Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CFF8C5FE191911EE820185194AD9E6FC.roa
File: CFF8C5FE191911EE820185194AD9E6FC.roa (raw, json)
Hash identifier: uORGnSdiSrKvpmsBGia4/5r89Pl7qMc1QoZGOdsLaoo=
Subject key identifier: F8:00:36:5E:D9:C0:9D:E5:B8:60:59:63:6A:1E:CB:16:6E:15:56:9E
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B1E
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CFF8C5FE191911EE820185194AD9E6FC.roa
Signing time: Sun 02 Jul 2023 20:48:35 +0000
ROA not before: Sun 02 Jul 2023 20:48:31 +0000
ROA not after: Tue 02 Jul 2024 20:48:31 +0000
asID: 8100
IP address blocks: 161.123.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2846 (0xb1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 2 20:48:31 2023 GMT
Not After : Jul 2 20:48:31 2024 GMT
Subject: CN=64a1e2a3-034e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:74:27:20:6d:41:c2:4c:68:d4:9d:16:6f:
1a:22:80:bb:55:d7:bf:f6:54:5e:7b:d4:32:c3:ee:
4f:0f:b3:42:87:f3:8a:89:53:4c:38:f2:cf:79:83:
ba:f1:1d:0c:e2:2f:e2:4d:41:e5:96:bd:9f:7a:41:
dc:15:f4:f2:3f:75:f2:c0:41:e2:a6:3d:6a:b5:bb:
e2:97:24:7b:d0:91:03:51:db:36:79:77:d4:d0:81:
2c:21:7f:46:d0:87:35:1f:5b:47:c4:ec:a5:31:86:
fd:80:5f:36:df:17:91:83:25:16:ce:f7:a1:7b:49:
1e:c6:bf:3d:ff:0c:e2:81:74:79:f0:f1:e0:7e:27:
28:a1:ae:69:54:3a:a2:7f:1a:1e:67:8f:44:fe:08:
a4:8b:0b:8d:7e:e7:cb:25:58:d5:49:80:14:1b:85:
61:bb:50:c0:a1:cc:4c:4c:8e:c4:76:a6:cf:ec:b6:
5c:d7:2a:ef:d1:66:8c:f3:71:32:bb:23:13:b1:8d:
06:22:8e:55:bb:b2:34:0f:42:8a:9d:e4:4c:5c:c5:
20:da:70:d4:ec:7d:5a:77:ab:fc:0f:3d:45:bf:16:
b0:a7:08:62:78:07:e0:09:9f:bf:89:2a:f1:30:3d:
19:fd:99:69:b7:2f:fd:1e:0c:07:a6:58:58:d6:53:
ca:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:00:36:5E:D9:C0:9D:E5:B8:60:59:63:6A:1E:CB:16:6E:15:56:9E
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CFF8C5FE191911EE820185194AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.68.0/24
Signature Algorithm: sha256WithRSAEncryption
68:50:5a:bd:9f:fb:59:3e:48:b5:8e:6d:5d:24:9a:fc:5a:51:
f4:3c:a4:8c:40:77:c4:c7:a9:43:84:be:5b:34:b9:8e:1f:ef:
0a:db:ae:d8:17:bd:61:6d:1a:e2:43:04:76:c5:66:dc:d2:6c:
26:2f:95:fa:f8:03:ba:7a:23:9f:3b:41:f9:18:36:ed:c4:f4:
c1:db:7a:fe:e1:b4:0d:f3:8c:bb:57:b4:9d:cf:42:89:e1:d6:
fd:70:06:23:b0:88:b1:26:f3:29:8f:83:b1:73:a8:0e:7d:3f:
69:59:e4:29:ff:97:8c:ba:f1:af:db:da:6e:e0:af:90:59:91:
1b:07:a1:db:0c:30:df:60:53:46:fa:81:86:8e:cc:61:ed:6a:
72:13:af:b2:76:83:38:85:01:6d:8f:1c:5d:f5:73:77:88:f2:
18:af:d3:78:71:fa:dc:61:3e:57:54:67:61:e3:0c:a7:6b:75:
88:2f:96:4f:f8:dc:80:c7:0a:e7:07:76:a8:13:3c:96:4a:3f:
f9:fa:ee:a2:2f:04:45:b6:d2:e9:13:ae:a6:82:eb:eb:9a:ac:
cd:13:93:6b:7b:8f:01:75:73:bb:27:9c:49:29:1e:cb:08:66:
2c:6e:0a:4e:fe:07:9f:0a:d7:46:02:71:13:e5:d3:fe:a2:89:
70:d9:d2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 18:57:43 2023 by rpki-client on console-fra.rpki-client.org