Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/11C7A286EB0F11ED802EA94B4AD9E6FC.roa
File: 11C7A286EB0F11ED802EA94B4AD9E6FC.roa (raw, json)
Hash identifier: tMKSyZDlFi9Vg0g2LTbQdMDJsqcefYiEal+PTXlS2rs=
Subject key identifier: 9D:F4:3A:17:96:87:81:F8:96:08:BF:A5:64:82:C2:9F:A2:73:59:34
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0A9E
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/11C7A286EB0F11ED802EA94B4AD9E6FC.roa
Signing time: Fri 05 May 2023 06:35:47 +0000
ROA not before: Fri 05 May 2023 06:35:44 +0000
ROA not after: Sun 05 May 2024 06:35:44 +0000
asID: 399471
IP address blocks: 161.123.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2718 (0xa9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: May 5 06:35:44 2023 GMT
Not After : May 5 06:35:44 2024 GMT
Subject: CN=6454a3c3-8df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:61:33:88:77:8a:2d:9e:c3:6b:c8:9d:60:
8a:14:24:36:86:bb:0e:92:ad:2b:8d:a3:50:6a:49:
b3:d3:e5:c9:58:d4:9f:61:ef:6e:8f:44:41:f7:ff:
e0:e7:f4:bd:4f:a4:c8:47:81:44:51:80:c2:e6:4d:
68:d8:18:2d:e0:57:c2:15:16:0f:4e:3c:63:49:78:
68:8f:ff:50:dc:b7:c2:92:0f:a7:e7:60:c7:6a:2b:
d3:e4:29:6f:91:53:3b:41:59:5f:00:5f:aa:4e:5b:
71:be:13:1c:fe:e6:0c:b5:ba:37:4d:6a:32:89:34:
2e:93:fe:db:52:17:37:b5:07:2d:f2:f8:c4:4e:af:
72:fb:f1:ec:ea:51:d7:68:0a:d1:2a:10:45:2f:79:
00:7f:37:81:8d:c3:27:6d:b6:94:a8:b5:3c:3f:a1:
78:54:ac:83:e3:36:cb:c3:2b:12:e4:d8:a3:49:29:
fa:5f:02:ec:b3:b6:08:9d:bb:aa:57:d3:65:2e:2f:
8b:b1:25:8a:b3:00:de:7e:18:63:8f:b7:07:d8:ba:
cf:b4:61:8a:11:fd:04:e0:7f:e7:b2:e5:e3:40:db:
13:9b:c6:24:2d:90:85:52:f4:55:a7:d0:c5:ce:8d:
2a:c2:50:a0:49:e8:cd:9f:eb:20:25:86:52:4b:b3:
f2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F4:3A:17:96:87:81:F8:96:08:BF:A5:64:82:C2:9F:A2:73:59:34
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/11C7A286EB0F11ED802EA94B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.241.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a6:f3:f7:6b:39:71:a2:49:75:bc:e8:3d:ce:62:9e:2b:b1:
6f:1b:fd:87:85:e2:b6:f1:19:b5:17:c9:7a:e3:28:56:f1:f3:
10:8c:4d:46:8d:1f:a8:f9:f8:5e:c9:69:a3:c1:60:f0:05:a3:
3e:4a:6b:1e:f2:14:dc:ff:e4:9c:16:fa:c6:16:91:51:98:49:
ce:99:0c:8b:68:f2:8d:8b:75:d4:01:6d:01:20:0b:e0:de:ef:
38:3f:86:9c:b2:19:d4:cd:da:ca:6d:da:e5:c5:92:96:3e:b6:
74:b6:6d:4c:e2:57:e0:fc:3c:fc:70:e6:fe:13:80:f9:bd:f4:
57:03:b9:80:2b:a6:a9:f8:d4:67:45:01:aa:be:ab:16:e7:5a:
82:37:73:0a:8c:76:e1:59:8b:f4:f9:b0:e8:a9:58:20:2e:19:
70:43:80:21:98:d3:f1:44:76:f1:97:2b:15:92:02:b2:19:6c:
1b:ba:a9:c3:a2:ae:e4:2f:53:74:a8:98:9c:69:74:66:51:46:
52:ad:89:d8:d5:5c:96:07:48:70:8c:16:4d:29:5c:4e:5e:cf:
43:05:45:b4:27:3d:ac:0b:92:11:55:ec:dc:75:08:2d:de:46:
ec:e3:6a:82:43:89:26:08:d5:80:65:e0:35:ca:ab:73:df:e5:
bd:4e:79:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org