Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/D7B18E26209D11EEAFAC34864AD9E6FC.roa
File: D7B18E26209D11EEAFAC34864AD9E6FC.roa (raw, json)
Hash identifier: qfJ39DyQoM/T27EfJw/9IG/vWdTYdCjBiVo+eBlgYNM=
Subject key identifier: 1B:67:F4:7A:52:8A:24:01:C9:D9:E3:4C:7E:19:FE:0D:CE:DB:58:C7
Certificate issuer: /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial: 0431
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Authority info access: rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/D7B18E26209D11EEAFAC34864AD9E6FC.roa
Signing time: Wed 12 Jul 2023 10:21:20 +0000
ROA not before: Wed 12 Jul 2023 10:21:16 +0000
ROA not after: Fri 12 Jul 2024 10:21:16 +0000
asID: 399471
IP address blocks: 156.0.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1073 (0x431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Validity
Not Before: Jul 12 10:21:16 2023 GMT
Not After : Jul 12 10:21:16 2024 GMT
Subject: CN=64ae7e9f-5062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:ce:77:6f:a8:e8:c5:c9:fe:59:18:d7:7d:
1f:3a:89:e5:24:08:64:1c:60:ca:e3:7a:1e:06:f4:
2b:8b:0b:aa:be:f4:47:81:f2:86:0d:cd:c8:23:64:
38:a1:17:ee:8a:71:ab:e1:ab:33:34:a4:d7:6e:51:
31:a4:ee:27:ac:29:db:6b:3e:e1:fb:25:78:4c:a5:
23:0a:0d:fa:4f:87:59:cd:93:9c:86:ba:45:f4:7f:
12:cf:73:29:3e:88:a7:b5:73:57:3e:99:4d:aa:a2:
4c:da:59:4e:76:47:1e:2a:58:10:a5:c8:d2:20:66:
8e:47:52:97:63:88:78:78:88:7e:a4:f2:3e:1c:a6:
16:24:4b:b0:ed:c9:24:71:f4:0a:a1:0a:96:59:4a:
33:c8:64:75:b1:01:44:4c:1f:d2:f8:42:ea:9f:da:
40:dd:84:48:90:71:be:64:27:43:d5:d8:53:77:aa:
d6:d1:fd:10:b6:ce:12:32:4f:a7:e8:7b:14:47:3a:
36:9d:5b:48:d4:58:94:69:1a:15:9e:c9:3c:a2:82:
d8:d6:5b:fe:93:10:0c:f5:d1:95:cb:0d:57:2c:df:
7e:88:a6:71:13:5e:a4:79:9c:5d:fd:6b:83:21:e6:
e9:d5:5c:5a:bf:32:90:9c:68:27:94:80:f6:ff:61:
b5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:67:F4:7A:52:8A:24:01:C9:D9:E3:4C:7E:19:FE:0D:CE:DB:58:C7
X509v3 Authority Key Identifier:
keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/D7B18E26209D11EEAFAC34864AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.103.0/24
Signature Algorithm: sha256WithRSAEncryption
55:10:dc:45:51:fb:31:3a:b5:c2:f4:06:60:76:78:7e:00:80:
cd:97:f1:c4:b6:ab:48:3f:6b:bf:a5:e1:66:99:9c:9c:d8:84:
d6:92:fc:e7:fa:4e:4e:b4:6d:53:69:c3:10:2f:9f:b2:ef:e2:
c5:ff:e4:89:74:42:b9:e3:0a:07:13:f7:54:51:fc:30:9e:98:
d6:8f:93:27:26:94:b3:86:9c:d9:62:77:0c:57:a6:f6:ac:4d:
25:8b:a1:7d:41:4d:07:54:53:76:15:09:13:54:f8:3d:79:12:
06:79:5d:ae:ec:4a:b8:df:74:68:57:0b:69:a6:33:c1:52:41:
56:83:a7:a0:93:1b:9d:68:e4:d8:76:ce:c3:11:e5:96:71:9f:
91:95:0e:3a:17:65:f7:4b:39:4d:dc:90:59:08:07:6a:96:a0:
6e:87:4d:27:55:be:3d:93:8d:0c:3f:a8:41:0c:b0:1f:b6:85:
28:a2:d2:9d:b2:83:ba:c5:81:1d:31:f9:ce:25:da:e2:4e:0d:
73:52:3f:c9:85:db:d4:39:2f:76:0a:79:ee:7e:cd:17:bf:be:
d7:fd:3f:62:a9:98:4c:61:ae:7f:3f:73:a1:f1:ff:fc:cb:21:
be:29:21:88:78:8e:84:c0:71:66:e7:29:a9:59:ee:fb:ed:c7:
58:f9:9a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 4 13:59:36 2023 by rpki-client on console-fra.rpki-client.org