Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/4216BEC274AD11EE8128404C4AD9E6FC.roa
File: 4216BEC274AD11EE8128404C4AD9E6FC.roa (raw, json)
Hash identifier: 4dL7r2dstDMKFndI8o+wSfsywxYclo7j/FybJkc6gJI=
Subject key identifier: 42:05:4F:91:57:57:2B:8D:5E:0E:18:EE:49:64:E7:A4:69:BA:78:C1
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 0511
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/4216BEC274AD11EE8128404C4AD9E6FC.roa
Signing time: Fri 27 Oct 2023 09:43:18 +0000
ROA not before: Fri 27 Oct 2023 09:43:15 +0000
ROA not after: Sun 27 Oct 2024 09:43:15 +0000
asID: 328227
IP address blocks: 156.0.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1297 (0x511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Oct 27 09:43:15 2023 GMT
Not After : Oct 27 09:43:15 2024 GMT
Subject: CN=653b8636-a87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f2:d7:83:bd:20:0b:d9:f8:ca:a3:72:bb:c8:
dd:3d:66:94:37:fc:47:0e:d9:15:7b:0e:6f:a4:55:
1b:ad:ab:85:09:14:d6:c2:e9:c6:14:c7:d4:9e:ba:
91:1c:f2:cd:4c:17:82:7f:4a:e2:bb:58:df:87:c1:
cb:b9:bf:2c:22:91:b4:0d:bd:eb:56:bc:7e:c0:4d:
ec:e6:e9:56:55:98:ca:46:c9:ff:29:d7:12:70:90:
d8:a7:4f:f2:32:5f:0d:12:05:0c:fa:08:0a:25:83:
57:55:c8:a0:3e:99:ac:7f:b7:df:bb:f5:13:64:8a:
1f:3d:07:7e:5d:37:4f:e5:38:11:44:3e:25:83:e3:
a6:3c:b9:be:63:30:6d:5b:87:80:b6:19:84:32:f5:
34:7e:05:65:2c:f5:0d:7a:27:6f:a1:be:95:f0:57:
e9:60:a3:78:5d:bd:94:c0:40:bd:23:ec:f0:ea:b0:
96:80:0f:1d:34:44:14:16:1d:44:3d:d6:77:c3:35:
c3:8c:62:11:d3:93:b3:95:d7:bb:cb:e7:c2:96:61:
fc:df:71:34:d9:b6:00:3a:25:4d:e2:cf:f9:70:b2:
8b:12:86:25:26:57:eb:c1:7e:e6:8b:d7:10:0e:9c:
ac:e5:cf:5d:35:e3:9a:c8:92:49:82:16:dc:dd:a2:
05:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:05:4F:91:57:57:2B:8D:5E:0E:18:EE:49:64:E7:A4:69:BA:78:C1
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/4216BEC274AD11EE8128404C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.101.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:bd:d7:b9:38:ca:f6:6f:e6:b4:36:ba:80:58:7e:1f:4e:5f:
a6:f1:48:be:18:5b:6e:5b:61:04:3b:28:76:22:39:4c:97:df:
bf:7e:f3:91:30:dc:f1:58:05:53:99:bf:cb:9a:c5:80:2e:2d:
93:1e:55:2f:e0:a3:81:bb:28:39:95:9a:28:5a:67:d1:46:a1:
64:61:51:93:82:c8:89:63:2f:30:58:35:14:98:df:e4:f9:f7:
85:0e:f0:99:1d:f7:07:c3:d5:fd:af:17:a0:06:58:c5:68:b2:
65:9e:28:a5:e3:70:5e:b8:57:24:ee:86:c7:1b:91:c5:ca:4f:
35:6c:eb:c1:18:38:cb:f2:c7:90:d1:40:ed:71:e8:14:1e:8d:
50:89:1e:9e:6f:1d:1c:3d:50:25:e1:4a:84:84:86:58:84:b5:
a4:a0:0b:e1:2a:45:d2:d5:c6:f3:f2:79:4e:2f:15:2f:27:56:
44:10:27:db:a6:2a:12:21:fd:c1:71:ec:02:cc:72:f2:cc:a4:
e5:14:78:d7:f8:94:be:06:d4:55:f8:97:dc:e0:21:6b:69:d3:
3c:bf:0f:ff:1e:21:7d:9b:b4:25:1a:7f:2d:78:18:3a:fc:26:
df:6c:64:fa:4b:33:9b:4d:d3:ec:f6:ec:c1:60:96:99:d0:ee:
db:72:ae:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 19 08:49:46 2023 by rpki-client on console-ams.rpki-client.org