Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AAAD06B45CFA11EEA8A931404AD9E6FC.roa
File: AAAD06B45CFA11EEA8A931404AD9E6FC.roa (raw, json)
Hash identifier: 7nJXW9YR5hGWOCZnL0cUXsUPQOw6QGHfW/u7gi3n3vQ=
Subject key identifier: F2:EB:B5:73:40:31:07:01:32:11:50:94:A5:FF:AB:10:27:16:58:A2
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0C07
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AAAD06B45CFA11EEA8A931404AD9E6FC.roa
Signing time: Wed 27 Sep 2023 05:56:57 +0000
ROA not before: Wed 27 Sep 2023 05:56:54 +0000
ROA not after: Thu 28 Sep 2028 05:56:54 +0000
asID: 212738
IP address blocks: 161.123.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3079 (0xc07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Sep 27 05:56:54 2023 GMT
Not After : Sep 28 05:56:54 2028 GMT
Subject: CN=6513c429-8a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:89:c8:59:eb:f3:46:4e:5d:fa:61:38:40:a0:
3c:1f:f4:a0:79:79:36:13:cd:0e:2b:1b:a0:10:6c:
2e:55:fc:a8:77:17:f2:7d:21:37:25:f7:49:34:69:
e3:69:b6:a8:48:03:15:db:06:99:6f:b1:12:b4:11:
02:26:07:3e:59:75:4d:38:3a:85:8b:c4:0b:fe:ed:
79:4b:bd:77:f8:be:5a:3f:75:c8:14:9a:85:aa:7d:
e3:57:a6:38:5b:b2:29:3c:f1:51:5a:67:a8:b7:35:
d1:bb:d5:17:4e:9b:17:85:e1:17:d3:a0:ae:01:39:
21:26:90:ff:60:c7:30:ff:dc:5c:67:4d:e5:25:28:
48:8a:ee:b9:de:17:05:93:b4:2f:07:6a:87:3b:d6:
0e:c7:49:d6:4a:89:0a:c0:65:20:8e:95:cb:ee:96:
c9:a5:e1:45:de:02:40:4c:85:de:38:f5:6a:73:08:
35:77:4c:48:15:b6:db:a9:03:da:86:67:f4:49:9d:
e8:3c:1f:43:a9:19:3f:3c:22:64:3a:21:5e:53:03:
e5:a9:b0:c5:f9:b9:51:85:e5:f7:8e:24:b7:05:67:
d1:29:b2:33:86:13:e3:62:ae:22:92:82:a3:e9:4e:
ba:c1:c2:37:73:5f:0f:1b:9e:23:53:ff:2d:cb:77:
6f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EB:B5:73:40:31:07:01:32:11:50:94:A5:FF:AB:10:27:16:58:A2
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AAAD06B45CFA11EEA8A931404AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.32.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b4:fd:16:e0:83:6c:d1:64:4c:cf:f4:18:bb:07:5a:b4:f5:
88:c4:da:25:76:02:aa:3d:66:6a:a6:cf:aa:96:1c:61:30:0f:
b1:2e:2a:7b:8d:45:db:fb:7f:ef:73:83:86:72:b3:e2:e3:cb:
e2:9f:88:40:c9:60:2f:a0:ae:cd:1c:68:52:19:f1:09:4a:91:
83:2d:2a:b7:eb:eb:da:5d:2a:37:47:af:e4:a1:9b:de:15:d8:
c6:d4:44:43:d3:81:fd:e3:a6:d4:3a:d5:20:5f:41:82:46:2e:
f0:e3:2b:9b:e3:1c:40:c1:64:ca:9a:43:06:63:e6:9c:24:6e:
ab:20:5b:29:df:55:cd:bf:1a:57:0e:1b:88:c0:bd:1b:06:c7:
35:43:60:77:51:80:50:01:9a:27:a3:e2:47:91:68:ab:22:86:
13:75:06:aa:84:4c:56:df:d2:f6:a9:66:93:43:00:38:5b:3d:
5d:bc:69:b3:6b:48:29:44:bd:e8:bd:fc:1a:3b:ae:1b:67:b6:
0a:90:56:35:31:52:d0:ec:4d:a7:df:e7:d6:88:e8:73:5a:0c:
15:7b:06:8f:ca:ea:d5:1d:52:0b:1f:39:58:11:aa:cb:9b:48:
32:a0:a5:da:70:43:bc:c3:2b:98:57:2e:9f:bc:01:71:07:05:
83:e6:4c:81
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDAcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yMzA5MjcwNTU2NTRaFw0yODA5MjgwNTU2NTRaMBgxFjAU
BgNVBAMTDTY1MTNjNDI5LThhMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD1ichZ6/NGTl36YThAoDwf9KB5eTYTzQ4rG6AQbC5V/Kh3F/J9ITcl90k0
aeNptqhIAxXbBplvsRK0EQImBz5ZdU04OoWLxAv+7XlLvXf4vlo/dcgUmoWqfeNX
pjhbsik88VFaZ6i3NdG71RdOmxeF4RfToK4BOSEmkP9gxzD/3FxnTeUlKEiK7rne
FwWTtC8Haoc71g7HSdZKiQrAZSCOlcvulsml4UXeAkBMhd449WpzCDV3TEgVttup
A9qGZ/RJneg8H0OpGT88ImQ6IV5TA+WpsMX5uVGF5feOJLcFZ9EpsjOGE+NiriKS
gqPpTrrBwjdzXw8bniNT/y3Ld2+zAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU8uu1
c0AxBwEyEVCUpf+rECcWWKIwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0FBQUQwNkI0NUNGQTExRUVBOEE5MzE0MDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACheyAwDQYJKoZIhvcNAQELBQAD
ggEBACq0/Rbgg2zRZEzP9Bi7B1q09YjE2iV2Aqo9Zmqmz6qWHGEwD7EuKnuNRdv7
f+9zg4Zys+Ljy+KfiEDJYC+grs0caFIZ8QlKkYMtKrfr69pdKjdHr+Shm94V2MbU
REPTgf3jptQ61SBfQYJGLvDjK5vjHEDBZMqaQwZj5pwkbqsgWynfVc2/GlcOG4jA
vRsGxzVDYHdRgFABmiej4keRaKsihhN1BqqETFbf0vapZpNDADhbPV28abNrSClE
vei9/Bo7rhtntgqQVjUxUtDsTaff59aI6HNaDBV7Bo/K6tUdUgsfOVgRqsubSDKg
pdpwQ7zDK5hXLp+8AXEHBYPmTIE=
-----END CERTIFICATE-----
Generated at Fri Dec 1 19:01:41 2023 by rpki-client on console-ams.rpki-client.org