Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/BA4D411A5EA811EE8BC5BB1C4AD9E6FC.roa
File: BA4D411A5EA811EE8BC5BB1C4AD9E6FC.roa (raw, json)
Hash identifier: PawiOikVCQxgMX5Fxb43pZOiAphQXBGKb8cJ+43tBtc=
Subject key identifier: 85:65:71:49:56:0B:C0:EC:15:2E:A4:B6:19:0C:A0:18:AA:A5:67:AA
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 04D2
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/BA4D411A5EA811EE8BC5BB1C4AD9E6FC.roa
Signing time: Fri 29 Sep 2023 09:15:27 +0000
ROA not before: Fri 29 Sep 2023 09:15:24 +0000
ROA not after: Sun 29 Sep 2024 09:15:24 +0000
asID: 205320
IP address blocks: 156.0.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Oct 2023 09:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1234 (0x4d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Sep 29 09:15:24 2023 GMT
Not After : Sep 29 09:15:24 2024 GMT
Subject: CN=651695af-97d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:3d:8b:b8:6f:6d:1d:f9:95:1f:ae:be:40:
bd:09:61:b0:6e:7c:1d:c1:82:3f:41:83:0e:89:8c:
89:d8:5f:21:9d:15:30:07:0c:05:40:94:8c:cb:d0:
23:a5:79:22:91:c1:c7:74:63:ea:51:e3:1d:89:b6:
68:8b:fe:7c:47:b9:ec:fb:cc:d5:b3:f3:d7:80:98:
7b:41:83:18:65:f4:68:6c:16:e2:94:73:37:01:56:
ed:fb:ae:4b:6e:84:06:bb:7b:89:a8:b3:a9:4d:df:
ff:d6:fc:03:47:05:8e:5d:d9:60:6c:c7:c9:72:ed:
7b:11:14:ee:21:07:a1:1b:ef:d8:7a:a0:bc:bb:e8:
dd:2b:ea:5e:12:b6:16:55:e3:f5:08:81:fb:61:3b:
eb:a0:02:eb:31:14:e2:da:47:62:6a:5b:ad:06:64:
e8:a8:22:97:6b:0f:3b:88:0d:bc:02:f3:46:c3:cb:
b4:9b:a2:fc:b0:fa:ab:ad:33:a4:63:42:1e:00:b0:
f0:4b:c5:15:c9:f8:89:25:79:d8:04:2e:0f:36:3d:
e5:ef:de:a4:e0:4f:80:83:f5:3b:5f:49:66:6d:e6:
cc:f9:17:76:6f:f4:ef:56:0b:1e:02:32:05:a7:99:
84:2e:0a:57:69:30:7f:ff:84:57:2a:ab:be:f0:68:
34:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:65:71:49:56:0B:C0:EC:15:2E:A4:B6:19:0C:A0:18:AA:A5:67:AA
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/BA4D411A5EA811EE8BC5BB1C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.101.0/24
Signature Algorithm: sha256WithRSAEncryption
85:95:40:ee:94:36:eb:eb:b0:c9:fd:3c:12:01:1c:d3:a9:92:
05:d6:39:ee:73:49:b6:3c:2a:a0:05:d2:d8:ce:35:d1:28:03:
d2:ca:6c:ed:ed:99:93:69:4b:36:5b:d7:a6:4f:e2:35:a9:b4:
83:e0:7f:85:03:ba:3a:1c:8a:60:78:d7:c9:5b:14:b3:0f:e3:
8b:ad:07:5c:13:d7:86:2b:df:cd:06:8d:13:a1:91:e5:37:58:
ee:70:4b:38:06:ae:14:d7:12:38:b3:66:4f:7d:63:85:17:2e:
54:97:fe:9c:20:e3:3f:09:c1:99:bf:d3:0b:8b:91:b4:dd:0b:
85:2a:74:91:f5:bd:86:c1:13:5c:22:07:d1:dc:71:c1:66:bd:
7b:aa:ca:13:29:6d:61:40:ba:d5:b9:13:38:70:40:f1:e2:91:
4f:df:9c:a2:95:3b:8c:54:eb:78:19:7e:0d:61:40:e7:cd:9d:
1f:6c:ad:32:eb:a7:7d:d2:bb:9e:5b:d1:e4:e4:2f:0d:0f:9c:
c3:ae:e0:3e:ee:1e:c3:14:db:03:3d:88:75:03:00:d5:94:78:
97:20:35:e1:1d:25:d4:9f:4c:db:6f:f6:ef:f9:e3:b8:92:ff:
b4:b0:25:60:6b:ba:bd:21:ee:d3:e9:73:95:ee:1c:8e:5a:96:
57:f7:c5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org