Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DC59E7D0B8FA11ED9106557EF1222468.roa
File: DC59E7D0B8FA11ED9106557EF1222468.roa (raw, json)
Hash identifier: uc08ZbhyFJ9FPXyz5TOq8QwJ7cNkklqn6fmhYIXoaU8=
Subject key identifier: 55:76:27:90:2E:8F:B9:90:90:29:10:4D:68:6A:86:91:CE:01:7F:2D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0CD1
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DC59E7D0B8FA11ED9106557EF1222468.roa
Signing time: Thu 02 Mar 2023 13:05:10 +0000
ROA not before: Thu 02 Mar 2023 13:05:06 +0000
ROA not after: Sat 01 Mar 2025 13:05:06 +0000
asID: 61317
IP address blocks: 154.127.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3281 (0xcd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Mar 2 13:05:06 2023 GMT
Not After : Mar 1 13:05:06 2025 GMT
Subject: CN=64009f06-cfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:0a:31:7c:d2:ba:8b:67:ef:35:93:cb:0c:
dc:15:cf:14:01:3b:ba:ec:3d:91:40:5c:f8:b6:d6:
f0:3e:75:44:0d:47:f2:7a:5d:65:7d:cd:3e:86:ba:
25:9c:e3:7b:42:85:48:0d:5f:4c:14:0a:a4:ae:e9:
ba:3a:2f:fa:8b:36:c8:42:22:74:0d:50:e7:ca:bf:
58:bd:57:51:5a:48:3c:29:91:48:f0:0b:d9:01:36:
6f:c1:7d:bb:cc:39:de:09:49:46:09:e3:63:0e:fe:
2e:d9:c4:f3:45:fc:c1:1c:29:60:1d:9b:65:22:4f:
f5:25:18:99:16:a5:12:ff:33:80:39:d3:cc:88:69:
8d:47:51:d2:5d:f4:54:72:c1:b9:f8:b4:08:60:e0:
6b:37:ad:8c:9a:b6:e4:1e:43:eb:bf:aa:5a:d4:99:
cb:ad:82:77:d8:7c:2b:42:30:d7:cc:df:b5:f1:66:
b0:23:80:9f:77:58:8c:cb:0e:bc:26:c3:5b:4c:2b:
2c:ab:54:25:c2:76:79:0d:db:b7:47:a7:89:09:e5:
a0:02:63:64:75:55:71:be:f9:c6:de:4f:4a:ab:13:
81:40:24:d7:73:44:95:5a:52:f0:b9:cd:05:d5:07:
5c:29:21:a9:a4:85:5f:30:40:ea:ec:26:0a:6a:e5:
47:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:76:27:90:2E:8F:B9:90:90:29:10:4D:68:6A:86:91:CE:01:7F:2D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DC59E7D0B8FA11ED9106557EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.48.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:a1:72:8a:9f:1f:ee:6c:8e:d8:10:62:ae:73:29:14:19:de:
a0:05:48:14:fc:ea:f5:eb:7c:e6:5e:72:11:78:3b:6a:e6:a8:
01:7c:63:c5:68:fe:ac:2c:8b:30:52:00:71:f7:84:2b:8e:61:
cd:25:48:a0:6a:ed:7a:99:7a:a1:d8:f6:bc:6a:91:61:fd:6b:
3c:52:0e:87:6a:16:d6:ae:37:eb:3c:a6:56:31:e3:f6:c9:59:
09:78:db:61:eb:19:74:3c:cd:a9:91:fe:06:55:cc:b9:2f:67:
97:73:77:6f:ef:54:eb:16:55:5c:7c:71:bd:4e:1c:a6:15:3e:
73:22:85:2d:d4:6b:ac:8f:8a:eb:20:8a:ad:31:37:a0:ea:57:
f7:60:ea:d2:3e:39:07:66:47:07:80:ff:2b:1c:30:20:65:11:
53:66:8d:5b:64:d9:70:c1:c3:5c:9b:cc:92:38:16:98:ac:94:
90:ba:0d:cf:cd:b8:fa:6b:47:b1:94:ef:60:5b:ac:2d:09:90:
2e:da:09:04:8c:57:72:39:8d:a7:4e:75:a7:77:56:32:bb:2c:
10:04:6d:b7:6f:4e:f9:c8:72:c2:2c:68:db:1e:e3:2d:6e:38:
c6:7c:1d:63:da:e5:51:43:13:bc:e7:d4:8d:35:1a:dc:5d:95:
59:50:2b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org