Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AC9B6654047211EEA1C7E21A4AD9E6FC.roa
File: AC9B6654047211EEA1C7E21A4AD9E6FC.roa (raw, json)
Hash identifier: N6329Hu0fidJ6ib4SoiPET9JMBR7xYR/e8G3ZnXaHyA=
Subject key identifier: DD:F7:95:FB:4A:CB:C6:4B:08:57:D5:E8:4F:1A:27:EB:D1:A4:B4:E3
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0AF2
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AC9B6654047211EEA1C7E21A4AD9E6FC.roa
Signing time: Tue 06 Jun 2023 14:01:46 +0000
ROA not before: Tue 06 Jun 2023 14:01:43 +0000
ROA not after: Thu 06 Jun 2024 14:01:43 +0000
asID: 399471
IP address blocks: 161.123.192.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2802 (0xaf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jun 6 14:01:43 2023 GMT
Not After : Jun 6 14:01:43 2024 GMT
Subject: CN=647f3c4a-5ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:c2:21:26:af:f4:5d:33:a5:50:60:da:63:
1d:4e:cf:db:c8:2f:18:bc:35:16:52:3c:e2:dc:8c:
a4:bb:ae:fe:9a:c5:9e:4e:9b:6e:20:10:d0:14:9b:
ec:3f:aa:97:a5:72:5d:00:fe:93:74:97:a7:3a:08:
90:e9:d5:44:e8:57:2b:79:29:6a:94:b6:c5:c3:d2:
c4:11:46:06:a6:01:40:e9:77:64:18:e6:ef:e1:c3:
6f:4f:ec:5d:53:a9:3c:b8:1f:65:d0:40:1f:3c:35:
38:2c:23:47:17:41:e1:52:c7:aa:db:71:6a:46:a5:
5c:58:e4:f5:78:a6:04:e0:9e:3e:e8:72:b8:9f:17:
e4:8f:e4:7e:30:bd:0b:ca:c6:30:aa:e0:ec:b8:1f:
99:73:ae:59:fd:55:80:f1:06:0a:5e:9e:59:2f:19:
0c:4c:fd:b6:26:45:8e:0a:1d:be:14:ad:3e:15:65:
61:cc:3f:c4:17:04:16:e3:45:2e:12:a8:fd:8c:2d:
79:01:68:93:03:1f:56:31:7b:cf:77:b9:8d:47:d0:
65:06:94:f8:bb:9e:6d:a2:85:2c:7c:a6:12:5d:6a:
02:27:b6:3c:21:2f:3f:37:20:4a:77:b0:9e:3f:e9:
be:6f:10:da:c2:a3:11:af:81:a1:c5:93:10:07:10:
73:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F7:95:FB:4A:CB:C6:4B:08:57:D5:E8:4F:1A:27:EB:D1:A4:B4:E3
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AC9B6654047211EEA1C7E21A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.192.0/24
Signature Algorithm: sha256WithRSAEncryption
52:57:38:43:a4:54:b5:fb:05:c0:c1:0a:2d:40:2b:49:6e:36:
1f:a9:3b:83:8b:e0:b9:77:03:bc:5c:6e:e1:d2:d4:2a:69:64:
c9:21:18:f3:82:a9:39:74:44:c3:c6:cc:5c:d2:80:ef:3e:ce:
cb:6f:a7:9e:7f:90:0d:59:19:e5:c3:79:c9:07:4a:b1:5e:0a:
92:f9:b0:f8:58:c7:93:2d:66:57:f3:3d:34:58:77:a5:fb:1a:
b4:75:58:e6:ad:e3:a6:eb:cd:b7:bf:b0:12:e7:71:e5:c0:3f:
1a:97:fe:47:c3:71:a7:ce:16:a7:07:4c:91:ed:50:d9:53:96:
cc:2c:67:16:e8:13:8f:c8:51:27:17:48:26:95:e6:06:53:af:
bf:76:d4:8e:aa:01:85:22:9a:db:60:de:02:5e:e3:b9:53:2a:
f1:d4:68:c2:af:9e:97:42:a6:c1:33:8e:82:2e:36:de:f2:70:
8c:34:be:0f:05:5a:f2:83:5f:7b:0d:ab:20:48:ef:42:3d:3f:
94:7d:33:ab:76:7d:bd:5d:2b:fb:de:7a:c7:aa:cf:b6:f5:cd:
23:e2:e5:e8:64:0f:7c:c8:fc:66:20:ad:3b:46:7b:02:f5:db:
91:e1:02:d6:d5:18:8c:ee:c5:72:61:b6:56:18:f7:84:dc:0a:
1f:47:04:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 04:44:46 2023 by rpki-client on console-ams.rpki-client.org