Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/66ECA1302FB711EDA72D9B7DF1222468.roa
File: 66ECA1302FB711EDA72D9B7DF1222468.roa (raw, json)
Hash identifier: DfKezfgGTyfhCDVPJidSoSg3bZchVg4+ItEbI/CLisk=
Subject key identifier: 86:F4:5C:37:73:1B:EC:78:74:D9:1C:8F:64:47:A5:81:94:D5:DD:83
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 080C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/66ECA1302FB711EDA72D9B7DF1222468.roa
Signing time: Thu 08 Sep 2022 20:47:07 +0000
ROA not before: Thu 08 Sep 2022 20:47:03 +0000
ROA not after: Fri 08 Sep 2023 20:47:03 +0000
asID: 205431
IP address blocks: 161.123.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2060 (0x80c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 8 20:47:03 2022 GMT
Not After : Sep 8 20:47:03 2023 GMT
Subject: CN=631a54cb-fdfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:53:fa:47:61:ce:c8:7b:13:63:68:c5:b7:71:
2f:60:9e:28:58:f0:0a:0c:79:fa:e9:f4:e0:ba:fe:
08:52:3d:de:96:3a:6c:8a:fa:22:b3:4e:f2:b1:3d:
7e:a1:62:85:12:0b:48:25:af:56:69:73:7c:67:f3:
ab:01:6e:b2:d9:d1:32:99:98:71:f0:2f:ab:e9:d7:
1f:29:4d:d3:b4:dd:9a:0c:a7:e9:d6:c5:55:c2:4d:
3a:7d:8f:2e:58:dd:bf:31:2b:4f:95:d0:de:59:5c:
7f:4b:e3:24:d5:a4:3e:9c:ce:4f:81:ec:2e:31:d8:
0c:9f:9c:ab:b6:02:e7:6f:65:50:17:85:d5:7e:91:
5b:6d:5b:8f:b3:42:7d:5d:9d:be:b1:17:c3:f0:d5:
50:6c:62:99:8b:2d:ab:80:c2:de:08:03:d7:7b:8a:
af:51:af:d2:31:97:be:88:ec:55:70:7e:b7:c0:bc:
89:47:3d:d9:a8:23:ed:1a:95:71:52:90:a3:f6:b7:
4b:9a:c9:45:90:bc:3e:54:eb:bf:e4:f0:30:3f:1f:
e5:ad:7d:ae:92:95:f9:b0:13:73:b2:f4:9f:88:54:
bd:06:95:84:17:f5:4e:c4:a7:b7:d3:fd:99:06:31:
35:bd:cf:76:95:e6:73:fa:97:18:40:87:81:1f:d5:
0f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F4:5C:37:73:1B:EC:78:74:D9:1C:8F:64:47:A5:81:94:D5:DD:83
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/66ECA1302FB711EDA72D9B7DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.100.0/24
Signature Algorithm: sha256WithRSAEncryption
41:04:49:69:35:95:73:a0:53:6b:3a:70:db:37:5a:9b:61:5d:
37:aa:7f:21:dc:b5:c8:9f:16:bd:cb:3d:7e:2a:e6:13:ee:99:
a5:a5:11:ce:03:32:29:1f:13:30:44:57:d8:b4:e9:65:63:6f:
21:bd:80:d6:3b:9a:83:6e:6b:4d:de:66:8e:91:26:7e:c7:30:
91:af:54:7a:df:7a:ed:33:a3:49:10:6c:9c:c5:ef:db:d0:48:
a4:77:b3:27:a7:a7:5e:75:ed:8f:fb:8e:dc:ed:b0:3d:90:58:
a5:83:8d:09:c8:5e:15:06:9e:54:a6:63:73:ff:b1:5b:8b:42:
9e:fe:36:01:c8:8f:cb:b5:21:53:57:c3:48:fc:c9:45:41:e1:
0c:c8:5e:74:61:7d:8d:86:d1:0c:5a:a8:c2:fd:49:5e:ff:c3:
f5:65:04:95:a1:02:1e:43:90:a1:95:62:5a:d0:b6:59:8a:df:
60:94:23:55:8c:4c:1e:98:b3:77:b8:52:c2:08:fb:76:8e:b1:
e2:7e:2e:fe:7b:66:2e:4b:35:04:37:01:5f:20:ab:9a:1e:0a:
b3:88:16:fd:7a:1b:4a:64:e7:80:5e:ed:76:f6:07:72:b2:5a:
83:53:65:af:27:21:51:e0:c1:9c:79:3b:67:8b:e3:44:0a:78:
dd:30:27:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org