Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E4C308ACA8BA11ED9E8EF9E6F1222468.roa
File: E4C308ACA8BA11ED9E8EF9E6F1222468.roa (raw, json)
Hash identifier: vCgvWknnWt7bEhR2d205/WeWy8UqCDXBJUkw5bQX3Fw=
Subject key identifier: 21:DD:A1:94:69:CA:1E:75:91:11:B7:CD:A6:27:E2:88:A7:DC:8D:86
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 09C6
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E4C308ACA8BA11ED9E8EF9E6F1222468.roa
Signing time: Thu 09 Feb 2023 20:46:57 +0000
ROA not before: Thu 09 Feb 2023 20:46:54 +0000
ROA not after: Fri 09 Feb 2024 20:46:54 +0000
asID: 207990
IP address blocks: 161.123.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2502 (0x9c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Feb 9 20:46:54 2023 GMT
Not After : Feb 9 20:46:54 2024 GMT
Subject: CN=63e55bc1-d38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:25:b2:43:ba:47:74:cc:5a:c8:37:75:32:
34:2f:50:26:a6:b2:8e:e6:c2:6f:2c:61:4c:8a:4b:
15:98:5f:88:b8:25:8d:f1:cd:bf:71:8b:3f:09:01:
8d:b7:03:ae:96:2f:a7:c5:06:a9:ee:cb:4e:7c:48:
61:94:7d:60:02:9e:7f:a2:f0:39:6a:e4:9f:02:b1:
e8:cc:2e:67:24:87:8c:99:71:d5:7d:2e:a6:d0:21:
2a:a3:a2:b3:ff:f1:cd:30:81:cf:f6:0f:e2:e3:fc:
3a:8f:5f:11:e9:6f:52:1a:18:03:a8:00:91:88:dc:
62:3f:2d:02:78:ef:f6:9e:cb:bf:3b:6e:bd:15:85:
3f:83:22:0b:a2:b2:7c:1f:85:66:7b:cd:8b:b7:04:
8c:79:3a:d9:3a:2c:2a:7a:a7:2c:d3:3b:50:d0:f8:
c5:1e:02:e3:8c:25:ce:59:9a:80:4d:b8:8b:08:63:
e4:34:c7:74:0f:51:d2:f3:14:20:98:98:23:0b:b8:
98:d6:72:4d:d6:cd:5d:c8:04:4c:28:40:a0:6f:52:
19:77:54:d8:d0:2c:ca:2f:37:35:ea:01:8f:66:8b:
f6:d6:ff:95:d5:c1:d5:b3:a2:93:fb:7d:88:18:9d:
db:07:17:53:bc:01:97:ab:23:5e:b6:94:d2:01:bf:
50:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DD:A1:94:69:CA:1E:75:91:11:B7:CD:A6:27:E2:88:A7:DC:8D:86
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E4C308ACA8BA11ED9E8EF9E6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.32.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:c7:8c:75:55:0a:3f:a6:30:9d:76:70:64:6c:1d:f2:d7:4d:
d8:14:82:ae:06:8f:95:df:e2:71:90:69:35:dd:d6:d2:e9:3d:
5f:c7:7c:98:cb:87:f9:e0:47:35:b2:ec:27:f2:ee:20:1a:db:
01:ff:a7:ca:ec:79:fc:31:d2:31:13:01:ca:ae:ac:c2:c6:01:
14:17:90:32:05:9a:18:57:73:cc:80:a1:3d:30:92:64:d8:db:
5b:55:86:66:57:1b:cb:1f:db:56:8d:66:57:5d:12:21:cd:08:
ea:3c:5d:73:7b:8b:0f:3d:34:b4:09:f0:c0:e8:9c:4b:61:72:
2b:fb:a5:5c:5a:7d:2b:4a:64:6b:31:1c:84:69:b5:15:0e:11:
fc:81:46:53:ea:40:dd:d6:dd:b9:3d:28:31:ae:80:e4:80:6e:
8e:54:4a:aa:18:8d:95:7b:51:d5:c4:1f:2d:be:80:f0:bd:95:
53:aa:f7:69:b3:79:a3:9e:c1:20:e4:95:4c:0b:8a:06:e9:f0:
2c:2a:90:40:a2:c4:1b:4c:7d:13:91:2c:9f:39:9b:d2:1a:1e:
21:07:96:64:35:93:ce:6b:41:c8:1b:a5:2b:d8:12:f9:22:4d:
46:cd:94:31:ee:9b:97:fd:d2:c3:57:f1:94:22:d8:cc:b7:01:
db:22:69:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:33 2023 by rpki-client on console-ams.rpki-client.org