:13:ee:a4:d3:
b4:c3:7b:f0:f5:e4:23:c8:65:d2:3f:6d:09:13:73:43:97:ba:
e9:5d:cb:ed:92:2f:48:95:1f:67:98:a3:4b:9c:07:94:7b:1c:
fc:5c:ee:db:e3:20:7f:8b:e6:73:34:3c:c7:c8:8e:94:a3:98:
e9:3d:3f:aa:56:99:80:f9:79:3f:da:32:b9:5c:de:8d:15:55:
e3:5a:ce:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org