Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D9FF4A88496011EE87F778394AD9E6FC.roa
File: D9FF4A88496011EE87F778394AD9E6FC.roa (raw, json)
Hash identifier: ONZBp5ZsnE0eSBy8bmbhj6HWsLfBldSXM6/VtjeHdQ8=
Subject key identifier: 9B:2E:41:34:46:51:41:97:BA:0A:7A:8C:AD:C4:86:5D:8A:0A:63:C9
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 11E3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D9FF4A88496011EE87F778394AD9E6FC.roa
Signing time: Sat 02 Sep 2023 07:18:02 +0000
ROA not before: Sat 02 Sep 2023 07:17:59 +0000
ROA not after: Tue 03 Sep 2024 07:17:59 +0000
asID: 834
IP address blocks: 154.127.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4579 (0x11e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 2 07:17:59 2023 GMT
Not After : Sep 3 07:17:59 2024 GMT
Subject: CN=64f2e1aa-8e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:13:78:e4:af:a3:5a:37:15:6b:4e:94:82:b0:
fd:e6:dd:c0:be:ac:7f:a9:59:fe:d4:6e:53:3b:9e:
fd:a6:00:ea:8b:56:7f:11:ed:6f:92:4a:e0:38:18:
30:54:1f:fa:c5:57:6d:a5:d3:47:28:1b:3a:d6:d6:
4a:ac:86:59:d1:18:63:0b:74:b7:7e:aa:c2:20:94:
1b:e8:31:a7:c9:d0:5d:e8:c9:d6:06:c2:59:ab:8a:
0c:13:54:20:15:41:f3:3c:52:4a:65:d2:77:3b:ad:
ee:d9:fe:90:64:0b:8d:ca:07:94:ee:ad:49:1a:62:
cf:bb:93:09:b5:9e:1d:2c:4d:3a:e0:8a:4d:8b:d8:
88:da:57:c7:c7:0a:d9:9f:7e:06:db:aa:10:30:30:
e5:6a:5e:2f:da:ae:1c:f2:18:0b:74:22:41:05:e2:
a8:c5:24:64:2e:e4:de:98:64:20:a4:c5:4b:f2:1e:
ca:bd:14:f8:ac:f8:2e:98:29:2a:fc:55:32:90:d9:
bc:e9:5d:22:b8:5b:65:a1:fa:ef:1e:4c:18:f0:e4:
dc:5d:ac:e3:5a:82:85:81:75:42:7c:4e:11:42:40:
ef:dd:3a:a1:12:6a:1f:f7:c7:c3:b0:7f:a1:b6:eb:
c9:d8:70:27:da:8d:86:46:53:2e:cc:6d:d2:b7:ac:
2b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2E:41:34:46:51:41:97:BA:0A:7A:8C:AD:C4:86:5D:8A:0A:63:C9
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D9FF4A88496011EE87F778394AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.61.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:b7:e6:a5:2b:62:76:e2:62:83:9f:89:df:60:36:0a:77:a3:
62:04:bb:32:81:0d:e7:b1:d9:4c:05:1a:6c:03:44:e8:18:15:
3d:2a:64:e5:c9:dc:b1:c8:aa:da:31:98:8d:da:8b:7a:be:96:
68:44:31:ea:32:0d:df:50:6c:cf:03:c7:ba:79:b8:57:06:9c:
5e:65:3f:7e:6a:df:4a:0b:14:56:37:23:5c:09:69:9e:00:b9:
06:bc:e4:e9:ce:bb:75:64:f5:97:38:b9:2b:06:ee:87:6f:ec:
ba:fa:24:d6:c9:53:77:1b:9a:aa:d9:c2:7c:2c:2e:99:02:b6:
7b:58:6f:e8:00:91:98:76:1d:8e:73:16:01:07:7a:12:17:32:
82:ff:d8:5f:9f:36:d8:1c:dd:86:51:8a:fe:7c:67:de:08:25:
e3:0d:58:75:61:0a:43:a2:53:9b:51:22:7a:86:c1:15:99:8f:
b1:f0:60:62:5e:0c:92:57:fd:d0:5c:58:ff:22:ae:90:2c:3c:
ae:d4:71:df:c2:7e:65:2e:e8:de:13:95:d6:13:b9:23:0c:b0:
11:23:8d:0f:c2:64:c5:aa:74:63:f8:82:60:96:14:cc:a4:4a:
ff:af:c7:db:96:3b:09:58:fe:74:6d:45:da:37:ea:44:62:3d:
6c:6a:f5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 07:06:54 2023 by rpki-client on console-fra.rpki-client.org