Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0EDFE02C044311EE8BDA570E4AD9E6FC.roa
File: 0EDFE02C044311EE8BDA570E4AD9E6FC.roa (raw, json)
Hash identifier: T7XlJQqkQru9pvwJ0JeQ++Y2X7faou4tjviSS5uffAE=
Subject key identifier: 25:93:24:97:8F:2B:FC:26:01:C1:3C:36:0E:B7:B8:6F:B4:70:58:64
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0AE6
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0EDFE02C044311EE8BDA570E4AD9E6FC.roa
Signing time: Tue 06 Jun 2023 08:20:55 +0000
ROA not before: Wed 07 Jun 2023 08:20:52 +0000
ROA not after: Fri 07 Jun 2024 08:20:52 +0000
asID: 209428
IP address blocks: 161.123.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2790 (0xae6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 7 08:20:52 2023 GMT
Not After : Jun 7 08:20:52 2024 GMT
Subject: CN=647eec67-100a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:6e:8d:28:50:ab:c2:91:72:39:69:41:61:
96:2d:7e:c0:07:bd:1e:4e:67:15:37:97:54:7c:e4:
4e:7e:e0:3e:22:1e:b4:36:5b:8d:96:ff:ac:f5:88:
bc:c4:4b:f1:5b:dd:3e:c7:b1:62:50:c6:56:c1:6f:
85:e4:15:5b:da:51:24:06:dc:7c:9a:26:86:d1:b6:
1c:4a:07:6d:a2:80:2f:45:bb:6b:30:ca:b5:4c:d0:
ba:6f:62:4d:15:32:f6:ea:8b:fe:d9:4f:d0:ba:9e:
de:b9:52:d6:fe:a0:a3:b6:c1:4e:65:fa:8c:16:2a:
24:13:14:44:59:fc:db:b1:c6:0f:78:4b:22:4d:e6:
4e:ca:b7:d5:57:51:2d:31:62:31:55:1b:6b:76:22:
8f:0b:d7:1c:34:24:77:e8:c0:22:d9:3f:93:81:52:
3a:4c:ad:34:7f:db:85:35:fe:19:1a:2d:75:1c:fb:
35:d7:4d:17:50:54:c9:30:35:e2:ff:5c:44:e8:d2:
5e:9d:0a:89:da:d8:25:c0:37:e5:b6:c4:8c:43:61:
c0:15:a2:31:34:bd:92:db:b7:a9:a2:bb:d0:97:ba:
03:01:e3:2b:c6:4d:29:bf:b6:6c:e3:9f:70:44:97:
f2:67:be:ea:be:77:e9:83:75:7c:ea:51:7b:6a:7f:
49:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:93:24:97:8F:2B:FC:26:01:C1:3C:36:0E:B7:B8:6F:B4:70:58:64
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/0EDFE02C044311EE8BDA570E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.100.0/24
Signature Algorithm: sha256WithRSAEncryption
32:85:be:9d:26:24:06:96:f6:22:2b:0d:8c:97:a0:d0:8c:a3:
55:fd:cd:5e:d0:06:fc:e9:1c:6f:4d:c6:1b:00:7f:97:83:d8:
3f:e4:b4:40:f4:54:9a:a5:b0:63:83:f2:8f:51:53:e1:2a:49:
f0:3c:cd:71:49:5b:ae:86:30:c5:94:b7:8d:cd:64:09:0d:47:
5c:47:9a:02:c4:ab:93:ff:f6:3b:aa:f7:fe:b3:76:82:e7:e1:
10:19:f0:5f:71:55:86:eb:ee:e4:65:f0:72:e4:f3:6b:2c:b3:
2b:b4:7c:18:d4:17:e6:c8:c0:81:c3:6f:45:1a:59:ea:1e:9d:
11:9e:87:42:e4:4a:2a:06:c8:65:6b:de:b9:20:d6:80:3a:c6:
f1:86:9e:8a:ca:84:f0:d4:ca:69:5c:fa:9b:16:1a:cb:54:20:
d5:98:e8:79:3c:aa:b9:54:3f:af:8f:58:76:8e:c1:d0:07:7a:
98:f8:ea:5b:e2:a5:88:ad:6f:b5:a9:71:ef:81:38:70:5f:4b:
12:41:90:14:29:24:45:e2:de:f2:29:0f:b9:1d:91:a0:94:c6:
0f:bb:12:8b:9d:54:07:f2:22:f1:63:f7:e3:6c:33:12:1a:30:
aa:bd:5a:6f:24:9e:2c:4f:82:71:75:b5:b4:af:f9:1d:90:13:
c8:a6:61:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org