Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/8EFD4448174911EE9E75471F4AD9E6FC.roa
File: 8EFD4448174911EE9E75471F4AD9E6FC.roa (raw, json)
Hash identifier: n+SL0IuN7oONTLfitVl5RrcuzAhcYBNIAUXlYSxFTng=
Subject key identifier: 2F:F3:72:E2:6E:9F:A3:26:38:D5:8F:F6:82:30:53:E2:F0:32:2D:B6
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 03F2
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/8EFD4448174911EE9E75471F4AD9E6FC.roa
Signing time: Fri 30 Jun 2023 13:25:19 +0000
ROA not before: Fri 30 Jun 2023 13:25:16 +0000
ROA not after: Sun 30 Jun 2024 13:25:16 +0000
asID: 57097
IP address blocks: 156.0.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1010 (0x3f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Jun 30 13:25:16 2023 GMT
Not After : Jun 30 13:25:16 2024 GMT
Subject: CN=649ed7bf-1f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:b4:69:f7:bf:58:16:fb:00:83:b1:ad:06:
ce:22:4e:c2:96:1b:72:c5:dc:81:4a:7d:80:60:8f:
ec:dd:e2:ce:6a:0e:23:fb:6d:f6:d0:09:dc:89:6f:
76:81:45:58:e5:17:23:56:da:18:2a:4b:a8:fd:9a:
39:f1:7d:6b:ae:ed:68:67:3e:0e:15:f8:b3:45:f8:
fd:68:56:7e:33:43:8b:ae:01:e1:fa:8e:43:30:07:
1e:02:7b:fe:60:e9:44:f0:36:d0:c7:83:a9:32:fb:
65:3b:c2:83:de:5c:71:3c:c1:f4:f4:33:a5:56:f0:
d0:e7:db:69:31:0c:9e:67:9c:e1:e8:b6:f9:16:6b:
c4:e3:49:f1:62:04:2b:00:a5:1b:16:1a:a9:a1:34:
b9:b4:2c:75:8a:2a:f2:a1:e3:d8:13:24:1a:19:f7:
75:00:8b:c6:b9:41:a8:49:1e:1e:a1:46:8b:ad:b8:
51:31:2e:1f:c8:9b:6b:7a:71:4d:61:47:1f:d9:b1:
54:94:06:a9:a2:9c:e8:a9:88:b5:fb:42:46:8b:48:
cc:a6:97:7d:56:1f:b8:4f:e7:b0:78:eb:b5:ed:ee:
93:34:e3:4d:6c:26:9e:5a:f2:50:63:91:92:8f:77:
03:fa:7e:0f:3d:3a:28:af:bc:b5:1a:78:44:f6:8a:
12:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F3:72:E2:6E:9F:A3:26:38:D5:8F:F6:82:30:53:E2:F0:32:2D:B6
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/8EFD4448174911EE9E75471F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.113.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:88:d1:74:7f:89:87:23:d3:d7:66:f3:88:bc:d1:57:4c:70:
88:04:1d:4c:7d:2b:9b:73:b5:dd:8c:40:8e:0a:d5:70:83:20:
27:32:94:33:25:47:9c:fa:7d:a3:d2:9c:43:a8:a8:6a:5e:74:
73:95:15:1b:f8:d6:bd:a9:35:35:0d:21:2f:cf:c5:81:59:c3:
0e:4c:7d:23:1f:b3:f7:85:b7:31:71:5f:d9:46:3e:01:b4:0f:
6e:d8:f0:94:71:ad:44:ef:03:35:dc:e6:4a:66:e1:f6:e1:b8:
70:fb:3a:cd:4f:46:f0:54:97:aa:f3:2d:ba:7e:94:99:c2:2b:
1d:2f:96:36:8c:c5:75:35:5e:46:73:70:55:1b:8d:f7:5b:e6:
01:ba:6c:b8:8a:3b:4b:61:c3:4f:a9:9a:78:e6:ea:5e:24:f1:
8b:55:aa:65:d1:97:9a:e0:f7:9d:fa:f9:10:1d:32:68:2a:2e:
af:ff:12:7e:c8:33:45:07:a2:82:81:8f:cf:25:be:74:a1:9a:
c3:f5:b0:1a:52:25:49:cf:d9:55:7e:11:5e:90:65:56:1c:57:
23:7b:b5:3e:04:6e:d1:4e:ec:bf:66:90:31:2b:b4:6f:47:9d:
da:a5:59:89:8a:d9:97:12:23:ac:d7:f4:9f:b8:5b:1c:16:24:
b6:0c:8f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 4 14:26:25 2023 by rpki-client on console-ams.rpki-client.org