Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36722D4/229903BA6BC011EF8E0EC970762E951A/9DD0F54E703C11EF8FB73EA7762E951A.roa
File: 9DD0F54E703C11EF8FB73EA7762E951A.roa (raw, json)
Hash identifier: y4LODGepHBMRq+A36xaixfuPiVvDVT/hUp8c92oi4gg=
Subject key identifier: 02:4E:94:F8:32:66:4C:9B:0A:25:DD:E1:80:7B:6A:4F:AD:46:B7:DE
Certificate issuer: /CN=F36722D4AR/serialNumber=78D1CD779C799FA64D6E90FAFC7B86E81BC2FC1A
Certificate serial: 08
Authority key identifier: 78:D1:CD:77:9C:79:9F:A6:4D:6E:90:FA:FC:7B:86:E8:1B:C2:FC:1A
Authority info access: rsync://rpki.afrinic.net/repository/arin/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36722D4/229903BA6BC011EF8E0EC970762E951A/9DD0F54E703C11EF8FB73EA7762E951A.roa
Signing time: Wed 11 Sep 2024 12:51:52 +0000
ROA not before: Wed 11 Sep 2024 12:51:47 +0000
ROA not after: Thu 11 Sep 2025 12:51:47 +0000
asID: 328157
IP address blocks: 160.19.196.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 13 Sep 2024 13:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36722D4AR/serialNumber=78D1CD779C799FA64D6E90FAFC7B86E81BC2FC1A
Validity
Not Before: Sep 11 12:51:47 2024 GMT
Not After : Sep 11 12:51:47 2025 GMT
Subject: CN=66e19268-55fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:b5:a4:d9:c8:68:d2:e2:8d:9b:40:dc:de:
6b:69:ef:c7:39:50:68:df:44:20:8e:3c:e8:4b:92:
38:0b:65:95:1e:f6:e8:12:b6:b4:ce:81:58:a8:c4:
88:60:69:73:24:99:78:8f:2d:8a:6c:35:17:be:a5:
ea:68:d0:13:84:d0:a4:4f:c9:96:dc:5f:87:04:a6:
0f:98:09:b6:14:30:0a:a9:94:c1:47:4b:85:67:e2:
78:9b:d1:0e:a6:d3:7e:71:01:92:55:1b:75:3e:aa:
94:23:52:fc:f0:ed:96:dc:48:cb:4c:02:dd:c8:c7:
a3:30:91:c8:f9:4a:5e:7b:25:ab:57:37:31:c7:ef:
ae:d5:68:a5:e7:78:06:11:09:76:05:36:b5:10:26:
12:26:8a:27:07:11:3a:e7:b3:a9:f4:e9:d0:64:8f:
fe:e1:f7:35:8e:b7:58:e0:57:27:17:d4:6b:aa:52:
2c:72:59:46:0c:9a:6e:83:54:b9:bf:6d:44:df:09:
59:51:e6:0d:ff:bc:2e:d9:6b:a1:19:46:c1:02:77:
d6:93:a6:a5:00:54:a2:63:c3:38:a2:90:c8:50:1a:
cc:e3:13:d0:9a:be:24:bc:be:b6:d6:0f:05:f8:b3:
0a:75:17:6f:92:2b:e1:ba:88:6a:5c:91:23:fa:8a:
1f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4E:94:F8:32:66:4C:9B:0A:25:DD:E1:80:7B:6A:4F:AD:46:B7:DE
X509v3 Authority Key Identifier:
keyid:78:D1:CD:77:9C:79:9F:A6:4D:6E:90:FA:FC:7B:86:E8:1B:C2:FC:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36722D4/229903BA6BC011EF8E0EC970762E951A/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eNHNd5x5n6ZNbpD6_HuG6BvC_Bo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36722D4/229903BA6BC011EF8E0EC970762E951A/9DD0F54E703C11EF8FB73EA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.19.196.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:d2:a9:4a:4a:4c:44:00:ad:06:16:de:2f:c4:68:2b:5a:51:
58:eb:19:f2:05:0a:b7:22:9c:60:f3:58:71:21:94:4b:c6:ec:
43:e9:34:03:10:47:4b:e8:2a:67:b7:78:f6:41:cc:78:48:3d:
f2:54:c8:15:09:cf:dd:2e:2f:db:b0:62:c7:69:60:af:99:30:
7a:f2:80:77:ee:ec:f9:d5:9b:dc:69:68:ef:cf:22:d5:81:ff:
a1:41:b4:c8:78:40:1f:97:cf:4f:91:da:2a:55:db:ad:31:44:
42:ca:c3:c3:a0:2a:44:e5:a0:55:22:9e:53:5c:ba:c9:19:6f:
6d:8e:c0:1c:48:37:7e:50:dc:c3:8d:05:24:35:a2:07:c6:1c:
10:d8:a0:24:f4:c9:c9:e1:3d:66:c8:ef:fb:76:89:87:ee:20:
d6:90:70:53:16:b1:d2:3c:d7:83:2a:27:76:a2:7c:29:1c:5f:
d7:fb:27:f1:27:ff:b2:c6:cb:b3:08:88:63:6c:d1:fe:ed:64:
41:d6:5a:a3:b4:5d:5e:3b:f3:ac:18:b9:13:a3:32:b4:bf:9d:
36:17:8d:08:72:fe:0b:b1:69:31:b7:10:c5:89:30:cd:f4:78:
cd:2f:d3:94:4a:34:70:72:a4:1c:c9:dd:3f:34:ad:2f:6d:18:
29:00:36:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 16:31:13 2024 by rpki-client on console-fra.rpki-client.org