Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/436DF71C4E2F11EE82072E894AD9E6FC.roa
File: 436DF71C4E2F11EE82072E894AD9E6FC.roa (raw, json)
Hash identifier: lF+2EFYNWegUdPez5KmF5ZdLkqs4Rprp11dl4+TmEjk=
Subject key identifier: E1:4E:5F:82:E2:B5:9E:5A:9F:1D:D3:FF:F5:19:00:79:30:B8:03:C6
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 04A8
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/436DF71C4E2F11EE82072E894AD9E6FC.roa
Signing time: Fri 08 Sep 2023 10:05:40 +0000
ROA not before: Fri 08 Sep 2023 10:05:36 +0000
ROA not after: Sun 08 Sep 2024 10:05:36 +0000
asID: 328227
IP address blocks: 156.0.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Dec 2023 07:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1192 (0x4a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Sep 8 10:05:36 2023 GMT
Not After : Sep 8 10:05:36 2024 GMT
Subject: CN=64faf1f4-f1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:03:e7:28:ab:bc:6f:ca:99:2c:94:7e:d8:
2a:c3:21:5e:a7:6e:64:27:ff:b6:e6:0b:6f:fd:f9:
ee:8e:df:49:b2:11:ac:59:b2:1a:ca:7b:ce:89:6d:
aa:b7:85:3a:6f:64:8a:84:f2:50:60:75:8c:80:16:
79:60:c4:9e:53:cb:95:86:3b:84:23:1c:16:99:f3:
96:78:56:85:68:e4:16:97:dd:88:a1:4a:f9:70:a0:
c8:bc:5b:7e:54:98:ef:4b:3c:0b:b6:47:4e:6d:53:
85:57:14:ca:3f:3c:66:53:33:85:79:b7:96:5c:dc:
9f:6e:51:0f:7e:95:96:42:cb:70:2e:06:2d:ff:86:
e3:65:71:b3:ff:f2:29:ed:10:52:cf:3b:b3:37:fe:
4f:db:14:c2:ee:99:8b:80:d3:7c:12:b6:28:9d:14:
66:53:94:a6:62:34:f4:91:a6:e5:2a:5e:bb:42:d8:
37:cb:d6:e0:89:11:ce:5e:1d:33:82:1c:cc:36:c2:
f5:24:5f:84:24:b0:71:f2:58:73:74:4d:44:ed:83:
d4:e3:3f:67:74:eb:ab:8b:0a:fd:c2:89:77:a1:46:
bc:b3:20:76:b8:cf:1d:73:34:49:91:c5:b1:a8:a5:
b4:3a:1a:7a:bf:eb:06:99:e8:11:1f:56:82:e4:2e:
fa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4E:5F:82:E2:B5:9E:5A:9F:1D:D3:FF:F5:19:00:79:30:B8:03:C6
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/436DF71C4E2F11EE82072E894AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.99.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:57:1f:77:03:3c:88:08:8e:7c:37:26:b3:1e:2f:02:51:89:
76:dd:02:e5:1d:07:c3:c0:de:c3:39:bc:9f:f6:c1:7f:80:b3:
8b:76:93:1e:a9:d2:1e:3f:79:04:2b:4f:a7:b7:a7:86:87:eb:
4e:a8:6d:3e:b5:1e:a1:a0:d5:46:19:80:b4:55:25:cc:35:76:
8b:a1:87:cf:98:27:e6:88:1f:7c:e9:c1:75:3e:12:99:fe:90:
0a:55:8b:f4:f0:3f:f3:8e:e7:be:2f:1d:53:40:60:dc:a9:5f:
b4:4b:77:b2:73:d0:e4:95:e4:a4:80:a4:b8:77:4a:44:95:ec:
c4:b1:b5:ab:eb:4a:bf:2d:8a:81:cb:24:20:9f:4f:ca:e1:75:
ca:11:cb:d7:21:fd:1f:d0:a5:d6:54:8f:c5:7f:72:ac:95:b2:
e7:2b:f2:1d:2d:1c:59:df:57:0e:1f:36:88:e9:d5:a5:00:9c:
fc:b8:2b:e5:c8:60:cc:d7:91:cc:2a:e1:ac:57:13:7e:97:cf:
bb:33:d9:b2:c2:59:89:f9:c9:1e:c8:fc:ee:a0:f3:da:5f:e4:
7f:75:10:64:b6:cf:06:39:2e:46:41:28:21:cf:77:4e:f2:eb:
41:da:f6:cc:93:05:2b:ba:15:4a:97:40:22:1f:75:ec:02:07:
3c:48:f2:42
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MjZDQjZBUjExMC8GA1UEBRMoQjlGREQ4OTUzMzQ5NzE2QURBRTdBOEQxQkIxM0ND
MjdGNTIwRkZENjAeFw0yMzA5MDgxMDA1MzZaFw0yNDA5MDgxMDA1MzZaMBgxFjAU
BgNVBAMTDTY0ZmFmMWY0LWYxZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqZQPnKKu8b8qZLJR+2CrDIV6nbmQn/7bmC2/9+e6O30myEaxZshrKe86J
baq3hTpvZIqE8lBgdYyAFnlgxJ5Ty5WGO4QjHBaZ85Z4VoVo5BaX3YihSvlwoMi8
W35UmO9LPAu2R05tU4VXFMo/PGZTM4V5t5Zc3J9uUQ9+lZZCy3AuBi3/huNlcbP/
8intEFLPO7M3/k/bFMLumYuA03wStiidFGZTlKZiNPSRpuUqXrtC2DfL1uCJEc5e
HTOCHMw2wvUkX4QksHHyWHN0TUTtg9TjP2d066uLCv3CiXehRryzIHa4zx1zNEmR
xbGopbQ6Gnq/6waZ6BEfVoLkLvoxAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU4U5f
guK1nlqfHdP/9RkAeTC4A8YwHwYDVR0jBBgwFoAUuf3YlTNJcWra56jRuxPMJ/Ug
/9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI2Q0I2LzAyQjhCOTQ4OEJEOTExRUI5MUM5QTUzN0Y4QUVBMjI4L3VmM1ls
VE5KY1dyYTU2alJ1eFBNSl9VZ185WS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3VmM1lsVE5KY1dyYTU2alJ1eFBNSl9VZ185WS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjI2Q0I2LzAyQjhCOTQ4OEJEOTExRUI5MUM5QTUzN0Y4QUVB
MjI4LzQzNkRGNzFDNEUyRjExRUU4MjA3MkU4OTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACcAGMwDQYJKoZIhvcNAQELBQAD
ggEBAKtXH3cDPIgIjnw3JrMeLwJRiXbdAuUdB8PA3sM5vJ/2wX+As4t2kx6p0h4/
eQQrT6e3p4aH606obT61HqGg1UYZgLRVJcw1douhh8+YJ+aIH3zpwXU+Epn+kApV
i/TwP/OO574vHVNAYNypX7RLd7Jz0OSV5KSApLh3SkSV7MSxtavrSr8tioHLJCCf
T8rhdcoRy9ch/R/QpdZUj8V/cqyVsucr8h0tHFnfVw4fNojp1aUAnPy4K+XIYMzX
kcwq4axXE36Xz7sz2bLCWYn5yR7I/O6g89pf5H91EGS2zwY5LkZBKCHPd07y60Ha
9syTBSu6FUqXQCIfdewCBzxI8kI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org