Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F0F76734531011EEB2155B134AD9E6FC.roa
File: F0F76734531011EEB2155B134AD9E6FC.roa (raw, json)
Hash identifier: wA9j1toJKV3KIEoBZL8RaACXY5655+xlo+IeAoLpWIc=
Subject key identifier: 89:AB:D2:84:E7:4B:9B:DD:56:E9:13:8B:0C:2F:A8:3F:ED:93:E6:A3
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 122B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F0F76734531011EEB2155B134AD9E6FC.roa
Signing time: Thu 14 Sep 2023 15:11:12 +0000
ROA not before: Thu 14 Sep 2023 15:11:09 +0000
ROA not after: Wed 18 Sep 2024 15:11:09 +0000
asID: 20473
IP address blocks: 154.127.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jan 2024 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4651 (0x122b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Sep 14 15:11:09 2023 GMT
Not After : Sep 18 15:11:09 2024 GMT
Subject: CN=65032290-e6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:48:b4:61:3c:57:3a:f2:88:02:3c:5c:89:9e:
be:c9:e9:f7:bd:dd:bc:27:22:49:b0:54:c4:d4:d1:
53:e2:5b:8a:5e:f8:4a:a5:da:9f:66:90:d4:db:f8:
9e:56:79:ae:6f:75:98:04:bd:e9:a5:e7:f4:c4:5c:
2f:59:e1:8f:d4:09:8c:f4:72:0e:a4:2e:96:ce:52:
08:b1:cd:11:85:60:73:31:38:85:d6:c5:2a:28:d3:
9a:19:61:e0:80:0d:66:8a:d3:6c:95:e8:ca:ae:16:
ff:4d:97:f7:68:5b:e5:e6:73:39:ce:26:a0:f4:27:
32:a7:f7:86:0e:1b:7d:57:59:2e:be:3c:77:c0:12:
0c:41:1a:aa:4a:73:ef:93:42:62:a2:73:7b:a3:f6:
92:d0:af:6a:97:61:c8:c2:8c:1f:f8:31:ea:78:8a:
e2:0f:d5:9a:ba:3c:9a:51:43:76:f9:f7:dd:ee:da:
24:d3:ad:0e:9f:d8:9b:66:c1:5c:4b:f1:ec:3c:09:
a2:28:d0:05:d4:27:39:79:51:0e:35:a4:fc:39:ee:
a4:3b:9d:4a:63:56:ad:c9:b8:23:85:74:ae:87:12:
db:18:9a:ca:50:aa:a0:42:9b:50:36:d4:44:b0:eb:
d9:c4:bb:54:27:fa:e7:46:0b:fb:1c:4a:e9:9d:71:
2c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AB:D2:84:E7:4B:9B:DD:56:E9:13:8B:0C:2F:A8:3F:ED:93:E6:A3
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/F0F76734531011EEB2155B134AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.56.0/24
Signature Algorithm: sha256WithRSAEncryption
33:52:6d:9e:02:84:49:13:89:41:78:fa:16:14:a9:0c:41:cd:
10:28:4a:ea:39:3e:31:ed:57:d3:22:87:0c:53:59:73:e2:d2:
7b:da:6f:a5:ca:e4:08:9b:0d:f7:a3:ef:27:c4:7b:55:b3:84:
b1:25:3c:72:17:82:77:29:01:7b:b5:ae:71:24:09:cc:cc:d7:
49:4f:a6:b2:b5:33:3d:ed:a9:9e:02:b5:b7:70:dc:16:07:2f:
28:1d:4c:5d:de:de:c0:f6:91:c6:37:28:f4:02:a3:d8:95:b4:
3f:40:23:ee:38:0b:70:af:f4:92:d6:e5:c5:7e:ae:ff:0c:09:
eb:02:2d:fa:39:39:1c:cd:41:16:7a:c0:1d:f7:c8:37:f9:14:
ae:a1:88:0d:9c:75:a1:f6:3d:a6:0e:78:4a:60:8c:26:50:29:
40:72:24:d5:f0:a1:f8:1f:02:db:fd:7a:13:14:13:37:b7:9d:
b0:07:80:ca:79:03:4e:e3:68:79:a3:27:b9:91:b8:1f:d6:2e:
fa:d0:0e:d3:0e:a7:67:16:3b:c6:07:fc:4c:d1:12:51:1d:f5:
e8:f4:fc:7f:9f:d2:c8:c5:0b:1a:f3:a6:58:cb:f9:c8:e1:2d:
02:0a:e7:4e:a3:65:b0:43:e0:e3:9b:db:4f:76:e3:50:58:6c:
46:6a:62:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 14 16:39:05 2024 by rpki-client on console-ams.rpki-client.org