Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5AFF48B8191911EE93D054184AD9E6FC.roa
File: 5AFF48B8191911EE93D054184AD9E6FC.roa (raw, json)
Hash identifier: jskAIFRAJVlS6A+d6nGd4Hu1dQ5o79zVx+VfSNZG6lg=
Subject key identifier: CD:A1:47:D5:F6:1C:3A:20:85:FB:F6:19:22:05:BC:91:AB:D4:EA:EA
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B14
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5AFF48B8191911EE93D054184AD9E6FC.roa
Signing time: Sun 02 Jul 2023 20:45:19 +0000
ROA not before: Sun 02 Jul 2023 20:45:15 +0000
ROA not after: Tue 02 Jul 2024 20:45:15 +0000
asID: 8100
IP address blocks: 161.123.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2836 (0xb14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 2 20:45:15 2023 GMT
Not After : Jul 2 20:45:15 2024 GMT
Subject: CN=64a1e1df-f187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:29:4e:23:44:29:26:3d:37:32:80:29:e6:
ea:96:61:5e:62:05:58:d1:ce:df:8b:f8:86:37:0c:
0c:28:21:c7:8e:6c:d6:81:fc:db:15:b2:db:bb:13:
ac:96:c2:a2:dc:8a:67:43:5c:2a:17:ee:5b:e6:49:
d3:60:9f:f9:a1:7a:59:78:1e:04:37:6a:aa:5b:e3:
b2:16:54:f4:6e:8b:46:cd:46:f4:59:5e:ee:53:c2:
6e:11:36:0f:5a:8d:8b:30:32:68:0a:9b:5a:86:69:
34:03:3a:9c:9c:68:8a:7a:3e:d6:83:6b:d7:7b:28:
2a:d5:f4:c9:42:30:f7:2e:87:af:c1:b8:81:09:1d:
94:40:24:05:ab:b1:8e:b6:65:cc:b7:02:65:76:95:
3b:c6:6e:93:e3:ae:b4:0f:9f:82:e7:0b:8f:47:94:
09:ec:0f:31:a8:16:e6:8f:b2:a2:b6:54:82:a7:8c:
10:9f:dc:79:b1:6b:15:6c:b0:22:4c:4c:60:5a:9f:
99:40:70:8f:24:48:3a:0d:0a:f6:83:56:a9:48:fe:
1c:71:a2:9b:cf:fc:ea:ce:cc:9b:ff:9b:22:a1:5a:
1f:02:e8:bf:87:bf:22:f6:16:43:b4:0c:93:7e:ae:
62:7f:9d:b9:85:90:ad:d5:fe:d1:51:ef:28:a7:7f:
fc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A1:47:D5:F6:1C:3A:20:85:FB:F6:19:22:05:BC:91:AB:D4:EA:EA
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/5AFF48B8191911EE93D054184AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.128.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:dc:b9:36:35:31:03:8a:6a:82:70:bc:a6:11:f4:eb:53:1f:
8c:3e:b7:37:fe:ae:c9:79:bb:03:23:b7:ff:da:9c:e9:af:d1:
1b:47:6b:ab:2e:3f:ef:94:8c:e8:89:82:bf:87:df:d4:3e:65:
e9:af:7a:f0:bf:2f:ac:85:ab:f6:c4:b5:34:3f:97:cb:97:6a:
3d:82:74:17:62:8d:39:8b:71:06:2d:4a:4d:99:25:82:51:52:
93:39:af:a7:c9:c1:d8:d6:81:a2:80:a7:72:fa:27:4f:de:05:
40:77:f2:99:08:83:82:19:44:fb:97:69:6b:25:c2:48:15:f1:
94:a2:9c:66:5d:78:0c:20:cc:9e:27:0d:be:c0:22:7e:9d:9a:
4c:0a:df:95:e5:82:bc:5f:7e:a9:41:f8:ba:ed:a3:6d:03:1f:
5b:bb:a5:21:7b:1e:b6:1f:ba:8c:12:d8:8b:3e:88:1c:b0:54:
de:3e:39:6d:69:b2:e2:fe:67:b1:4f:1c:5c:91:95:89:5f:34:
d2:e4:58:e8:c2:89:4b:5c:c8:b2:58:62:13:5c:5e:8b:ad:69:
60:5a:2c:99:d1:77:2d:68:ba:62:90:db:1c:4d:a7:5a:eb:5e:
0a:33:72:a8:f1:0c:10:62:5d:c1:28:ee:3f:23:c9:0f:c2:85:
cf:8e:70:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 19:16:53 2023 by rpki-client on console-ams.rpki-client.org