Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/2CF800A03A7E11EEA9492D314AD9E6FC.roa
File: 2CF800A03A7E11EEA9492D314AD9E6FC.roa (raw, json)
Hash identifier: ITEPEftlkTyLLXWmiUZ7VOL9Cx5UlKlf1EjrYvaOKhs=
Subject key identifier: 5E:E7:EB:C9:18:DC:59:DC:B7:2E:91:8F:3F:B7:88:DA:08:B9:DF:25
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 047A
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/2CF800A03A7E11EEA9492D314AD9E6FC.roa
Signing time: Mon 14 Aug 2023 08:40:09 +0000
ROA not before: Mon 14 Aug 2023 08:40:06 +0000
ROA not after: Wed 14 Aug 2024 08:40:06 +0000
asID: 60539
IP address blocks: 156.0.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Dec 2023 07:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1146 (0x47a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Aug 14 08:40:06 2023 GMT
Not After : Aug 14 08:40:06 2024 GMT
Subject: CN=64d9e869-3bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:26:21:3c:72:2d:b7:68:5c:f0:dc:9d:21:0d:
a8:61:18:f3:d6:6f:18:a8:84:48:33:71:ef:a9:28:
d2:5c:ed:66:b1:c3:92:13:0d:9c:df:b7:92:d3:72:
4e:61:51:f7:d9:fa:87:3e:5f:45:01:a1:36:ec:d7:
f0:02:20:31:6d:bf:50:7b:83:63:3b:c9:38:e6:4c:
ea:42:bb:bd:e4:32:55:19:66:94:17:df:2c:8b:17:
19:bd:82:1f:af:d7:c3:6b:ef:05:53:d6:e3:43:a0:
b1:9a:24:fb:f6:8d:6e:02:0a:cf:09:6a:9a:61:31:
5c:8f:71:31:64:07:5e:e5:b9:47:7b:85:c7:b8:fd:
68:70:d3:f2:f2:b1:9e:6c:38:8f:2a:73:79:19:05:
2d:b6:55:12:64:e2:a4:01:11:11:d2:44:25:a1:86:
fc:85:61:a3:a8:ee:f7:71:e6:b7:4f:6f:1f:17:59:
44:34:71:35:96:57:97:8e:5c:a4:9e:6a:10:b6:00:
9c:65:79:43:90:dc:b9:eb:4e:92:f5:d4:a5:91:fe:
85:4d:f5:49:24:4f:f1:06:fb:ba:2a:17:48:8e:3f:
06:c7:19:e7:ab:31:1c:7c:da:1e:2b:1a:a3:49:3a:
12:24:02:e2:68:74:12:f5:bf:f3:76:35:ff:01:98:
64:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E7:EB:C9:18:DC:59:DC:B7:2E:91:8F:3F:B7:88:DA:08:B9:DF:25
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/2CF800A03A7E11EEA9492D314AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.102.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ad:fa:01:33:54:d7:bf:e6:6e:8e:c9:60:c8:b9:f3:d5:ad:
6d:13:b1:49:0e:ff:96:5b:88:76:d9:ca:a4:62:2a:a9:a3:75:
e0:64:c3:0d:03:e7:73:73:9a:7d:62:99:57:0a:a2:f5:fb:af:
e1:89:1d:87:7a:b3:39:87:9f:26:4e:e5:32:0d:86:e2:e7:20:
3b:9f:55:94:ba:ee:77:2d:25:2d:fe:b0:b1:3d:b2:31:ce:61:
d5:46:89:82:26:0b:f7:cb:04:a8:90:77:eb:09:43:dd:06:0d:
f1:69:b8:54:7a:55:c8:1f:35:d9:50:5a:0a:cd:c9:90:24:e3:
72:30:7d:45:d6:e0:a6:0f:ae:1c:2a:32:b7:d0:e9:1c:d3:e4:
55:e7:59:ad:d4:ca:5c:20:4a:6c:58:b9:d6:65:d5:05:f2:c8:
8a:62:2c:6d:13:97:04:9e:29:52:ee:50:98:32:06:44:18:89:
44:3c:d5:0e:c7:e1:1b:f3:e1:4b:5c:25:31:e4:4e:6d:3d:a1:
6f:b2:21:87:71:f1:bd:e7:86:96:4a:ea:9e:93:de:04:47:92:
62:47:99:e7:8d:14:26:0b:a3:c6:70:27:3d:50:be:5f:50:46:
5d:b6:8b:ad:e1:1e:10:13:4e:79:d1:bc:77:ff:fa:b5:1f:1f:
6f:8f:a6:5d
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBHowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MjZDQjZBUjExMC8GA1UEBRMoQjlGREQ4OTUzMzQ5NzE2QURBRTdBOEQxQkIxM0ND
MjdGNTIwRkZENjAeFw0yMzA4MTQwODQwMDZaFw0yNDA4MTQwODQwMDZaMBgxFjAU
BgNVBAMTDTY0ZDllODY5LTNiYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpJiE8ci23aFzw3J0hDahhGPPWbxiohEgzce+pKNJc7Waxw5ITDZzft5LT
ck5hUffZ+oc+X0UBoTbs1/ACIDFtv1B7g2M7yTjmTOpCu73kMlUZZpQX3yyLFxm9
gh+v18Nr7wVT1uNDoLGaJPv2jW4CCs8JapphMVyPcTFkB17luUd7hce4/Whw0/Ly
sZ5sOI8qc3kZBS22VRJk4qQBERHSRCWhhvyFYaOo7vdx5rdPbx8XWUQ0cTWWV5eO
XKSeahC2AJxleUOQ3LnrTpL11KWR/oVN9UkkT/EG+7oqF0iOPwbHGeerMRx82h4r
GqNJOhIkAuJodBL1v/N2Nf8BmGTzAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUXufr
yRjcWdy3LpGPP7eI2gi53yUwHwYDVR0jBBgwFoAUuf3YlTNJcWra56jRuxPMJ/Ug
/9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI2Q0I2LzAyQjhCOTQ4OEJEOTExRUI5MUM5QTUzN0Y4QUVBMjI4L3VmM1ls
VE5KY1dyYTU2alJ1eFBNSl9VZ185WS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3VmM1lsVE5KY1dyYTU2alJ1eFBNSl9VZ185WS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjI2Q0I2LzAyQjhCOTQ4OEJEOTExRUI5MUM5QTUzN0Y4QUVB
MjI4LzJDRjgwMEEwM0E3RTExRUVBOTQ5MkQzMTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACcAGYwDQYJKoZIhvcNAQELBQAD
ggEBAJ+t+gEzVNe/5m6OyWDIufPVrW0TsUkO/5ZbiHbZyqRiKqmjdeBkww0D53Nz
mn1imVcKovX7r+GJHYd6szmHnyZO5TINhuLnIDufVZS67nctJS3+sLE9sjHOYdVG
iYImC/fLBKiQd+sJQ90GDfFpuFR6VcgfNdlQWgrNyZAk43IwfUXW4KYPrhwqMrfQ
6RzT5FXnWa3UylwgSmxYudZl1QXyyIpiLG0TlwSeKVLuUJgyBkQYiUQ81Q7H4Rvz
4UtcJTHkTm09oW+yIYdx8b3nhpZK6p6T3gRHkmJHmeeNFCYLo8ZwJz1Qvl9QRl22
i63hHhATTnnRvHf/+rUfH2+Ppl0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org