Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/258AAAF23D8111EDAC5D74B1F1222468.roa
File: 258AAAF23D8111EDAC5D74B1F1222468.roa (raw, json)
Hash identifier: Gn+7eHG9RE/jNOqEi9xbTZfBRsgHDBbORxwghgXAgt0=
Subject key identifier: BC:52:A8:CB:7E:9F:8E:69:0D:80:27:F8:4A:17:26:24:68:F5:F5:3C
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0871
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/258AAAF23D8111EDAC5D74B1F1222468.roa
Signing time: Mon 26 Sep 2022 09:54:01 +0000
ROA not before: Mon 26 Sep 2022 09:53:57 +0000
ROA not after: Tue 26 Sep 2023 09:53:57 +0000
asID: 203999
IP address blocks: 161.123.132.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2161 (0x871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 26 09:53:57 2022 GMT
Not After : Sep 26 09:53:57 2023 GMT
Subject: CN=633176b9-aefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:a0:67:c7:32:6a:fd:1b:b3:35:09:8b:54:
6b:f7:9c:b9:18:7c:97:a4:88:ab:02:01:56:c3:80:
2e:dd:e5:69:8e:31:2f:bf:03:28:d6:22:81:34:26:
c1:bd:6b:84:62:10:ed:7b:ff:c1:00:e6:f4:b9:74:
97:59:68:dd:56:a1:64:c5:b4:18:d0:37:05:3c:1f:
8f:ca:4a:76:8d:4d:81:5a:9d:de:4b:68:23:8a:47:
0b:e0:48:6c:0c:d0:cd:98:8d:55:43:ee:6c:a4:e2:
96:d1:b0:54:88:87:3f:a1:91:03:f1:f3:c0:dc:69:
5a:b5:fd:5a:1b:5c:af:71:a5:ef:66:20:53:3d:ad:
cb:9d:03:83:a5:9b:61:75:12:b8:9b:59:32:a7:60:
7d:76:dd:8f:98:dd:6b:6e:7e:ea:52:62:04:3d:26:
8a:49:83:cb:b3:02:ee:76:76:2f:c7:bb:cc:0a:a7:
30:5c:61:98:c6:d1:3e:d6:bf:9e:fe:95:8d:7a:9a:
24:7e:67:4a:3c:f8:59:88:b6:01:ef:74:b4:1a:44:
69:d8:00:8f:40:2d:3e:5d:39:83:38:ab:a1:79:85:
99:e3:34:70:1f:bb:21:9a:e1:b0:78:47:ca:93:c8:
fe:48:0b:e6:f4:33:32:6f:99:f5:75:d0:c2:5a:9a:
f7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:52:A8:CB:7E:9F:8E:69:0D:80:27:F8:4A:17:26:24:68:F5:F5:3C
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/258AAAF23D8111EDAC5D74B1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.132.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:34:1a:3c:ab:54:81:39:7c:76:8c:ab:3e:38:84:c3:3d:ca:
16:98:c9:55:3b:bd:44:28:84:af:2d:53:be:4d:3a:94:9e:a7:
ee:48:aa:69:83:e1:42:a8:a4:ef:df:b6:34:d2:2e:eb:2d:88:
86:2a:3a:8e:bd:1d:55:f1:b3:4b:1e:4a:46:cc:45:33:72:c5:
fa:60:0d:32:8a:01:0c:6e:4a:86:54:99:d4:32:3a:c5:d6:74:
b5:9f:72:c2:c6:22:81:89:41:15:94:cc:bf:5c:2e:b5:a0:ff:
45:ce:ea:b9:a4:bc:46:05:f5:ca:11:c8:a5:6d:2f:10:7c:92:
59:55:72:ac:4f:4e:91:0a:a6:16:b0:8b:3f:07:16:9c:f6:e0:
21:33:4b:c3:e0:f0:f3:47:95:89:43:0f:05:7c:c7:8f:54:a1:
f2:0f:72:84:4d:44:a9:3c:38:c7:9e:5a:11:f8:ff:d6:5d:25:
7a:be:6c:f7:5a:55:c9:a7:d9:53:1b:e8:39:8e:64:4c:75:d8:
9e:69:96:73:11:7b:d4:17:d4:58:c2:b7:44:e3:7e:68:de:b9:
ba:f0:d7:fb:2f:35:75:57:19:b2:d3:0c:6b:9e:c3:b8:12:b2:
e2:ab:e6:2e:5f:48:cd:fc:f3:02:8c:af:1b:ca:56:d5:a4:34:
20:1d:5d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org