Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/3FA66A6632CC11EEA52C85664AD9E6FC.roa
File: 3FA66A6632CC11EEA52C85664AD9E6FC.roa (raw, json)
Hash identifier: d+FxYt/r4IwRFspuUUJR72yRMRbjhkMygGfPMxb9fHE=
Subject key identifier: 3F:EC:BF:53:21:83:E0:61:70:2A:13:A0:F0:55:2E:CC:23:08:6C:6D
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 044E
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/3FA66A6632CC11EEA52C85664AD9E6FC.roa
Signing time: Fri 04 Aug 2023 13:38:52 +0000
ROA not before: Fri 04 Aug 2023 13:38:47 +0000
ROA not after: Sun 04 Aug 2024 13:38:47 +0000
asID: 328227
IP address blocks: 156.0.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Dec 2023 07:47:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1102 (0x44e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Aug 4 13:38:47 2023 GMT
Not After : Aug 4 13:38:47 2024 GMT
Subject: CN=64ccff6c-defe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:35:ff:0c:95:3e:34:68:d3:ea:a3:54:c9:
bd:58:a8:38:5f:88:55:b6:88:62:08:bd:c1:cd:62:
c7:38:ad:4d:f4:85:13:a0:ec:ce:0e:59:97:d8:4e:
47:ab:9a:e8:26:e0:44:d2:ca:2e:fb:ac:3e:94:55:
12:4a:41:a2:96:51:5f:6b:ac:78:7d:4e:eb:d0:34:
9c:ca:67:da:07:85:c2:f9:16:23:cf:27:9f:93:f4:
4a:bd:30:a7:4f:db:1c:d7:96:67:2e:d4:f6:bf:fb:
da:3d:e4:d9:85:03:6f:7f:18:09:88:89:6a:bf:4b:
4e:c2:d4:6d:71:ac:f7:15:c6:77:29:00:5b:68:75:
c9:9b:5b:29:99:14:cf:90:d2:6f:be:af:b8:34:8e:
66:82:86:2e:19:f1:25:90:12:df:b3:9e:a6:80:50:
03:58:63:c2:7c:1f:76:a3:d1:a1:48:b5:b1:fb:7d:
e3:d6:e4:92:06:d5:88:31:62:67:0f:67:2a:f8:77:
92:69:d5:e1:43:22:33:3f:19:d9:3f:89:20:9c:15:
22:43:ed:a1:22:bd:22:ef:40:37:c6:15:0d:34:4d:
20:3e:bf:e5:98:a7:3b:21:e6:5e:ed:e7:cb:2b:0b:
9d:22:aa:89:ef:b1:a7:74:e0:85:8a:cd:f4:d0:e3:
2a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EC:BF:53:21:83:E0:61:70:2A:13:A0:F0:55:2E:CC:23:08:6C:6D
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/3FA66A6632CC11EEA52C85664AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.97.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ef:da:be:91:fe:7a:14:b8:1f:25:11:b3:88:ea:e5:e0:52:
4d:23:34:5a:ce:fb:a1:93:f8:4d:2d:8c:2a:b8:23:d8:e6:1c:
1e:3a:0a:b4:68:36:c2:63:87:62:75:4a:3f:3f:ee:26:1d:91:
3f:c3:68:16:90:58:d9:f3:77:7b:ed:55:c5:40:90:d1:d1:17:
ed:39:31:e8:3a:cb:13:1a:8f:4f:14:d1:69:5d:38:33:29:56:
60:ee:c1:9c:44:a3:91:96:50:bb:2a:6c:6f:2e:b4:3a:e1:53:
0b:9c:af:89:e3:97:77:f5:2c:97:1a:31:91:c6:c6:02:6a:78:
c7:e1:fa:4f:f8:73:e9:d3:8f:4b:3d:c4:e4:9b:28:a2:21:56:
c8:60:b1:2e:83:d9:d9:c4:c4:19:e5:f6:9f:23:cc:6a:db:8a:
ad:94:5e:e8:47:62:98:a0:81:45:38:04:fc:6b:05:0b:89:93:
af:5a:29:4d:a5:84:67:5a:8b:f2:35:3e:d8:1b:78:b9:5e:d1:
61:f1:f3:a9:20:f7:31:62:ba:bf:1a:0d:98:0a:1e:20:41:bc:
68:0e:ec:8f:41:e6:dd:c0:71:37:b9:13:0e:7d:f0:c5:5d:ab:
49:ef:5b:f8:97:8c:4f:14:d1:44:fa:b7:da:d6:5a:80:9b:9f:
d5:2a:9f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org