Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/49E470FCF0E811EDA1E783884AD9E6FC.roa
File: 49E470FCF0E811EDA1E783884AD9E6FC.roa (raw, json)
Hash identifier: QQjmi06kytY7x5F4pPpfbyK4bshrXmqjr9A7J4y7xO4=
Subject key identifier: B4:74:20:7B:5E:F9:C7:2F:69:30:F9:EC:18:D5:21:05:D0:CC:5F:4D
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0ABA
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/49E470FCF0E811EDA1E783884AD9E6FC.roa
Signing time: Fri 12 May 2023 17:13:18 +0000
ROA not before: Fri 12 May 2023 17:13:13 +0000
ROA not after: Sun 12 May 2024 17:13:13 +0000
asID: 399471
IP address blocks: 161.123.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2746 (0xaba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: May 12 17:13:13 2023 GMT
Not After : May 12 17:13:13 2024 GMT
Subject: CN=645e73ae-9d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:20:6c:ca:de:d1:9c:57:7a:fd:c3:67:c9:f9:
a9:62:be:2c:87:61:48:1f:f9:4c:1a:b6:d7:b5:05:
f5:f2:5f:9b:d7:f0:7c:f0:58:ad:23:2b:c3:eb:f5:
21:77:e6:55:5d:12:d8:ec:6b:b6:d1:e2:87:25:83:
36:32:d8:14:69:d2:2d:4c:25:65:17:3d:ee:cb:f0:
1d:6b:a4:f1:5a:45:e6:ff:89:e4:ec:bd:0f:06:ab:
10:46:51:4d:ea:2a:d4:45:57:7c:2b:28:25:c0:a2:
2c:9a:b5:aa:a8:ae:70:9a:00:60:a1:54:2c:c4:5b:
d5:03:5a:14:83:06:78:2a:e4:ef:30:c2:6e:23:dc:
38:14:1a:31:5e:23:8c:88:d8:20:66:e1:51:0e:0e:
28:4c:18:a2:26:8d:54:b7:7e:b4:8e:66:25:ef:28:
bc:03:3c:eb:68:92:28:f3:58:30:ef:88:6d:94:03:
73:b5:eb:0f:75:ee:78:6f:8b:f9:43:27:9b:c8:23:
90:f7:e9:1a:47:ad:df:5c:5c:f9:27:34:4a:c7:98:
94:c7:d1:3b:52:d3:cf:d2:88:ba:09:5a:35:cd:d1:
a3:a4:bc:95:a6:41:f2:60:7e:d0:c3:1e:09:a5:44:
79:cf:f8:34:0c:bd:6e:97:d1:e1:f1:4e:3e:19:c5:
f8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:74:20:7B:5E:F9:C7:2F:69:30:F9:EC:18:D5:21:05:D0:CC:5F:4D
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/49E470FCF0E811EDA1E783884AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.213.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ba:22:d2:e2:8b:d8:54:7a:b1:08:66:fa:7d:82:ae:97:e0:
4d:73:e5:9d:35:f0:71:57:00:a1:8c:39:f3:9d:d1:c5:6c:06:
6f:d6:a6:ed:0b:8d:c7:ce:b1:c3:50:c1:d4:de:31:18:0e:ac:
49:12:45:d1:d4:93:1c:7b:88:1f:15:82:2b:1d:a9:f2:97:36:
55:e0:40:98:52:06:79:cc:94:97:63:4d:14:7a:1f:15:11:df:
9e:d2:ca:a6:46:76:c8:3e:51:33:4c:98:05:4d:f0:8b:7c:93:
70:33:01:a3:54:9d:c4:76:b3:73:32:41:f4:50:ad:d2:0e:8d:
af:aa:5e:88:9b:d5:1b:36:a5:f2:9b:e4:45:95:99:6f:8a:1a:
92:d0:e7:17:96:b9:f8:3d:40:30:d4:32:a5:fb:e5:3c:fd:91:
c2:45:42:55:62:16:ec:4f:25:18:a9:0d:fa:a8:db:f0:cb:a7:
f1:9e:27:d9:90:ad:2f:f4:6f:0d:61:72:dd:aa:47:57:5b:10:
cb:63:5b:45:ca:09:a0:1e:84:5c:38:5e:0f:5b:ef:57:bd:4c:
5e:5b:0a:63:b1:a6:b2:aa:28:10:87:3d:31:cc:7c:32:6b:74:
89:9c:ce:41:7b:24:4d:98:38:95:7b:5c:93:65:f4:ac:07:c3:
72:7f:f8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org