Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/2A14CEA0A94011EE883314C4775412E6.roa
File: 2A14CEA0A94011EE883314C4775412E6.roa (raw, json)
Hash identifier: Lay6ETE0ecqIqbNNFHeqNifiQJ5s1blnS5GgKOVZQTg=
Subject key identifier: 03:55:74:F1:FD:98:F5:3C:54:6D:9E:18:66:EA:26:47:D9:B6:5C:36
Certificate issuer: /CN=F3668037AR/serialNumber=6EF07CF2076CC5A6096B2572AE0895FD673F4712
Certificate serial: 0670
Authority key identifier: 6E:F0:7C:F2:07:6C:C5:A6:09:6B:25:72:AE:08:95:FD:67:3F:47:12
Authority info access: rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/2A14CEA0A94011EE883314C4775412E6.roa
Signing time: Tue 02 Jan 2024 07:25:54 +0000
ROA not before: Tue 02 Jan 2024 07:25:51 +0000
ROA not after: Mon 02 Jan 2034 07:25:51 +0000
asID: 30844
IP address blocks: 152.108.0.0/16 maxlen: 19
Validation: Failed, certificate revoked on Fri 26 Jan 2024 08:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1648 (0x670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668037AR/serialNumber=6EF07CF2076CC5A6096B2572AE0895FD673F4712
Validity
Not Before: Jan 2 07:25:51 2024 GMT
Not After : Jan 2 07:25:51 2034 GMT
Subject: CN=6593ba82-a58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:a8:9f:b5:5e:b2:24:c1:39:a3:92:70:be:
d9:61:c0:8e:4d:5d:b1:28:7e:4e:4c:01:4f:a3:4c:
54:da:ae:6b:ce:8d:e6:d0:b2:f6:52:e3:9c:14:45:
b0:01:d3:d5:f6:17:3b:8f:e1:b3:85:75:0c:3d:f3:
19:cb:7e:50:73:7e:eb:57:4c:d8:44:b9:54:ee:f3:
84:ff:98:d7:b0:a8:31:27:20:91:47:b3:b9:8c:f9:
68:18:76:68:28:2d:81:aa:6a:0e:09:4b:1e:fd:3f:
f2:ff:37:d8:1d:5c:83:da:3f:ee:70:23:db:29:ad:
21:7a:38:45:4b:9e:45:29:d9:3a:fb:b3:f4:82:c0:
6f:50:aa:67:cd:02:29:82:fe:b9:f6:4b:b3:44:10:
19:b2:35:89:51:46:03:dd:6d:0b:93:68:e9:59:07:
dc:80:d5:b6:bd:5e:23:e6:0f:38:b4:d8:85:e6:66:
79:23:fc:07:c6:42:ed:af:94:45:37:b4:1a:1c:02:
29:74:48:2e:9e:00:bc:5a:be:0e:fc:08:fc:ac:b6:
be:fd:0c:71:0b:fa:d0:e4:d3:7e:ec:be:f9:2d:f4:
2d:de:f0:3b:9c:ce:aa:a2:7e:62:c7:9e:13:c3:5f:
ba:02:06:15:ea:d8:0c:bb:f1:89:76:a8:4c:d1:4b:
c5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:55:74:F1:FD:98:F5:3C:54:6D:9E:18:66:EA:26:47:D9:B6:5C:36
X509v3 Authority Key Identifier:
keyid:6E:F0:7C:F2:07:6C:C5:A6:09:6B:25:72:AE:08:95:FD:67:3F:47:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/2A14CEA0A94011EE883314C4775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
152.108.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c4:e2:6c:21:75:09:c1:f7:11:9e:e1:93:1d:fa:27:30:07:00:
ad:c2:ce:ae:27:b8:fc:d5:88:0b:66:6b:1e:19:2b:56:df:c1:
e1:65:69:79:a1:fb:b2:b2:85:c9:5c:3b:89:9d:68:2e:66:21:
f5:5a:33:1f:6e:e2:e5:82:80:38:d8:2e:ec:e7:64:c9:da:98:
6f:60:2a:ee:f8:e4:8b:84:2b:76:4c:13:a6:ff:e1:51:07:c4:
44:30:2a:0a:57:87:c8:c7:61:13:86:2d:56:55:b8:5e:9d:58:
27:85:2e:cf:e2:0a:95:9f:ed:a3:2a:aa:d7:25:4d:12:62:b4:
69:df:9d:8f:8c:ea:98:be:7b:f9:2d:23:95:6b:6c:c2:17:21:
0a:24:4c:8d:85:5c:18:7e:7c:da:86:69:e4:07:67:d6:57:d3:
69:68:62:14:18:57:02:8f:85:4f:33:5e:a8:90:86:a8:b5:a6:
2d:c9:20:af:8e:38:e0:44:e4:e1:26:ae:1a:85:11:d2:57:e3:
de:6a:b2:80:34:fb:3f:ea:da:cb:38:d1:6e:c1:2f:b8:b3:dd:
1a:27:09:f1:f6:c8:df:cb:ce:0c:30:79:45:e7:34:16:be:50:
f7:a3:c2:56:a0:22:8b:0e:4f:1e:7f:cf:f6:a3:61:71:c9:b0:
bd:ba:f0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org