Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/502838360A8D11EE901981824AD9E6FC.roa
File: 502838360A8D11EE901981824AD9E6FC.roa (raw, json)
Hash identifier: 93i7nv31TkeXn9E/mr/56HKCmu7/G76luiX7DYA1xn0=
Subject key identifier: CA:14:88:31:76:8F:FB:7C:F6:36:DF:FE:A4:35:4F:C7:1C:0E:4B:55
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 03C0
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/502838360A8D11EE901981824AD9E6FC.roa
Signing time: Wed 14 Jun 2023 08:27:35 +0000
ROA not before: Wed 14 Jun 2023 08:27:31 +0000
ROA not after: Fri 14 Jun 2024 08:27:31 +0000
asID: 57097
IP address blocks: 156.0.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Dec 2023 07:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 960 (0x3c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Jun 14 08:27:31 2023 GMT
Not After : Jun 14 08:27:31 2024 GMT
Subject: CN=648979f7-fbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:01:06:58:ae:37:c0:5d:06:f3:69:79:ab:
ac:70:e2:81:8a:c9:af:79:01:53:c6:5e:04:fd:0a:
0c:07:19:69:bb:24:71:b4:14:80:78:4b:a1:59:27:
13:b2:16:80:df:f5:5f:ba:54:99:e1:80:15:17:11:
7d:b6:e5:c3:93:9a:a6:3b:ea:db:e4:56:8f:0a:8d:
55:71:07:a4:b7:db:28:4f:3d:16:6b:37:7a:16:65:
66:fd:5e:b9:99:bb:80:44:85:f3:0a:71:f7:45:00:
16:88:60:b6:90:bb:fb:4e:58:a6:0f:03:96:1c:33:
ca:f8:fa:e9:80:73:58:63:5c:eb:5c:ea:89:46:9e:
0f:8d:c7:71:f1:ae:54:75:64:d8:e1:d7:e2:1c:82:
f9:c4:ec:b2:a2:6c:a6:73:cc:34:06:b0:5c:6b:4d:
a2:3d:89:17:25:be:42:a4:6f:ab:cc:de:24:41:f0:
43:44:48:06:be:a5:84:2f:3c:bf:0f:b1:41:13:d0:
61:83:ff:ca:1c:e6:71:34:d3:f3:9c:de:0a:ec:26:
d6:e2:1f:bb:0a:0d:ed:57:64:a0:21:87:02:87:2f:
24:54:4c:b8:ba:02:b5:ed:99:a5:b1:c2:b2:d0:86:
6b:15:51:5a:67:51:f5:cd:50:20:b6:2b:66:24:2d:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:14:88:31:76:8F:FB:7C:F6:36:DF:FE:A4:35:4F:C7:1C:0E:4B:55
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/502838360A8D11EE901981824AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.100.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d0:83:10:63:59:be:5f:86:34:06:25:b5:27:f9:00:ff:e4:
d3:bb:3f:9a:f2:00:5b:e7:d2:3d:d2:f1:17:46:80:d7:6c:dd:
87:5a:16:ac:0d:4d:10:a0:e9:6b:e8:09:ca:00:6f:c3:88:18:
5d:13:0f:8a:06:24:c4:85:f3:fc:6d:97:3c:8c:ef:ac:d6:cc:
99:63:ac:f4:de:c6:8d:a8:52:38:b2:a3:11:30:28:c1:9d:6e:
27:3b:10:94:f8:b0:7c:ca:9f:99:e5:9f:ad:db:fb:39:14:0d:
89:75:5e:93:52:6c:16:63:da:e1:2f:40:a5:96:42:f6:63:b3:
46:5e:58:87:24:b9:4b:db:31:97:3c:51:28:4e:df:7a:f2:46:
f4:45:f4:26:be:f5:76:d5:1e:59:5b:e1:9a:17:df:dc:68:45:
92:6d:e0:b9:0c:8b:fa:db:92:5d:69:52:cf:17:a7:9b:a8:08:
45:b2:b0:ca:65:78:4a:57:a2:dd:fd:05:0a:e2:05:3f:0f:9a:
b3:cd:b5:38:cd:a5:a2:a7:3b:7f:9b:c9:6f:d3:5a:21:e2:ec:
14:1c:48:e6:b8:c3:dd:c5:bd:e2:6d:69:34:72:5b:c5:bb:78:
60:ea:a8:f9:d2:86:2d:79:66:e9:58:ec:fd:fa:64:f2:43:30:
48:01:7e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org