Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/9D77897232CC11EEAEE9A4674AD9E6FC.roa
File: 9D77897232CC11EEAEE9A4674AD9E6FC.roa (raw, json)
Hash identifier: gfy3M2Apo8b+ykPsWaTaYQAZjPrycOVwFn2AXxq2KhE=
Subject key identifier: 48:CD:46:10:A8:5B:65:AD:C3:EC:89:5A:61:9E:D9:F0:77:3B:FC:7A
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 0451
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/9D77897232CC11EEAEE9A4674AD9E6FC.roa
Signing time: Fri 04 Aug 2023 13:41:29 +0000
ROA not before: Fri 04 Aug 2023 13:41:26 +0000
ROA not after: Sun 04 Aug 2024 13:41:26 +0000
asID: 328227
IP address blocks: 156.0.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Dec 2023 07:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1105 (0x451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Aug 4 13:41:26 2023 GMT
Not After : Aug 4 13:41:26 2024 GMT
Subject: CN=64cd0009-5169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:24:71:c8:01:c6:aa:1c:f3:42:ac:42:23:59:
eb:9e:a3:74:fd:63:f1:e5:f0:04:19:db:bf:fe:9b:
d6:f2:55:f8:d3:63:29:4e:b2:74:7a:e8:b5:c3:80:
aa:cf:7d:f7:40:aa:4d:cb:29:9a:2d:a9:2f:19:eb:
79:fc:c1:7d:df:90:d4:67:74:78:ac:53:28:95:1c:
24:e9:8b:84:40:4b:ac:24:54:ab:30:12:99:11:54:
55:cc:c4:c1:5f:6d:bc:0a:2f:bf:58:34:20:c4:a4:
1c:e2:66:5b:60:56:49:f4:fb:16:ad:5f:33:9a:da:
8f:0a:25:e3:c8:2e:c8:1e:02:af:38:b8:1a:27:b2:
03:a2:c4:51:52:ee:19:e3:53:26:f8:e7:fe:7f:da:
bc:f3:d2:c4:e1:d4:93:66:e3:92:5c:f0:e2:49:41:
12:5f:d6:ce:9e:12:3c:c0:00:78:07:20:2d:50:4f:
22:6e:5b:5e:fa:49:fe:ed:60:72:87:4d:5d:1c:3d:
b4:3e:0e:b6:be:45:41:96:36:f0:ed:87:7a:8f:49:
09:a1:52:ff:b6:8e:b9:e0:f5:45:52:5b:e4:af:c7:
4f:3c:47:32:61:4c:68:1d:36:2b:69:e0:fd:46:ad:
e1:57:4b:e2:5c:d0:1b:10:f4:7e:d0:8e:63:76:30:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CD:46:10:A8:5B:65:AD:C3:EC:89:5A:61:9E:D9:F0:77:3B:FC:7A
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/9D77897232CC11EEAEE9A4674AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.103.0/24
Signature Algorithm: sha256WithRSAEncryption
38:d8:66:05:bd:8a:21:d8:8b:fd:c9:c1:40:71:de:e1:6e:86:
f9:7f:12:ce:57:0a:dc:c0:c0:f1:50:90:80:5d:37:94:95:31:
fb:96:55:eb:a1:fe:7c:08:09:aa:b3:a0:a2:a8:3a:80:83:97:
c5:29:0e:7d:44:29:f8:29:2a:8a:8e:c8:85:6e:13:93:5e:a0:
49:13:62:14:0f:cd:f6:4a:69:fc:89:72:e1:96:bc:1b:42:29:
9f:95:b5:69:ca:fb:bd:4a:f1:2e:e9:ff:00:bb:e9:1c:be:6c:
a8:05:ff:03:d4:d3:54:7f:28:58:a4:08:3a:41:04:80:98:20:
48:0e:49:69:f3:cc:85:09:b3:70:c6:b3:93:fe:72:b2:a1:e0:
69:87:8e:11:0a:b9:a9:c7:d5:b4:73:2e:ba:e2:76:14:0d:df:
49:0d:30:2d:92:f6:b6:b1:32:44:ee:57:28:a8:b2:25:76:c9:
3f:0a:62:6c:1d:91:f2:06:3e:c3:c2:f1:50:ae:6d:21:2b:16:
a2:2e:01:0a:ff:5b:02:21:53:b1:1b:90:ea:1c:5b:de:06:ed:
f1:72:51:74:ed:8f:b1:9d:c7:b5:b3:87:3d:6e:97:bc:97:81:
57:80:b3:26:04:2f:c5:6e:48:4b:b0:22:01:67:f6:84:3f:ac:
b3:0d:b9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org