Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/981130FAEB3C11EDA34B97534AD9E6FC.roa
File: 981130FAEB3C11EDA34B97534AD9E6FC.roa (raw, json)
Hash identifier: acg8vy5EG0+QCRUbxvVUfwuZMpTjBdTg0PHezFzaq7E=
Subject key identifier: 3A:3A:D7:0D:C4:4D:E5:A5:F0:0C:DE:7E:EB:E8:28:E8:66:50:7E:73
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0AA6
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/981130FAEB3C11EDA34B97534AD9E6FC.roa
Signing time: Fri 05 May 2023 12:01:40 +0000
ROA not before: Fri 05 May 2023 12:01:36 +0000
ROA not after: Sun 05 May 2024 12:01:36 +0000
asID: 205431
IP address blocks: 161.123.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2726 (0xaa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: May 5 12:01:36 2023 GMT
Not After : May 5 12:01:36 2024 GMT
Subject: CN=6454f024-d0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f3:f7:ec:57:23:1b:ee:43:70:fc:03:10:e7:
0d:28:bd:92:2e:db:da:d3:c2:31:e9:53:97:7d:ce:
e7:db:1b:3e:b5:ca:64:ed:43:e0:56:8b:c1:a2:83:
47:a2:10:bc:59:18:b5:28:83:fe:24:d7:8a:df:4f:
7e:cb:29:63:b4:f0:05:63:2b:29:dd:68:b7:ce:9f:
a0:d2:3b:b5:94:71:e0:7c:65:35:e4:ed:35:d8:f9:
59:19:c9:6c:26:9c:ef:e0:1f:6e:6a:f3:82:bf:7d:
8d:dd:97:a5:d6:97:33:ec:68:fe:06:c8:10:35:97:
ab:c5:8f:8d:6a:f5:7a:f5:ef:e6:d9:99:fe:9d:e4:
23:6e:a3:93:30:16:d2:bf:55:53:23:ac:aa:ab:63:
61:67:ba:6b:f8:2a:53:59:db:41:db:aa:53:85:b4:
63:0e:6a:2f:0f:99:50:1b:05:2b:dc:c8:9f:8f:39:
a9:6c:ad:35:3a:02:46:a1:f2:23:5c:cd:e9:b9:31:
6f:61:a3:11:cf:74:a4:41:a4:d1:05:b1:61:06:97:
ab:e7:b9:2c:83:2a:fe:a9:98:a3:92:9d:02:da:49:
4c:59:14:4e:11:5a:64:e0:6c:c7:0e:4b:63:c6:8c:
87:ee:f3:f7:ca:fe:bd:af:f4:b9:cb:b1:df:86:49:
0d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3A:D7:0D:C4:4D:E5:A5:F0:0C:DE:7E:EB:E8:28:E8:66:50:7E:73
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/981130FAEB3C11EDA34B97534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.35.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:80:1b:82:6b:2a:85:0f:4c:a2:12:81:58:00:fc:27:08:69:
44:e3:c6:9f:0a:5f:90:c9:6a:b2:da:23:15:1a:03:51:d2:3c:
37:fc:ca:af:82:9d:f9:2d:db:0f:50:1c:ca:8d:ac:98:54:b2:
5e:68:53:d0:f5:09:98:8d:7f:53:8f:41:27:c2:8b:b4:9e:2a:
29:f4:ea:38:a7:15:60:60:65:e7:0c:e8:8b:52:18:14:a8:35:
4f:10:63:36:d4:1c:8d:c9:18:c1:84:30:97:86:ff:5c:20:3b:
63:2e:92:c9:41:62:f4:b3:39:1e:b9:90:4d:69:f5:9b:e6:04:
7c:28:c6:17:04:92:d4:3f:52:68:98:cd:e5:d0:38:5a:f2:e5:
e3:72:ed:3b:33:64:88:00:ec:d2:e9:58:f4:3e:52:b4:31:00:
1e:c6:50:ef:91:9c:3b:30:9f:e3:0b:dc:51:e7:bb:bf:99:e5:
b1:ba:af:01:9b:e2:5f:34:99:ca:72:9e:a4:c7:e1:4f:45:29:
73:38:5a:c9:88:ec:fb:f3:f5:e6:ce:b6:11:a9:4c:1f:31:e0:
77:3f:2f:e7:5c:66:0c:c3:61:ea:de:2b:28:f6:1e:c6:2e:f3:
be:a5:fd:3a:fb:f0:88:18:29:4e:60:a1:19:d4:4c:fc:b2:e2:
f2:37:24:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-fra.rpki-client.org