Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/010B654EEB3D11ED9E6EED544AD9E6FC.roa
File: 010B654EEB3D11ED9E6EED544AD9E6FC.roa (raw, json)
Hash identifier: 8nk4kR8PhWs8yEO6TBAQk7eR2x9lZTI39WHMG4DLpXw=
Subject key identifier: 44:CF:A0:10:33:01:D6:40:D1:D5:61:2F:4D:35:3D:E7:CE:91:25:DE
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0AAA
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/010B654EEB3D11ED9E6EED544AD9E6FC.roa
Signing time: Fri 05 May 2023 12:04:36 +0000
ROA not before: Fri 05 May 2023 12:04:33 +0000
ROA not after: Sun 05 May 2024 12:04:33 +0000
asID: 205431
IP address blocks: 161.123.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2730 (0xaaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: May 5 12:04:33 2023 GMT
Not After : May 5 12:04:33 2024 GMT
Subject: CN=6454f0d4-cfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:3e:80:7d:e8:a0:cc:8b:da:87:61:2e:a4:
34:e4:5f:85:00:ef:ad:9a:d5:61:2e:c1:20:e2:4e:
ad:88:60:92:1f:f0:26:04:7f:9c:b8:f8:a5:a2:13:
7a:bb:20:2c:ea:b8:2d:df:4e:88:02:55:6a:27:c7:
81:0f:29:04:bf:1b:e3:9f:19:de:35:23:f4:af:e9:
51:31:cf:6f:69:e6:48:cc:e5:45:c5:18:fe:d5:06:
b4:80:7e:82:f6:7e:30:c5:63:2a:b5:f1:30:ff:7e:
69:c0:da:fe:42:78:46:39:b4:81:bf:83:43:57:48:
42:02:27:0f:ac:02:87:09:33:52:38:65:c0:1e:69:
cd:ca:ea:69:2f:db:f3:08:61:bb:6e:7d:64:1d:b5:
18:1d:2f:8a:ef:5c:ee:04:9b:86:ba:1a:60:30:f3:
92:fb:e9:3e:6e:ad:e1:42:bc:76:21:94:75:65:88:
f6:c1:29:32:a9:ec:67:f8:d1:d0:87:17:33:20:3d:
28:10:d1:1e:e8:5a:6e:b9:91:85:ef:c9:3e:97:52:
38:f1:57:a5:b2:12:e0:9c:fd:b3:c2:fc:88:2a:05:
10:3d:d4:ad:a0:e4:30:d6:9a:81:7c:9c:b1:5e:b3:
dc:ac:e0:73:2f:5d:7d:49:d0:d1:28:44:0c:16:6d:
e2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CF:A0:10:33:01:D6:40:D1:D5:61:2F:4D:35:3D:E7:CE:91:25:DE
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/010B654EEB3D11ED9E6EED544AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.241.0/24
Signature Algorithm: sha256WithRSAEncryption
92:75:a1:bd:3e:9a:00:53:f1:a2:3d:5c:69:8d:93:6e:8f:ce:
4f:7f:11:e6:c6:a3:ae:a2:04:1b:84:27:03:8d:11:1d:8f:1b:
9f:de:53:66:f2:94:d6:93:90:99:6a:02:66:7a:6a:c5:35:bb:
e7:e3:74:3e:1c:7b:ec:31:07:d3:03:73:ad:e3:3a:d9:ae:7c:
bf:9f:67:97:4b:d4:30:14:7e:5f:95:16:73:c1:74:f4:ed:15:
88:be:94:2d:1f:08:76:6e:d5:4c:c4:a6:cc:9a:55:fd:97:16:
60:6b:5f:2d:7d:c4:66:23:5e:78:df:23:43:9e:06:18:ff:3e:
cb:16:46:b2:38:ce:99:0f:f2:61:ed:4e:e8:7d:d2:05:fb:64:
25:a8:af:4f:fb:eb:48:39:92:d7:cf:30:c3:cc:ff:19:6d:e8:
14:02:0a:90:dc:b5:0d:d2:a0:89:e8:fe:b9:64:4f:cd:c2:cd:
3e:ea:69:f2:a6:ae:63:8f:5b:54:84:ad:3a:12:0c:36:51:4e:
50:da:7d:b9:e6:81:3c:a2:41:c5:20:56:5a:0d:ba:53:09:bb:
37:aa:4f:b8:ee:00:bd:5c:a0:c8:93:2f:9d:05:cd:2f:42:00:
5e:32:65:62:c5:74:4f:2a:8b:53:75:00:50:c9:31:3a:b1:1b:
69:85:2d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:31 2023 by rpki-client on console-ams.rpki-client.org