Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7D281AC035EB11EE9788C6774AD9E6FC.roa
File: 7D281AC035EB11EE9788C6774AD9E6FC.roa (raw, json)
Hash identifier: sRXR21gtBTbaaS8MRI4W0C8wI7Z7nqALlF65lqOdOII=
Subject key identifier: 04:A9:1A:79:2F:2E:0D:03:C1:DD:87:33:D5:73:4B:5B:80:E3:30:1A
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B8D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7D281AC035EB11EE9788C6774AD9E6FC.roa
Signing time: Tue 08 Aug 2023 13:00:03 +0000
ROA not before: Tue 08 Aug 2023 12:59:58 +0000
ROA not after: Thu 08 Aug 2024 12:59:58 +0000
asID: 399471
IP address blocks: 161.123.102.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2957 (0xb8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Aug 8 12:59:58 2023 GMT
Not After : Aug 8 12:59:58 2024 GMT
Subject: CN=64d23c53-cb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a5:44:2b:11:c0:63:75:c5:56:e8:02:33:5d:
64:f9:2b:5d:e9:b6:05:10:71:24:a5:58:28:89:d4:
07:a5:bf:e6:d9:86:a7:75:9a:6c:8d:74:13:e8:ba:
fa:1c:01:20:75:a5:49:b1:f8:ad:b6:ae:5a:6a:ad:
71:af:79:ca:81:7d:59:3b:4d:09:40:3b:46:fe:f3:
0a:54:7f:22:c5:35:c8:f1:8b:87:3e:e9:bc:0b:3e:
a8:a7:24:ed:a4:aa:b8:fa:b0:ab:88:08:b3:fc:2f:
f3:69:c3:84:a6:80:5c:5f:dc:29:f4:11:5c:3d:15:
69:50:c6:ea:ad:f0:7a:88:cb:43:fb:be:42:14:96:
67:b7:f8:d5:72:4f:50:f7:d8:cf:bb:95:b7:07:d0:
7c:2a:7b:e9:11:f7:f6:3e:26:6c:53:44:a9:f0:50:
d0:d0:1a:4f:dd:4d:3b:e8:91:af:fd:ed:30:5e:b4:
0c:56:c3:7c:7b:6d:9d:d3:c0:cf:47:91:2e:7b:cc:
ca:64:05:85:68:de:d5:c3:37:32:d7:42:76:9a:80:
1e:e7:15:e1:9c:91:c4:3e:9d:9a:7b:00:d8:b1:b8:
be:45:2e:5d:f9:24:32:0c:35:d6:14:76:de:1d:30:
e5:03:e2:3e:b2:4d:d4:36:9d:e7:1a:04:a7:2d:08:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A9:1A:79:2F:2E:0D:03:C1:DD:87:33:D5:73:4B:5B:80:E3:30:1A
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7D281AC035EB11EE9788C6774AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.102.0/23
Signature Algorithm: sha256WithRSAEncryption
90:93:69:a2:fb:9c:8c:5e:da:3e:8e:96:75:18:72:96:9c:51:
89:27:52:2e:4c:bb:6a:c7:3c:95:84:4e:9a:dc:66:90:d2:6b:
68:82:05:88:48:02:4e:79:fc:8e:18:e1:3c:46:28:3c:e1:3e:
01:2a:b1:bf:f3:9f:f6:75:4b:84:da:99:68:dc:66:f3:9c:71:
fc:07:6f:c7:a5:fd:76:f4:ff:5a:39:28:56:22:c5:90:d4:f2:
fc:9e:1e:2b:45:09:77:f1:f7:2b:03:23:e5:5a:a3:a4:8a:08:
70:19:e9:f6:b5:38:a8:96:a4:cf:b6:67:45:bc:14:13:93:86:
82:47:ff:d5:69:81:5a:5c:39:0c:49:26:00:7b:be:74:8c:f7:
c5:4f:0a:5e:59:b4:4c:b6:a0:75:f8:0d:01:fa:16:69:db:bb:
01:d1:51:bf:23:bf:16:ae:1a:eb:b5:57:6a:d6:d1:27:0f:dd:
7f:c1:04:71:12:6d:45:31:83:7e:06:eb:7c:69:9e:8b:7c:b6:
31:9b:6d:a2:a9:92:1e:04:26:e5:24:ae:7c:c5:e1:de:a0:a0:
54:d6:9e:be:72:83:44:95:61:10:64:74:5d:bf:d8:cf:ef:ee:
1f:23:a7:a5:93:69:cf:85:e1:bc:d8:4e:a0:83:f7:35:5a:8d:
3c:3b:95:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 12:22:12 2023 by rpki-client on console-ams.rpki-client.org