Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/789870D81C9411EEA36E77344AD9E6FC.roa
File: 789870D81C9411EEA36E77344AD9E6FC.roa (raw, json)
Hash identifier: 6Vd1GHNKY9jkJRCyd2CT0ZJRDDZ0v9HO6f8IrzII4JQ=
Subject key identifier: 1E:B6:16:D8:85:D4:13:C7:65:F8:09:43:CF:9A:74:E2:A2:9F:2B:A4
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 0419
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/789870D81C9411EEA36E77344AD9E6FC.roa
Signing time: Fri 07 Jul 2023 07:04:10 +0000
ROA not before: Fri 07 Jul 2023 07:04:06 +0000
ROA not after: Sun 07 Jul 2024 07:04:06 +0000
asID: 11938
IP address blocks: 156.0.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1049 (0x419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Jul 7 07:04:06 2023 GMT
Not After : Jul 7 07:04:06 2024 GMT
Subject: CN=64a7b8ea-a01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2e:3e:cf:26:1a:18:4e:cd:9b:49:42:e1:6e:
d4:3f:82:33:87:df:41:d8:83:76:74:e2:7f:f9:46:
b7:1e:62:29:55:19:57:ea:99:03:e4:a6:fa:a3:31:
eb:e2:55:24:d2:bc:3c:40:e3:0b:90:e7:07:5c:76:
99:64:2f:5e:86:4b:07:7c:ed:bb:66:3b:e7:ec:0b:
4a:06:a3:a1:1e:4d:b3:64:36:0b:a1:5f:b2:d2:7d:
fc:64:09:c8:88:e5:aa:6e:bb:1a:c4:ef:64:06:ec:
4d:eb:6e:46:1e:50:d3:44:ca:bb:c1:1d:65:ba:da:
f0:3f:53:32:d6:cd:09:e6:11:b4:1c:da:5e:50:f2:
c7:19:c5:0b:20:88:99:36:9a:37:91:3b:62:e7:96:
e7:35:ef:93:0b:fe:fc:6a:7b:e1:e5:74:6b:d1:01:
9f:09:c6:27:59:54:b1:0c:7e:e7:bc:0e:9c:72:9b:
8d:54:5a:de:dc:8d:5f:ac:07:f3:e2:38:15:78:9c:
d2:31:aa:f9:03:38:85:38:00:05:f1:37:cc:87:71:
2e:9d:70:a4:2c:f2:3a:b4:67:86:3d:e4:07:91:2b:
79:8d:59:16:f6:86:41:9a:bf:f9:91:b2:12:47:3d:
cd:1e:a9:d9:d3:be:0a:b0:68:3c:99:1e:a9:88:f3:
13:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B6:16:D8:85:D4:13:C7:65:F8:09:43:CF:9A:74:E2:A2:9F:2B:A4
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/789870D81C9411EEA36E77344AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.99.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:a7:cb:86:b9:63:e1:bc:71:c8:1f:19:2e:ab:44:c7:77:08:
37:ff:1a:bd:4a:60:62:cd:ed:0a:57:50:35:2f:52:97:53:fe:
25:fe:da:59:e1:61:46:23:92:7a:7a:68:64:56:4f:2e:e1:89:
23:64:8c:4f:34:a0:54:9c:33:33:db:71:1e:9b:e0:c7:74:dd:
b8:16:4a:e7:70:d2:4b:a7:64:18:2f:1c:92:dc:09:33:ec:a8:
81:8f:ee:79:bc:a9:86:dc:8a:97:c6:27:34:43:f7:32:d2:02:
8c:ef:ec:66:e1:e1:43:9b:fa:ed:b7:06:10:54:62:db:a0:64:
56:7c:fe:b4:20:89:98:eb:33:57:63:e8:14:20:21:e0:a3:74:
00:94:04:79:13:f4:1e:9e:e5:15:81:3e:4e:39:6e:fc:b8:0e:
e6:3e:24:a4:85:ce:a8:ee:93:ba:35:89:1f:2f:fe:12:fe:bf:
f0:50:51:d8:aa:0c:7e:c6:87:06:7d:65:b9:cb:bc:bd:0c:64:
8e:ac:87:8c:21:a6:ec:3e:62:04:51:e6:f9:2e:9a:37:68:52:
ec:d1:a0:a2:89:ed:14:3f:ed:b0:52:94:08:5a:49:b2:e0:50:
51:5d:0c:d6:57:00:f8:ae:89:ce:90:49:03:af:14:67:9e:01:
2e:ba:83:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 10:43:15 2023 by rpki-client on console-ams.rpki-client.org