Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/3FDC30801C9511EEB7F5B7364AD9E6FC.roa
File: 3FDC30801C9511EEB7F5B7364AD9E6FC.roa (raw, json)
Hash identifier: Dvx8AXLdcPOv9M86bYtrPlnGcwuMWm495R4iB1YNSG8=
Subject key identifier: 4C:29:50:8A:D6:C7:7D:76:29:C9:21:48:7E:72:48:17:73:36:F7:BC
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 041C
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/3FDC30801C9511EEB7F5B7364AD9E6FC.roa
Signing time: Fri 07 Jul 2023 07:09:44 +0000
ROA not before: Fri 07 Jul 2023 07:09:41 +0000
ROA not after: Sun 07 Jul 2024 07:09:41 +0000
asID: 11938
IP address blocks: 156.0.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jul 2023 10:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1052 (0x41c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Jul 7 07:09:41 2023 GMT
Not After : Jul 7 07:09:41 2024 GMT
Subject: CN=64a7ba38-815a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:e3:c7:16:f4:78:90:96:03:2b:a5:fa:c8:
b8:f5:8e:9c:9c:b0:47:d3:eb:67:6a:ad:f0:60:b0:
c1:c7:1b:fc:93:85:53:6a:d8:9f:de:e8:01:0e:4a:
02:84:37:ab:e0:45:d6:f3:e7:7e:ce:53:1e:0a:7e:
01:4e:bc:7d:f0:19:ed:28:c8:6e:a9:38:15:3b:f6:
50:96:88:cb:21:cb:d1:95:9b:2a:91:fe:20:2d:8a:
25:08:52:68:69:8f:b7:09:e5:f0:c0:fa:88:a2:3d:
93:c5:76:6c:e4:fb:1f:3e:3a:4f:3b:e2:6b:e1:dd:
d2:bb:73:f1:f0:7f:ac:61:56:81:70:cc:04:ce:c3:
97:bd:50:dc:b2:f8:e2:5d:bf:f4:db:54:86:0a:d9:
91:b5:b1:86:e5:76:13:d8:9a:ae:a9:80:d4:f5:58:
2c:db:45:0f:43:41:ac:75:a5:0d:f8:3f:3c:b4:29:
5e:e4:5e:f1:b1:1d:2b:02:08:9f:02:24:74:b1:9a:
e6:1e:0c:4f:f2:33:0b:f9:fd:b0:23:c5:87:0c:16:
de:46:1b:5f:6f:4a:59:7c:5f:dd:f4:cb:e0:50:c3:
88:f1:1b:e4:60:6c:62:17:5d:5f:44:7b:dd:aa:8e:
70:fb:1f:a3:86:dc:80:35:08:18:8c:be:ba:84:b6:
a3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:29:50:8A:D6:C7:7D:76:29:C9:21:48:7E:72:48:17:73:36:F7:BC
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/3FDC30801C9511EEB7F5B7364AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:35:5c:27:df:bd:9f:23:ab:9d:0d:ba:3d:b5:b9:29:84:33:
76:63:74:52:b5:13:91:a7:a8:83:58:60:b1:54:02:20:95:92:
4a:55:d8:16:7c:78:80:8f:7e:53:44:ac:37:e9:31:2d:d3:33:
d6:b6:e4:57:4e:46:3e:e7:ab:34:78:c6:9f:ba:d5:cb:d6:cf:
46:27:4c:97:47:e5:a6:6b:b1:f1:66:c4:6d:47:c7:e4:0f:66:
fa:ce:c1:93:9b:f7:13:e2:45:0a:57:77:45:83:ec:02:bb:10:
e1:df:44:b8:d6:dd:ab:6c:42:23:30:4a:0e:db:17:5a:f4:a7:
ab:15:2a:8a:c0:ec:a7:6c:6f:37:d2:5f:07:71:67:ef:27:d7:
70:92:6c:17:e9:85:c3:06:56:65:0c:c8:e2:ea:9c:33:5b:46:
e6:63:a5:be:b3:b0:4c:f7:92:16:2d:fe:75:97:a6:ca:eb:f7:
c1:d7:73:3c:8d:b4:04:b2:e8:22:c0:bb:ec:e5:bc:50:91:d1:
95:88:7e:ee:63:40:f8:19:31:d5:7a:8f:86:49:35:04:32:5c:
4d:7a:7a:f9:33:1e:95:95:c7:9d:c4:38:f8:2b:bd:40:bb:5c:
ef:bb:7b:4a:93:d4:8b:f1:85:bc:e4:c9:48:90:39:5f:ee:12:
05:b3:36:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org