Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/5960D426174411EEA12A950F4AD9E6FC.roa
File: 5960D426174411EEA12A950F4AD9E6FC.roa (raw, json)
Hash identifier: NioXjfdL0xVFqnC4zGLkUqNBGhVxIcDh/CIT6PRJhhE=
Subject key identifier: 07:DA:3C:45:A1:23:56:B2:86:DE:94:26:6B:19:EC:6C:C3:58:D4:9A
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 03DA
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/5960D426174411EEA12A950F4AD9E6FC.roa
Signing time: Fri 30 Jun 2023 12:48:02 +0000
ROA not before: Fri 30 Jun 2023 12:47:58 +0000
ROA not after: Sun 30 Jun 2024 12:47:58 +0000
asID: 328227
IP address blocks: 156.0.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 986 (0x3da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Jun 30 12:47:58 2023 GMT
Not After : Jun 30 12:47:58 2024 GMT
Subject: CN=649ecf02-b685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:22:6b:6a:48:1e:9d:50:33:b7:32:14:e6:
30:79:74:72:11:b3:dc:6a:22:83:be:80:b2:b8:2e:
9c:c2:56:09:1a:93:ca:c3:ac:d9:c8:94:73:61:fb:
9e:6f:90:6e:af:71:10:1d:bd:27:59:d5:dd:7b:d4:
40:1b:78:75:c3:4b:16:5b:4c:50:0a:4e:f6:0d:63:
92:5e:43:0d:4f:9b:b9:2d:17:37:43:20:d4:b1:e8:
14:ac:06:c7:af:74:8a:a8:33:39:57:21:ad:1c:0f:
b3:4f:ba:7e:9d:be:39:72:cf:6f:4e:73:1f:5c:58:
6b:c1:70:50:aa:24:0c:4d:28:1a:fc:28:0b:4b:05:
3b:6c:8a:b3:0c:ec:85:d1:e2:68:08:b0:ff:df:8e:
a2:73:86:3c:dc:bc:70:44:3d:99:65:5e:3c:dd:70:
f0:d7:b6:b0:5d:93:c0:d0:ab:92:09:3d:44:0c:ab:
2e:34:5a:e0:c2:63:32:bd:b2:d6:f1:f6:39:af:5e:
53:cc:55:23:53:a9:40:a2:6c:76:dc:e2:3f:eb:88:
69:ac:7c:6b:1f:1a:6d:36:dd:de:3d:89:df:ed:10:
35:57:85:4b:67:1e:43:80:30:d5:b8:a1:50:7a:d3:
84:9d:8f:46:3c:a9:04:6e:71:93:81:2c:2c:e3:c6:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DA:3C:45:A1:23:56:B2:86:DE:94:26:6B:19:EC:6C:C3:58:D4:9A
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/5960D426174411EEA12A950F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.99.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e0:be:c2:e7:ea:90:eb:02:df:77:46:52:6e:a0:d7:b0:4d:
4f:55:2c:94:eb:8e:7b:8a:c7:03:7f:95:bb:b5:f4:59:a9:1c:
ca:d4:8d:b9:03:38:f2:3a:b0:a9:1b:50:0a:b5:9d:80:d6:de:
e0:16:9e:2e:f2:5f:40:f9:f0:8b:99:2c:2b:25:92:c0:ce:19:
f3:77:a2:ce:d5:47:10:61:e5:1a:33:44:c5:a5:32:9c:5b:46:
e0:b6:4a:9c:b6:4c:10:c7:48:9a:45:d3:05:86:5d:fc:8b:06:
b0:ee:13:d3:83:1c:a5:ec:55:90:d9:12:c5:2e:5a:71:ae:a7:
b2:a9:1d:e3:9b:d6:07:67:20:07:58:ec:d0:48:76:16:bb:63:
0c:a2:c7:71:d2:cc:bb:0d:54:65:ce:e9:7c:d9:e5:4a:70:3e:
69:5f:ac:01:45:5e:83:a7:83:e8:b8:e5:2d:88:66:b3:40:89:
79:26:62:a3:2e:27:5b:1b:53:8c:f4:15:73:04:56:db:1d:b4:
58:10:81:40:b4:42:52:d1:d5:88:c5:81:0b:fc:9c:a7:cf:55:
7f:e8:f7:1c:96:de:13:5e:3c:0f:64:90:b9:a5:e5:a6:94:33:
1d:d1:ad:dd:8d:35:9f:83:cb:44:36:38:f0:c2:55:ed:7f:0f:
49:20:ef:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:55 2023 by rpki-client on console-ams.rpki-client.org