Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AE24F4C0191911EE902527194AD9E6FC.roa
File: AE24F4C0191911EE902527194AD9E6FC.roa (raw, json)
Hash identifier: fB/mBTHtXkZmIWiqcbrXgIi0Dh9lCuxudE79W8hVm5c=
Subject key identifier: B4:F6:00:B5:23:60:C1:93:23:39:35:5A:72:05:F4:69:4D:3E:F0:96
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B1A
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AE24F4C0191911EE902527194AD9E6FC.roa
Signing time: Sun 02 Jul 2023 20:47:38 +0000
ROA not before: Sun 02 Jul 2023 20:47:35 +0000
ROA not after: Tue 02 Jul 2024 20:47:35 +0000
asID: 8100
IP address blocks: 161.123.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2842 (0xb1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 2 20:47:35 2023 GMT
Not After : Jul 2 20:47:35 2024 GMT
Subject: CN=64a1e26a-3140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3d:5f:5a:6a:75:47:ee:b7:25:20:48:3c:0f:
e1:ee:26:a7:21:be:b5:a0:5f:1c:04:28:1c:bc:7e:
a4:3a:9b:7d:26:5b:40:22:98:e9:64:8e:56:a7:9a:
54:2b:1a:dc:7d:4e:db:41:96:44:fe:74:9e:66:26:
1e:e6:70:48:6e:f8:b2:31:34:26:36:0d:bf:34:6b:
f2:fc:1c:17:16:23:ac:49:9c:b1:bc:69:17:a0:c7:
77:9f:62:f3:cd:e2:fe:ec:ff:c4:cb:c6:03:1e:f7:
68:15:d0:f4:5c:68:90:2c:cc:f4:c2:58:c2:b0:03:
44:7f:37:b6:85:fd:0c:2b:99:ba:ab:19:36:25:28:
a3:fa:96:b7:99:4b:7e:08:e1:56:d2:6e:8f:a6:91:
fe:18:05:2e:a1:8a:8e:5b:86:f3:20:9e:bb:89:e3:
aa:0e:57:63:7f:ca:de:91:d8:ff:64:a7:13:25:84:
75:2b:fc:10:d7:7a:60:51:4b:b7:b0:2f:a8:8a:d9:
ac:af:36:16:05:c7:bd:91:56:dd:1c:44:57:3f:5f:
23:37:b9:aa:a4:5c:bf:98:c5:7e:c7:ee:7b:0e:9d:
8c:2e:ae:1a:51:23:9b:0d:8e:69:95:d4:34:12:44:
33:e4:ab:12:d1:68:c5:b7:52:a0:26:68:d0:93:04:
85:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F6:00:B5:23:60:C1:93:23:39:35:5A:72:05:F4:69:4D:3E:F0:96
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AE24F4C0191911EE902527194AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.32.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ce:df:db:96:9f:75:05:80:29:d5:4d:64:88:58:51:ca:38:
71:12:68:ab:c7:e4:14:61:ef:ea:69:42:9d:35:0f:89:32:1e:
f6:ba:d1:4f:0f:fa:a8:e1:79:0e:c1:2f:20:4b:b8:b8:bc:30:
6b:49:d3:cb:f7:61:1b:a1:11:d1:fd:7b:16:94:2b:9b:8b:da:
16:54:5f:6e:93:5d:d7:26:51:ae:1c:33:3a:8d:4c:60:8d:cb:
23:37:94:3c:6a:0d:b5:3a:24:29:c7:82:f1:96:6d:bb:70:15:
f9:c9:a5:c0:2d:f2:78:82:e6:74:1c:e8:b1:79:32:1a:13:0e:
e4:07:29:10:ec:34:23:5c:a6:56:89:67:9e:4e:e8:7a:10:9f:
77:4d:46:3a:77:01:f9:b7:7c:85:0e:32:b8:67:66:4e:77:75:
5f:88:cf:50:cf:e7:62:94:d5:d6:6b:7f:95:38:4d:dc:cc:52:
50:15:41:f4:d6:6c:7f:38:e8:78:75:1e:c4:e7:89:94:89:6d:
11:cd:55:9e:a2:f3:81:fe:7b:c1:44:02:32:30:66:23:e0:54:
86:20:49:8b:c6:db:43:79:32:d4:25:22:b5:b2:05:f3:65:28:
81:39:34:70:ed:7d:e9:35:2f:a3:02:2a:62:cd:ce:e0:71:b2:
ca:de:fe:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 18:57:43 2023 by rpki-client on console-fra.rpki-client.org