Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/BC355962174B11EE942DAA264AD9E6FC.roa
File: BC355962174B11EE942DAA264AD9E6FC.roa (raw, json)
Hash identifier: xuL5BAFL0UPHxGPA4W2ccF0ZkZ3ikSpluf5PO0EDsv8=
Subject key identifier: EA:88:56:91:B6:31:61:28:D1:04:2F:ED:9C:2A:8F:01:05:B7:BA:E2
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 0404
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/BC355962174B11EE942DAA264AD9E6FC.roa
Signing time: Fri 30 Jun 2023 13:40:54 +0000
ROA not before: Fri 30 Jun 2023 13:40:51 +0000
ROA not after: Sun 30 Jun 2024 13:40:51 +0000
asID: 328227
IP address blocks: 156.0.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1028 (0x404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Jun 30 13:40:51 2023 GMT
Not After : Jun 30 13:40:51 2024 GMT
Subject: CN=649edb66-321f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:44:ce:6c:9e:d0:e2:ab:e8:66:16:09:f0:
c4:7a:74:ec:f5:9d:f3:92:07:0d:9d:15:d6:b1:a1:
63:fc:f2:6f:0e:c1:b0:d8:c4:f8:71:43:8c:6d:62:
03:ba:c7:89:e6:81:56:02:38:40:0b:30:b6:b9:f3:
f0:c5:29:14:7f:9b:d5:98:12:a3:de:39:63:e7:ec:
b8:5f:91:a2:97:47:cc:03:de:5f:c1:fe:a3:89:9c:
2e:ac:4c:7f:f4:6d:17:ef:47:f8:23:b6:75:63:5c:
dd:37:a1:85:3c:59:10:02:75:2a:1e:c1:a0:cb:66:
88:89:ee:76:48:cc:49:1d:e6:0a:69:ab:91:fc:51:
a4:e8:71:2f:16:1c:9c:5b:c2:0c:ce:17:bd:63:bf:
a6:5a:fc:ad:34:ca:d1:fb:04:80:49:6f:5f:00:ad:
b1:0d:4c:14:27:71:e4:4b:17:fd:24:e7:a5:77:8a:
fe:ac:0f:2c:4c:06:dd:25:d2:d9:d3:5e:85:5c:dd:
2c:eb:21:96:b8:0b:7b:2e:dc:ea:a9:e7:ea:1c:3a:
92:cf:ea:05:18:8b:72:32:0f:cf:8a:a1:16:6b:97:
5b:e3:ae:b5:92:14:12:a9:00:15:08:6a:fc:7d:6b:
00:3c:3c:cf:91:03:1b:f0:d5:61:f8:b0:55:f9:15:
5d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:88:56:91:B6:31:61:28:D1:04:2F:ED:9C:2A:8F:01:05:B7:BA:E2
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/BC355962174B11EE942DAA264AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.123.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a8:d0:7b:00:cf:10:7b:f6:61:05:d8:03:91:87:48:77:c8:
b1:dd:19:16:b8:90:5a:0e:3f:5e:f1:93:f5:31:50:24:cd:08:
c9:96:2d:0c:bf:db:15:e1:29:4f:20:4d:c3:ce:9b:b3:31:a9:
ca:f1:06:5e:07:1e:25:af:79:bc:0c:08:3c:39:19:fd:cd:d0:
51:23:ae:63:80:51:28:aa:1a:98:d4:25:61:84:74:b6:24:ed:
3b:a7:9c:29:e0:df:33:35:7c:0e:bf:0e:e9:21:2d:f8:f5:68:
c0:30:1c:e2:fd:6a:0b:c0:4b:a9:b1:36:fd:91:62:a9:b2:11:
51:6a:ca:2e:a0:07:29:39:fb:c5:8b:4d:3e:8d:06:7f:c0:51:
22:63:60:a1:53:54:b4:b0:1e:3a:f5:f0:1d:a9:6a:ef:06:0c:
5b:32:82:1e:17:ae:e4:fe:7a:49:79:ef:44:26:74:ab:2d:e2:
09:31:1b:78:29:79:42:2d:e4:a5:b6:0b:17:c9:42:b9:1e:d5:
ea:5e:2a:2e:15:88:fe:6e:b2:ae:a7:d1:9e:74:65:56:de:94:
fb:de:6e:6a:b9:15:d3:8c:5c:12:8a:e3:1b:40:5b:09:52:75:
1f:f8:14:0b:17:c2:b5:24:ec:38:43:a6:d4:ed:c7:d7:80:78:
35:c2:a8:d7
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MjZDQjZBUjExMC8GA1UEBRMoQjlGREQ4OTUzMzQ5NzE2QURBRTdBOEQxQkIxM0ND
MjdGNTIwRkZENjAeFw0yMzA2MzAxMzQwNTFaFw0yNDA2MzAxMzQwNTFaMBgxFjAU
BgNVBAMTDTY0OWVkYjY2LTMyMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuV0TObJ7Q4qvoZhYJ8MR6dOz1nfOSBw2dFdaxoWP88m8OwbDYxPhxQ4xt
YgO6x4nmgVYCOEALMLa58/DFKRR/m9WYEqPeOWPn7LhfkaKXR8wD3l/B/qOJnC6s
TH/0bRfvR/gjtnVjXN03oYU8WRACdSoewaDLZoiJ7nZIzEkd5gppq5H8UaTocS8W
HJxbwgzOF71jv6Za/K00ytH7BIBJb18ArbENTBQnceRLF/0k56V3iv6sDyxMBt0l
0tnTXoVc3SzrIZa4C3su3Oqp5+ocOpLP6gUYi3IyD8+KoRZrl1vjrrWSFBKpABUI
avx9awA8PM+RAxvw1WH4sFX5FV29AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU6ohW
kbYxYSjRBC/tnCqPAQW3uuIwHwYDVR0jBBgwFoAUuf3YlTNJcWra56jRuxPMJ/Ug
/9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI2Q0I2LzAyQjhCOTQ4OEJEOTExRUI5MUM5QTUzN0Y4QUVBMjI4L3VmM1ls
VE5KY1dyYTU2alJ1eFBNSl9VZ185WS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3VmM1lsVE5KY1dyYTU2alJ1eFBNSl9VZ185WS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjI2Q0I2LzAyQjhCOTQ4OEJEOTExRUI5MUM5QTUzN0Y4QUVB
MjI4L0JDMzU1OTYyMTc0QjExRUU5NDJEQUEyNjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACcAHswDQYJKoZIhvcNAQELBQAD
ggEBABao0HsAzxB79mEF2AORh0h3yLHdGRa4kFoOP17xk/UxUCTNCMmWLQy/2xXh
KU8gTcPOm7MxqcrxBl4HHiWvebwMCDw5Gf3N0FEjrmOAUSiqGpjUJWGEdLYk7Tun
nCng3zM1fA6/DukhLfj1aMAwHOL9agvAS6mxNv2RYqmyEVFqyi6gByk5+8WLTT6N
Bn/AUSJjYKFTVLSwHjr18B2pau8GDFsygh4XruT+ekl570QmdKst4gkxG3gpeUIt
5KW2CxfJQrke1epeKi4ViP5usq6n0Z50ZVbelPvebmq5FdOMXBKK4xtAWwlSdR/4
FAsXwrUk7DhDptTtx9eAeDXCqNc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:55 2023 by rpki-client on console-ams.rpki-client.org