Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2903F19ACBDF11EFA1461C81762E951A.roa
File: 2903F19ACBDF11EFA1461C81762E951A.roa (raw, json)
Hash identifier: DZib9jrQUCf36ZBbb8EhpyIl5dYHF9ulgGDy0fSBgQ4=
Subject key identifier: 0F:CD:A9:10:44:E8:FA:8C:13:2E:04:EF:6A:5A:C3:21:03:EB:43:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F7FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2903F19ACBDF11EFA1461C81762E951A.roa
Signing time: Mon 06 Jan 2025 03:34:40 +0000
ROA not before: Mon 06 Jan 2025 03:34:36 +0000
ROA not after: Thu 06 Feb 2025 03:34:36 +0000
asID: 32708
IP address blocks: 156.236.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 10:36:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63486 (0xf7fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 03:34:36 2025 GMT
Not After : Feb 6 03:34:36 2025 GMT
Subject: CN=677b4f50-da11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:86:5f:8b:eb:9b:84:e3:fe:85:2a:58:01:
c2:1c:06:c3:ae:e0:f5:eb:f6:40:a5:69:bc:13:3f:
db:9a:06:a4:8c:d8:76:7a:9f:fd:86:3e:e1:6a:51:
1c:17:46:b7:df:a3:2f:f0:5c:6a:f7:88:0a:1c:3a:
73:5c:24:fa:ff:8d:95:a2:14:aa:05:b2:5b:32:fe:
67:00:95:9d:28:10:ed:09:aa:76:b5:bb:1a:8c:20:
04:cc:77:59:ed:93:c6:6a:5c:51:bf:56:d5:25:fc:
32:3d:5a:1a:80:56:3f:15:62:88:4b:b1:fd:a3:f5:
67:56:d6:4e:e9:91:a2:11:7b:d9:df:41:0c:1b:5d:
b8:c5:dd:c9:b4:ac:bb:71:54:dc:db:e2:88:b0:7d:
b4:fc:8d:57:89:64:d9:de:c3:72:35:8d:d5:d3:e4:
35:af:96:a1:95:8a:50:d0:75:73:22:5a:33:ff:ec:
de:9e:0e:02:b3:e5:9a:73:a3:aa:08:0e:55:18:28:
85:fd:27:ad:83:8d:cc:8b:87:90:f7:e6:81:13:5d:
23:58:7e:c8:b6:ec:54:5d:d7:ce:3c:ad:79:01:d9:
a3:a6:ce:67:c9:71:4d:28:67:73:c2:b7:5d:15:57:
b5:9f:11:21:f9:8e:1e:1b:52:2b:19:07:5e:ef:73:
60:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CD:A9:10:44:E8:FA:8C:13:2E:04:EF:6A:5A:C3:21:03:EB:43:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2903F19ACBDF11EFA1461C81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.61.0/24
Signature Algorithm: sha256WithRSAEncryption
36:44:3c:1f:20:14:7b:3d:10:98:c7:9e:8f:78:ba:68:40:84:
19:11:52:58:90:7a:7e:2b:6f:26:cd:15:1f:30:e4:3d:09:2d:
3f:bf:a4:17:d5:9a:63:96:80:f0:ad:f5:bb:8d:e5:ec:35:a9:
b9:f1:d7:cc:bc:b8:8b:a8:bd:7c:28:a5:e0:d2:2d:08:41:e4:
89:85:27:be:f8:78:e6:a3:ca:4f:44:7e:dc:a4:59:b9:36:0c:
27:6d:04:87:5d:de:dc:ff:81:f6:1b:b9:2c:fa:ce:d2:07:61:
49:9f:8a:8f:82:51:2c:92:de:fc:d8:5a:53:c8:07:a8:35:3d:
c0:ec:2f:02:0d:f7:11:e9:a8:0a:fa:fa:50:d4:ce:81:31:e0:
d1:f5:e7:0d:4f:56:e3:5e:18:92:3b:4c:4b:f5:48:2d:b3:e3:
57:47:8d:0c:23:38:b7:b6:94:d1:93:20:1f:99:4a:15:75:fc:
cf:be:09:e7:68:5d:c9:88:d5:ba:3c:4e:de:96:0d:32:8c:4a:
8a:77:ad:8b:1f:80:73:e4:7c:c5:38:76:53:da:b1:7a:51:eb:
7f:63:d7:92:c1:77:e5:0c:02:71:ee:bb:dc:92:25:94:a1:55:
7c:4f:cb:f4:8f:33:2f:9b:8b:10:0d:e2:02:28:50:2f:1e:90:
2a:5c:59:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:45 2025 by rpki-client