Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/36763D9C174511EE975F62124AD9E6FC.roa
File: 36763D9C174511EE975F62124AD9E6FC.roa (raw, json)
Hash identifier: gjWfKoWSFfRuGVvRygSw1+XlHhS2nJwNMel4chWUjgc=
Subject key identifier: 4F:9C:C3:C5:75:9F:A5:64:50:85:DF:9D:7A:43:82:30:58:29:ED:0B
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 03DE
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/36763D9C174511EE975F62124AD9E6FC.roa
Signing time: Fri 30 Jun 2023 12:54:13 +0000
ROA not before: Fri 30 Jun 2023 12:54:09 +0000
ROA not after: Sun 30 Jun 2024 12:54:09 +0000
asID: 328227
IP address blocks: 156.0.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 12:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 990 (0x3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Jun 30 12:54:09 2023 GMT
Not After : Jun 30 12:54:09 2024 GMT
Subject: CN=649ed075-00ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:bc:0f:a1:51:47:b6:29:0f:d8:d4:89:29:
a7:f3:b5:54:7c:46:45:1f:40:23:88:e8:2a:b6:1a:
83:2b:fe:c3:aa:f2:a0:77:b4:e6:6b:6c:96:0e:0f:
fa:4b:8e:21:18:7f:88:bb:08:c2:24:a4:15:c2:d4:
69:fd:9d:7c:7e:b0:44:79:de:d4:be:86:f6:60:75:
7d:7b:c2:93:f6:6a:92:1c:a6:fc:cb:f7:16:b2:74:
c4:94:a3:68:cd:7e:41:75:eb:79:78:c7:9b:65:89:
e5:a5:f1:30:95:ec:74:39:73:a7:4f:aa:1e:ad:e3:
77:0c:b9:b8:fc:fa:46:a7:86:20:de:72:41:7d:20:
9e:9b:36:31:7c:2e:b4:d7:c9:16:17:59:cf:49:d4:
60:1d:4f:4a:6c:a7:80:05:94:0d:d4:8b:7d:9f:17:
fb:63:e9:60:21:e7:7f:fb:af:57:d5:a8:7f:93:b2:
17:74:37:7f:2f:c0:42:d6:ea:32:59:4e:84:0f:62:
bb:fb:40:81:01:13:11:44:98:3c:7f:30:17:58:05:
2d:cb:b0:e5:a4:3e:20:c6:02:7f:cd:8b:cc:21:8d:
62:92:9a:1b:30:42:b5:b1:41:02:6c:47:98:13:3f:
14:65:de:b0:4d:5c:d0:c6:9e:a9:0f:76:50:a1:c0:
39:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9C:C3:C5:75:9F:A5:64:50:85:DF:9D:7A:43:82:30:58:29:ED:0B
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/36763D9C174511EE975F62124AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.102.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:35:2e:67:ed:d2:6c:70:ce:f2:23:6a:7c:a1:f3:0f:1a:ac:
ad:4e:fa:99:da:0e:a7:5a:2e:5f:89:a9:9a:7a:ad:7c:a5:7a:
1a:af:ac:c2:7b:5b:fb:0f:42:1c:50:bc:28:1c:07:6f:2f:79:
53:65:78:05:a3:58:28:dc:91:cd:84:19:12:0a:11:ba:5e:91:
47:ed:28:bf:f5:89:03:cd:d1:00:3f:ba:5f:b6:a6:10:b3:29:
50:32:d1:5a:ff:ec:01:dc:b0:c6:95:5b:57:5d:9c:78:ea:48:
d7:1b:9a:8c:ee:96:aa:45:ce:37:f6:ea:8e:11:c2:41:ac:f2:
76:39:e2:a6:93:60:bd:e8:a5:53:f3:cd:68:96:a5:2a:8f:2e:
34:12:11:cf:f7:e7:04:90:a0:f2:5f:3e:a8:ba:19:f0:db:c4:
24:13:22:c6:fb:fc:57:f3:94:0e:5d:37:28:7f:71:2f:02:f1:
c7:6b:45:e3:8d:e2:c1:ac:b5:d4:80:90:56:49:ef:62:95:f2:
03:d1:00:99:af:54:cb:d1:56:86:af:d4:50:8f:51:54:b7:a6:
ec:6f:2a:44:fd:4f:55:f3:fb:5f:a0:85:1c:5c:b8:c2:30:d5:
0b:83:c8:9f:c4:2e:8e:aa:09:79:26:11:23:68:75:d4:84:c0:
21:df:37:a9
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICA94wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MjZDQjZBUjExMC8GA1UEBRMoQjlGREQ4OTUzMzQ5NzE2QURBRTdBOEQxQkIxM0ND
MjdGNTIwRkZENjAeFw0yMzA2MzAxMjU0MDlaFw0yNDA2MzAxMjU0MDlaMBgxFjAU
BgNVBAMTDTY0OWVkMDc1LTAwZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7JLwPoVFHtikP2NSJKafztVR8RkUfQCOI6Cq2GoMr/sOq8qB3tOZrbJYO
D/pLjiEYf4i7CMIkpBXC1Gn9nXx+sER53tS+hvZgdX17wpP2apIcpvzL9xaydMSU
o2jNfkF163l4x5tlieWl8TCV7HQ5c6dPqh6t43cMubj8+kanhiDeckF9IJ6bNjF8
LrTXyRYXWc9J1GAdT0psp4AFlA3Ui32fF/tj6WAh53/7r1fVqH+Tshd0N38vwELW
6jJZToQPYrv7QIEBExFEmDx/MBdYBS3LsOWkPiDGAn/Ni8whjWKSmhswQrWxQQJs
R5gTPxRl3rBNXNDGnqkPdlChwDmbAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUT5zD
xXWfpWRQhd+dekOCMFgp7QswHwYDVR0jBBgwFoAUuf3YlTNJcWra56jRuxPMJ/Ug
/9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI2Q0I2LzAyQjhCOTQ4OEJEOTExRUI5MUM5QTUzN0Y4QUVBMjI4L3VmM1ls
VE5KY1dyYTU2alJ1eFBNSl9VZ185WS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3VmM1lsVE5KY1dyYTU2alJ1eFBNSl9VZ185WS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjI2Q0I2LzAyQjhCOTQ4OEJEOTExRUI5MUM5QTUzN0Y4QUVB
MjI4LzM2NzYzRDlDMTc0NTExRUU5NzVGNjIxMjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACcAGYwDQYJKoZIhvcNAQELBQAD
ggEBALI1Lmft0mxwzvIjanyh8w8arK1O+pnaDqdaLl+JqZp6rXylehqvrMJ7W/sP
QhxQvCgcB28veVNleAWjWCjckc2EGRIKEbpekUftKL/1iQPN0QA/ul+2phCzKVAy
0Vr/7AHcsMaVW1ddnHjqSNcbmozulqpFzjf26o4RwkGs8nY54qaTYL3opVPzzWiW
pSqPLjQSEc/35wSQoPJfPqi6GfDbxCQTIsb7/FfzlA5dNyh/cS8C8cdrReON4sGs
tdSAkFZJ72KV8gPRAJmvVMvRVoav1FCPUVS3puxvKkT9T1Xz+1+ghRxcuMIw1QuD
yJ/ELo6qCXkmESNoddSEwCHfN6k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org