Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/86944E0EA89111EDA2570BF4F1222468.roa
File: 86944E0EA89111EDA2570BF4F1222468.roa (raw, json)
Hash identifier: sz2FnFApgdarQBafymH+Gz/I6nDkYNS75vsd7UCyWXg=
Subject key identifier: 36:66:A2:EF:9D:80:FB:27:7E:6D:5D:67:35:D1:9F:D6:7D:D2:CE:C8
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0997
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/86944E0EA89111EDA2570BF4F1222468.roa
Signing time: Thu 09 Feb 2023 15:50:50 +0000
ROA not before: Thu 09 Feb 2023 15:50:47 +0000
ROA not after: Fri 09 Feb 2024 15:50:47 +0000
asID: 207990
IP address blocks: 161.123.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2455 (0x997)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 9 15:50:47 2023 GMT
Not After : Feb 9 15:50:47 2024 GMT
Subject: CN=63e5165a-2fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2c:db:a5:86:bf:46:66:40:f2:84:1a:03:ef:
dc:e0:9b:99:65:e3:12:78:81:21:f1:dc:e3:b8:4f:
9b:6b:46:fc:27:ec:42:e6:a2:02:32:c7:6f:e1:a9:
12:a2:5f:dd:4e:63:1d:af:63:b4:d6:03:e4:7a:c3:
5e:78:69:8b:5e:9d:33:50:13:93:ba:fa:bf:71:36:
af:f7:64:59:22:87:f5:4c:ab:26:da:d4:57:1d:ce:
dd:d4:a7:6a:42:3c:31:e8:86:37:9c:7b:33:c3:79:
0a:14:1c:3b:9c:c7:0e:fe:09:10:44:e8:09:62:87:
e8:4a:27:f0:ae:99:e1:3d:7f:ca:83:7b:df:c4:91:
8f:9e:ba:bc:aa:7a:ed:18:97:9b:9e:56:f9:6e:17:
32:49:fc:d9:32:ee:02:17:14:f5:d7:4a:30:d2:f1:
19:91:92:85:43:35:af:83:a1:f9:8d:9c:e2:cf:8c:
bc:0f:a9:5a:76:b5:b7:40:94:8b:cb:4d:44:87:96:
b3:61:b8:fe:de:0d:23:5a:f9:45:58:65:b0:99:31:
1b:78:88:cd:01:c9:af:1a:c4:77:18:b9:ff:c8:b6:
aa:8f:aa:7f:50:26:ec:e7:0f:62:2a:10:aa:82:d2:
28:a9:12:b5:c5:b3:30:fc:db:e2:d6:65:9d:63:1b:
ea:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:66:A2:EF:9D:80:FB:27:7E:6D:5D:67:35:D1:9F:D6:7D:D2:CE:C8
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/86944E0EA89111EDA2570BF4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.128.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:6b:ff:fa:0d:15:fd:34:4c:57:9a:26:1f:5c:a6:e5:9e:d0:
ef:a0:5b:e0:a3:01:40:2e:a4:75:7d:78:d0:94:bf:7a:54:52:
43:da:14:63:86:7c:0d:ce:e7:8b:49:99:ed:c0:a0:e3:05:8a:
27:6c:7b:0e:b3:b6:73:ff:73:6f:a6:d4:be:9b:f5:8f:1b:d4:
e9:6c:dd:16:a5:f3:49:cb:ed:89:a3:66:25:b5:9e:8d:cc:30:
89:4a:5e:99:a6:48:af:5c:de:b3:b3:c8:0c:d8:8a:6e:81:9a:
58:73:b3:df:19:9a:dd:0f:58:39:c7:f4:cd:b2:92:1b:db:a3:
de:2d:4a:ed:36:ac:e6:f4:d4:60:f0:58:4e:1a:ac:8f:2b:96:
1a:c9:fb:d2:fe:a6:7d:00:4c:90:c8:46:33:89:2e:65:41:bf:
be:0a:0b:2d:95:21:43:b7:09:b4:5d:4f:6c:4d:d7:40:76:ee:
52:69:de:a6:98:9f:38:92:ed:86:3f:db:7b:81:3f:51:ef:d4:
81:66:40:e4:64:52:21:43:19:a7:4f:ed:bc:4d:d2:b9:af:61:
52:f2:6c:f3:b7:f7:6c:52:ef:0b:4b:4d:f9:cd:df:a9:e4:77:
62:2a:cb:eb:8e:b6:5e:ca:c1:5d:2c:e6:3d:22:34:e6:ea:1b:
46:3f:fe:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org