Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/61B1B90E382011EE99A4A08B4AD9E6FC.roa
File: 61B1B90E382011EE99A4A08B4AD9E6FC.roa (raw, json)
Hash identifier: abG//nXo3p0sJ52C4xAXquG8sl/iD+ylcq4twxgePlU=
Subject key identifier: A4:5C:2B:B7:A2:87:AF:D6:60:EA:87:1D:6C:F9:7D:21:3E:B3:FD:74
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 0465
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/61B1B90E382011EE99A4A08B4AD9E6FC.roa
Signing time: Fri 11 Aug 2023 08:23:42 +0000
ROA not before: Fri 11 Aug 2023 08:23:39 +0000
ROA not after: Sun 11 Aug 2024 08:23:39 +0000
asID: 328227
IP address blocks: 156.0.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1125 (0x465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Aug 11 08:23:39 2023 GMT
Not After : Aug 11 08:23:39 2024 GMT
Subject: CN=64d5f00e-2d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b5:e1:75:db:11:2f:c1:9e:3a:4d:e5:04:ee:
ce:d2:0d:7a:d9:0d:d9:52:37:20:d3:da:62:c5:d5:
9b:f2:8d:eb:07:58:18:84:42:d3:51:6b:76:40:9f:
62:be:c6:b4:56:dd:4b:cc:db:c3:01:68:89:80:1c:
e5:e9:af:a7:6e:18:25:f2:89:d6:b5:8a:97:c5:26:
1e:ef:23:1e:e9:60:c2:15:53:a9:90:88:6f:84:40:
7e:1e:6d:65:3a:9e:00:f3:1f:62:d1:bf:4d:5d:68:
78:bb:5d:2e:af:87:2a:3a:38:7d:30:d3:0d:7e:0e:
b8:18:7b:0e:cc:63:71:32:61:d0:7c:bf:b1:e9:40:
d3:09:84:b3:1c:34:ad:79:1e:81:48:c3:c0:f8:c3:
96:8b:d6:2e:ba:af:45:1f:48:1a:d8:ad:f5:8c:cd:
65:aa:67:37:2a:96:6f:54:74:47:d0:35:44:ea:79:
3e:af:9b:e4:43:67:98:2c:9c:81:21:41:c3:a7:63:
44:19:95:ce:f7:ad:8f:e5:01:30:7b:22:db:e4:52:
b5:89:36:e2:b2:5f:2c:ba:63:2a:8c:e6:14:3c:7c:
da:80:65:a7:56:11:70:de:63:1e:6f:0b:b4:ad:d2:
8a:7b:72:0c:e0:8c:29:f8:39:5d:9e:04:bf:a5:11:
5c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5C:2B:B7:A2:87:AF:D6:60:EA:87:1D:6C:F9:7D:21:3E:B3:FD:74
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/61B1B90E382011EE99A4A08B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.122.0/24
Signature Algorithm: sha256WithRSAEncryption
79:8d:fb:0e:86:52:fe:f0:c5:98:b1:16:3f:e3:f0:c6:f2:08:
49:19:cb:f5:83:5d:e5:1a:e0:7c:0c:3e:6f:de:e9:66:c6:9f:
54:04:11:b1:eb:f9:74:1f:49:85:30:20:6d:35:42:6b:ce:63:
76:40:73:9c:c8:a9:1e:37:68:9c:8c:ae:97:8d:92:62:ca:ca:
9f:56:53:8d:8e:14:28:c4:0f:b4:c5:f8:fe:c7:36:c9:0b:a1:
95:d7:db:f0:e6:a8:3b:f9:57:34:e0:80:45:c2:fa:f6:ba:ae:
ae:e8:e5:bb:6a:b4:be:c7:f3:c0:0e:c7:b5:20:c4:5d:d7:b6:
bf:9c:66:76:9c:56:ba:b9:f3:5b:67:1b:88:67:4c:0e:6a:ed:
7a:67:68:76:1b:2d:37:aa:25:fb:5e:9e:eb:61:96:05:06:c8:
e4:ce:e0:cf:ac:f6:db:ec:68:c9:ea:98:61:e1:91:67:2f:49:
37:1c:90:36:0e:5b:34:fc:0f:51:cb:d0:b3:c6:51:33:8d:25:
af:98:73:07:1e:b8:a2:ff:d9:be:5e:a1:32:40:a0:95:fe:04:
c8:e3:6d:ac:e7:c6:b5:f0:fb:52:c8:d2:cd:f6:7e:fb:10:24:
31:dc:2f:7a:4a:f1:43:0e:9b:a3:a3:db:62:79:00:c5:69:7b:
a7:d1:34:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 09:54:51 2023 by rpki-client on console-ams.rpki-client.org