Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/90F5EED22D3B11EE9CCDFC7D4AD9E6FC.roa
File: 90F5EED22D3B11EE9CCDFC7D4AD9E6FC.roa (raw, json)
Hash identifier: +Yp/j+UejowZSa7issbE0lDISihXfdLUkLO+giBLYcM=
Subject key identifier: 3F:F5:C6:05:D5:AD:22:40:D2:61:85:DC:4E:90:55:1D:6A:78:EE:45
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B76
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/90F5EED22D3B11EE9CCDFC7D4AD9E6FC.roa
Signing time: Fri 28 Jul 2023 11:40:35 +0000
ROA not before: Sat 29 Jul 2023 11:40:32 +0000
ROA not after: Mon 29 Jul 2024 11:40:32 +0000
asID: 207990
IP address blocks: 161.123.200.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2934 (0xb76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 29 11:40:32 2023 GMT
Not After : Jul 29 11:40:32 2024 GMT
Subject: CN=64c3a933-0fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:3b:30:40:ee:c1:28:0c:80:b3:79:98:1d:
ee:05:a7:ab:dd:bb:34:68:0d:46:98:cb:6d:7c:65:
1b:c6:11:bb:bb:32:88:6b:f2:7d:22:aa:f9:e6:aa:
bc:0f:1e:f5:09:71:69:fe:20:1c:d1:5d:bd:c1:0a:
73:fd:6f:51:58:d8:f8:c9:62:2d:21:11:49:2c:8e:
91:e2:43:7d:be:da:9b:ac:25:fd:27:a9:a1:17:bd:
ff:55:d1:c1:fa:8a:ed:3c:d3:02:38:4a:e3:6f:16:
0b:86:72:5a:89:a1:b7:a8:a1:62:58:b2:99:db:ea:
dc:89:74:c0:4a:08:44:91:6e:4c:07:99:9c:76:80:
ad:55:d0:87:47:a6:95:18:cb:f2:0f:bb:91:77:cf:
f0:50:20:d5:b7:a6:f9:d2:43:34:7e:db:a8:bf:60:
be:bf:4b:58:dc:7d:61:aa:64:c5:32:44:d2:71:5b:
9e:4a:7d:fe:99:c5:fc:1f:38:e5:d1:77:4f:b1:b5:
24:d7:f7:0b:46:83:ef:39:a4:4f:84:9d:74:7c:9d:
5d:0d:dc:33:f9:5e:c9:d9:56:cb:aa:b6:a4:fb:cd:
0b:d1:c8:fa:1b:84:37:17:17:b0:ae:58:c8:bd:b3:
df:9f:da:f9:cc:01:6e:c0:b4:33:15:b6:e1:ab:64:
61:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F5:C6:05:D5:AD:22:40:D2:61:85:DC:4E:90:55:1D:6A:78:EE:45
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/90F5EED22D3B11EE9CCDFC7D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.200.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:39:19:cd:8e:a1:2e:f4:53:c2:54:1f:fa:a9:c3:c8:8a:ee:
7f:80:86:7f:9c:ec:4e:a6:87:1d:fa:b1:33:39:a0:5d:eb:69:
77:69:49:31:9b:ee:ce:c9:20:76:a2:f3:f3:22:eb:5c:23:72:
6c:fa:77:14:62:fc:eb:4e:28:58:8b:ea:36:50:40:af:20:70:
63:be:88:99:65:16:4b:ac:eb:02:14:22:65:ce:76:30:10:d0:
1b:b9:78:24:96:c6:11:7c:73:83:b1:5e:8e:12:15:ae:e2:bd:
e7:a3:d6:b6:3b:44:f6:6d:a2:5c:cb:7d:77:58:c5:52:9e:66:
57:ed:dc:db:3e:f6:6a:85:6c:89:4b:a3:43:1c:50:f9:b5:3e:
56:c7:0a:af:cc:e9:a1:d2:1c:5d:13:c9:a8:15:59:c7:d4:dd:
6c:56:89:e0:7b:67:1f:c1:88:12:ee:57:fe:8f:9d:3d:01:8e:
0b:09:54:22:61:a3:b2:55:9f:14:b3:54:ea:6e:74:de:7a:27:
28:3b:b0:26:fe:8b:49:eb:83:19:be:79:e4:16:d5:b6:67:32:
b2:ee:3d:c9:40:f5:82:40:1f:bd:29:2f:c6:fa:1d:04:4f:1a:
9e:c8:ec:4f:dd:60:38:b4:86:38:c1:a0:d0:bc:df:ab:2f:d9:
8c:ec:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 28 13:12:26 2023 by rpki-client on console-fra.rpki-client.org