Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C4450D5035EB11EEA8137B784AD9E6FC.roa
File: C4450D5035EB11EEA8137B784AD9E6FC.roa (raw, json)
Hash identifier: dvhEPD7g16dn8BhS2FIKjiMRga4vCZMBo12v/BerF88=
Subject key identifier: 46:84:58:67:C6:ED:6C:A8:75:69:F2:61:F5:94:B7:45:8A:35:DA:D4
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B90
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C4450D5035EB11EEA8137B784AD9E6FC.roa
Signing time: Tue 08 Aug 2023 13:02:02 +0000
ROA not before: Tue 08 Aug 2023 13:01:58 +0000
ROA not after: Thu 08 Aug 2024 13:01:58 +0000
asID: 399471
IP address blocks: 161.123.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2960 (0xb90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Aug 8 13:01:58 2023 GMT
Not After : Aug 8 13:01:58 2024 GMT
Subject: CN=64d23cca-b2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:18:57:2b:4b:93:2b:cd:74:b0:19:f1:aa:3b:
3e:9d:a1:2b:42:30:53:fa:59:e6:67:e3:3f:2b:af:
9a:ab:16:1c:e1:27:50:4c:61:aa:2e:60:05:1f:4e:
20:3a:b0:14:68:b0:ba:21:ae:57:b9:b1:72:22:ef:
28:76:7a:e7:8c:b2:46:b1:25:89:94:e9:ee:dd:5c:
58:e6:3b:48:1f:69:e2:3d:1f:b9:35:a1:99:ca:06:
be:fb:f8:17:db:4a:8f:3d:d5:51:49:40:83:52:60:
ee:e0:00:93:e0:5d:9b:bd:8d:3f:9a:ef:03:c7:b5:
90:85:26:4c:9d:9b:4c:a8:45:f4:a8:cc:a4:ad:57:
8f:19:cc:8f:4e:6c:11:71:fe:2f:bc:70:66:94:6d:
4e:5d:c6:3e:54:d7:ba:f1:ee:c2:26:d1:f7:b2:6d:
7b:3e:0b:37:25:73:fe:a8:46:1f:c2:3f:66:e0:c4:
7e:7d:8b:cc:83:bb:20:ef:3f:b4:48:bd:e8:97:cb:
46:9a:04:eb:91:8c:df:87:8e:9f:09:49:38:ce:c6:
31:ad:d7:b2:07:af:6e:6d:19:91:53:40:a4:74:e2:
42:83:43:a2:0c:3b:bd:8b:66:e8:0a:1a:2e:3b:cb:
c6:a4:ec:78:d9:32:bf:0b:1f:85:69:d9:4f:fc:b5:
fe:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:84:58:67:C6:ED:6C:A8:75:69:F2:61:F5:94:B7:45:8A:35:DA:D4
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C4450D5035EB11EEA8137B784AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.240.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6c:33:32:ef:5f:8b:70:27:33:e2:83:8e:46:93:c0:71:22:
ea:6a:3d:ef:08:2e:e8:2b:66:0a:50:67:f0:a3:91:35:72:4f:
86:cd:59:7b:44:f6:31:66:1a:62:e9:f7:46:19:19:bb:3e:99:
7d:ff:b3:c2:a2:56:9a:d7:3d:f8:20:68:11:4f:2b:a4:4b:ec:
fc:3a:16:6a:c9:f6:c2:5f:01:5a:b8:50:0e:b3:5a:0c:7d:06:
ae:3e:e0:ef:7e:29:62:88:16:f2:39:8d:7b:53:ae:a7:5c:a3:
f0:ec:5e:26:b5:5c:b9:8d:eb:eb:45:52:6a:93:f6:85:65:69:
4d:ce:36:7e:d6:dd:84:e7:36:6f:ff:6c:54:b1:b3:e8:0c:d8:
93:0e:af:54:b9:8d:19:8e:13:9e:8a:79:7f:21:01:ba:7b:53:
32:4d:e8:a0:63:25:7e:c5:d0:f3:5c:e5:ba:4c:f5:60:8e:f2:
a9:27:d9:2b:5a:9b:aa:03:04:10:09:9e:4c:f7:a4:4b:8b:eb:
93:00:8b:f5:cf:77:23:e6:37:ca:be:69:85:73:ea:9a:b9:1e:
a5:7d:c8:37:90:e5:c3:af:e9:d4:c5:ca:8c:aa:5a:2e:72:49:
8f:3e:a8:b3:c7:64:7e:7c:43:76:8b:86:7c:c5:84:77:30:26:
0f:67:45:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 12:17:28 2023 by rpki-client on console-fra.rpki-client.org