Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7103F28C404A11EEA9FF6C3C4AD9E6FC.roa
File: 7103F28C404A11EEA9FF6C3C4AD9E6FC.roa (raw, json)
Hash identifier: oLZgbhOZj7bh9bDvmSkVOOVU3kL1T/QTYRQHeXP0GvM=
Subject key identifier: EF:E2:C1:33:26:97:8A:1C:55:A0:15:A9:C2:30:F5:C5:8E:59:0E:11
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0BB5
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7103F28C404A11EEA9FF6C3C4AD9E6FC.roa
Signing time: Mon 21 Aug 2023 17:44:56 +0000
ROA not before: Mon 21 Aug 2023 17:44:53 +0000
ROA not after: Wed 21 Aug 2024 17:44:53 +0000
asID: 207990
IP address blocks: 161.123.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2997 (0xbb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Aug 21 17:44:53 2023 GMT
Not After : Aug 21 17:44:53 2024 GMT
Subject: CN=64e3a298-1abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:3b:8f:ce:bd:bc:88:ca:b5:ac:2b:c9:d1:
2e:7f:5c:e5:aa:e7:a7:6e:4f:69:6b:6a:b6:76:f5:
06:f9:fe:41:12:01:8d:d2:08:28:42:ca:f3:8a:6e:
4c:b6:b7:77:b3:d8:79:be:45:ce:ff:3b:b5:8d:69:
a4:c2:f6:44:89:5b:6b:58:a4:fd:8a:7a:68:f2:73:
c7:fd:6c:ce:5a:70:64:f7:77:0e:c4:01:ad:16:b3:
c2:29:cb:45:07:37:30:87:ec:23:60:7d:e8:3b:38:
03:99:f2:fa:8e:8d:3a:d1:e1:08:8f:60:06:89:ad:
a9:6c:76:62:b2:18:45:99:21:65:45:83:42:9b:8e:
ba:85:3f:cf:e9:5f:93:a0:66:f7:ea:96:93:55:90:
1d:a1:8b:42:73:56:a6:c0:51:db:2f:13:e4:59:fb:
e0:48:1f:1c:ec:36:82:e3:0f:ff:ff:85:27:7f:7c:
85:82:fd:ed:31:41:b6:40:2a:7a:c2:55:79:e2:f7:
e4:a5:5f:57:e0:0e:24:13:99:99:1b:53:a7:ab:7f:
a8:09:48:64:10:de:9e:5c:aa:77:00:3b:f4:5b:80:
53:e1:b9:d8:33:26:cf:eb:4d:6d:3a:56:2d:7a:3f:
53:ae:d2:f6:9e:9a:26:04:67:a5:fc:2d:15:da:a7:
10:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E2:C1:33:26:97:8A:1C:55:A0:15:A9:C2:30:F5:C5:8E:59:0E:11
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7103F28C404A11EEA9FF6C3C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.218.0/24
Signature Algorithm: sha256WithRSAEncryption
69:af:95:8f:fa:ae:e5:8c:06:8c:54:0b:b2:27:79:2d:16:50:
5b:f6:1a:cb:72:94:6f:78:a3:ff:7e:62:6c:81:a6:8c:b2:c0:
9b:41:a1:5d:52:ca:17:a9:40:f5:da:04:33:c3:7b:d3:24:cf:
d2:c2:15:00:9e:31:69:92:de:2c:30:cf:0e:37:97:d5:de:5a:
69:b1:2e:8d:d1:98:91:18:96:50:18:a6:ff:d5:1f:26:fa:67:
34:33:99:d4:37:58:6a:21:ef:40:a6:d5:bf:ca:97:3e:40:15:
6a:e9:eb:ee:bf:f0:eb:a8:35:e9:eb:25:7f:5d:b1:b8:50:bc:
c8:b7:73:11:50:51:88:79:d9:03:cd:87:be:9c:4d:a9:ff:9d:
b4:3c:ba:86:af:5a:fc:d7:6f:5f:d6:30:99:cf:7c:00:57:67:
cf:6b:ca:19:58:c6:98:fd:c8:73:60:92:ec:9a:ac:53:e5:35:
d9:49:fd:f2:65:c7:fa:27:5a:4f:89:99:08:18:e6:2a:75:f0:
ce:77:25:e9:1e:2e:52:bc:f0:c4:b2:42:0c:55:e2:9f:04:e0:
50:fe:6b:7a:03:89:93:04:35:1f:b2:6a:5f:58:18:52:99:6a:
b4:1f:44:01:7a:21:5f:99:af:d3:ff:09:30:4b:77:f7:b1:a1:
f7:4e:d8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 22:44:07 2023 by rpki-client on console-fra.rpki-client.org