Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/879FEC3A047211EE84627D1A4AD9E6FC.roa
File: 879FEC3A047211EE84627D1A4AD9E6FC.roa (raw, json)
Hash identifier: qVtrcuzsbI3t+TCjHZ9EGgBJ3DMk6xNUUhnrT36BRqI=
Subject key identifier: 0A:DE:BE:BF:68:E8:BD:04:02:DB:9D:FF:8D:A2:3C:20:83:9F:1B:E3
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0AF0
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/879FEC3A047211EE84627D1A4AD9E6FC.roa
Signing time: Tue 06 Jun 2023 14:00:44 +0000
ROA not before: Tue 06 Jun 2023 14:00:41 +0000
ROA not after: Thu 06 Jun 2024 14:00:41 +0000
asID: 399471
IP address blocks: 161.123.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2800 (0xaf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 6 14:00:41 2023 GMT
Not After : Jun 6 14:00:41 2024 GMT
Subject: CN=647f3c0c-fee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:63:f5:64:27:a6:0f:f6:bb:78:66:37:a4:
a0:44:98:c3:d2:f8:eb:b9:15:2c:d2:8a:5f:64:20:
26:58:55:e2:a1:bc:5a:b7:b7:76:25:8e:18:0c:54:
9c:76:57:69:29:12:4e:a2:65:c6:4d:aa:88:bb:d3:
f7:67:00:b9:99:b4:b2:91:0f:68:17:f9:b8:39:aa:
6a:79:74:a6:19:51:97:d4:0e:bd:e7:07:48:e9:ac:
bd:1b:9d:c7:03:71:9f:09:00:c1:07:f4:d2:68:37:
6c:13:10:2d:21:90:fe:ba:ba:4d:5f:87:37:fc:06:
a8:d2:73:9c:ea:6c:10:71:b3:a3:7e:3b:0a:39:ec:
35:cd:93:11:56:ba:b3:2b:24:2e:86:01:97:de:6c:
82:47:0d:40:ba:e7:bf:d1:88:5d:9d:62:f7:a0:c8:
02:99:1f:6b:52:36:c2:a3:52:1c:0e:4d:d4:dc:93:
2a:d3:50:d8:41:d6:e7:3d:93:02:6d:4c:f3:ad:a2:
a5:f4:9d:e5:d3:95:f4:21:58:a4:d1:2b:51:fa:3b:
5b:09:ef:8f:16:4b:23:04:05:9b:77:64:27:35:07:
29:1f:94:50:07:a4:ff:df:93:58:4f:57:0d:63:58:
bc:36:10:c5:3e:9e:5c:bd:91:9e:75:0e:1a:70:94:
d6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DE:BE:BF:68:E8:BD:04:02:DB:9D:FF:8D:A2:3C:20:83:9F:1B:E3
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/879FEC3A047211EE84627D1A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.100.0/24
Signature Algorithm: sha256WithRSAEncryption
41:6d:16:3d:7d:f8:c4:17:a8:13:37:fb:aa:d8:a8:39:b6:a3:
d6:f0:23:09:d9:ab:01:32:ce:b9:61:42:3d:61:73:a4:9e:86:
4c:f2:01:1b:89:ef:83:45:f0:29:18:f9:ce:3b:a6:23:00:0b:
f9:86:86:b7:09:5b:b4:1f:74:f7:de:eb:16:08:91:8e:76:01:
99:eb:ad:b0:71:b4:71:30:93:48:f8:6b:28:89:42:c8:bf:b4:
68:f5:84:2d:96:07:f0:4b:d5:f9:33:cb:79:70:6e:77:81:17:
f8:2b:70:4c:f3:ee:81:66:fe:47:d6:c4:5a:f6:91:ca:b9:62:
db:d9:25:5e:ff:cf:0c:e1:d7:d9:cd:08:5a:e8:53:66:47:00:
15:40:ee:bc:1d:c0:16:18:df:86:8a:01:93:f1:0f:30:ca:a0:
e1:9d:6b:3f:6b:09:4f:47:26:f8:29:cf:66:4f:3c:30:32:67:
d0:71:7e:02:c6:37:d4:43:81:ef:c5:2e:7e:32:25:e9:6a:dd:
f3:d1:52:e9:56:8f:d3:4b:0d:7f:33:38:61:7d:fa:2f:5e:d2:
40:48:2c:a1:f5:2c:45:b8:97:59:2e:9e:ca:d3:64:b3:26:91:
00:ff:7e:23:ef:1e:f0:6d:7b:ff:cd:19:3f:73:47:2c:cc:5e:
af:95:99:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 04:51:52 2023 by rpki-client on console-fra.rpki-client.org