Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/6EE4296A590411ECBA560FC35A40D577.roa
File: 6EE4296A590411ECBA560FC35A40D577.roa (raw, json)
Hash identifier: DrH8LxrpRwN/0AK2sqxa8b3bW51uRYu8jttwIOEzeco=
Subject key identifier: BA:42:13:05:6F:FE:B0:DD:52:3C:94:CF:E6:2C:5F:56:94:66:1C:6A
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 0172
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/6EE4296A590411ECBA560FC35A40D577.roa
Signing time: Thu 09 Dec 2021 15:26:52 +0000
ROA not before: Thu 09 Dec 2021 15:26:47 +0000
ROA not after: Sat 09 Dec 2023 15:26:47 +0000
asID: 328227
IP address blocks: 156.0.100.0/24 maxlen: 24
156.0.101.0/24 maxlen: 24
156.0.102.0/24 maxlen: 24
156.0.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Dec 9 15:26:47 2021 GMT
Not After : Dec 9 15:26:47 2023 GMT
Subject: CN=61b2203c-0075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:31:78:80:e3:33:35:0b:88:24:3d:75:ed:
18:37:33:90:39:65:27:00:84:de:2a:09:0b:63:27:
de:5d:87:ad:54:c9:17:00:ac:1d:c6:3b:b6:4c:2f:
53:b5:21:05:a8:2b:e6:83:61:05:1c:c6:c9:0e:5b:
5a:df:bf:07:49:67:6e:4b:86:8b:99:0b:9e:ad:24:
4f:26:7e:a5:7c:f9:90:3d:1b:4e:10:85:33:5d:b5:
94:a1:ab:78:58:dd:0f:89:fa:22:d2:3d:53:25:cb:
62:a5:17:79:26:f7:75:41:d4:63:de:cb:86:4d:44:
03:88:0e:6c:59:fb:8c:b7:ad:19:64:f8:4a:c7:c4:
d6:8a:b5:90:a5:43:ed:5b:aa:df:83:85:cd:89:1b:
40:aa:3b:2e:77:d9:c9:20:9c:ba:da:53:dc:83:e2:
61:1c:6a:53:9a:f7:5c:43:1e:20:bf:5d:9f:92:f2:
51:cf:da:28:58:e7:6f:19:c4:43:f0:aa:bc:55:ef:
40:ba:32:51:9f:64:dc:d0:4c:80:b6:ae:c3:9c:52:
03:f9:78:6c:c2:d5:13:47:85:5c:e9:1f:c5:92:59:
b1:a5:13:7e:a1:4a:4d:c3:22:14:00:43:1d:00:56:
80:81:09:e4:18:ef:3d:f7:77:72:cd:bd:59:d3:02:
f1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:42:13:05:6F:FE:B0:DD:52:3C:94:CF:E6:2C:5F:56:94:66:1C:6A
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/6EE4296A590411ECBA560FC35A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.100.0/22
Signature Algorithm: sha256WithRSAEncryption
73:04:5b:fd:03:fb:f9:e6:cb:1a:0a:1a:65:d7:fd:47:c0:ab:
bf:29:cd:06:82:42:bb:3b:34:cf:36:82:f7:34:b8:e8:29:1d:
f7:c0:db:2f:65:1e:53:f5:2a:d8:12:79:48:66:21:87:15:8b:
67:f2:d7:69:51:e5:82:ea:2f:ad:a8:d1:ba:88:53:e5:a5:64:
60:a3:a6:a6:5f:e8:88:b6:17:32:de:46:fd:e0:89:e0:7a:68:
b7:25:e4:b0:e1:31:a3:59:5d:bc:b3:37:32:17:66:ec:26:45:
25:01:ee:d0:2d:84:a9:f7:e7:00:e8:bf:93:f3:7b:36:a2:3c:
90:16:d7:69:37:a9:c4:ac:94:b5:5e:0b:88:bc:bf:1c:94:b7:
b4:31:cb:3a:73:a5:02:8c:c4:f3:73:9b:b6:2a:f7:95:f6:98:
cd:ff:44:b9:16:26:cf:7b:7a:ca:53:3f:ca:9c:d7:9d:ae:c7:
e9:dc:29:53:86:cc:28:79:d7:55:81:53:a7:e2:f0:47:2b:15:
29:24:23:9b:10:d3:6b:07:33:22:78:4f:eb:66:72:26:c2:a5:
a1:60:af:af:e1:b5:16:76:7f:34:98:12:c7:82:b7:61:dc:3d:
9d:0f:9a:0d:4b:0a:2d:b0:eb:88:cc:b5:8a:14:43:69:68:60:
c4:35:ba:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:55 2023 by rpki-client on console-ams.rpki-client.org