Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB168810CBDE11EF9B207D7C762E951A.roa
File: AB168810CBDE11EF9B207D7C762E951A.roa (raw, json)
Hash identifier: pIk/oHDb1aaZXKTqBCxZcIcUZyTvY0JE1VkL9Us+XOs=
Subject key identifier: 09:66:60:B4:67:42:0A:EF:88:55:4B:BD:99:44:B4:9D:E6:28:53:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F7FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB168810CBDE11EF9B207D7C762E951A.roa
Signing time: Mon 06 Jan 2025 03:31:09 +0000
ROA not before: Mon 06 Jan 2025 03:31:05 +0000
ROA not after: Thu 06 Feb 2025 03:31:05 +0000
asID: 32708
IP address blocks: 156.236.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 10:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63484 (0xf7fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 03:31:05 2025 GMT
Not After : Feb 6 03:31:05 2025 GMT
Subject: CN=677b4e7c-f61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:b1:44:ef:fe:fe:07:11:3c:fc:53:84:f4:
a7:a3:99:4e:f9:02:6b:da:e3:02:12:71:25:ee:57:
2f:e0:29:10:00:e5:a2:d4:72:75:e5:73:08:61:39:
26:06:18:cd:2c:82:bf:de:87:8d:da:57:2a:69:66:
ff:0a:73:2a:ab:ab:e3:20:bf:11:73:2d:37:07:74:
c4:49:2b:ef:72:1d:37:a8:8d:0c:e3:9f:c4:fa:bc:
46:31:7d:9f:21:ff:24:66:19:10:cf:7b:b6:ce:8c:
07:e3:78:e1:91:14:46:7c:89:d6:80:6b:2e:f7:e6:
19:e8:8f:d6:9b:3c:0b:4b:8d:9d:78:5d:e6:ca:7b:
dd:a6:49:af:61:0b:7c:aa:c2:78:96:7a:26:dc:5c:
89:e7:08:7c:4c:7a:a8:41:83:58:b4:49:46:36:1d:
5d:36:f1:58:a3:38:ca:3c:be:06:8c:be:57:c2:de:
a4:eb:da:05:88:41:6c:45:41:c1:90:69:7e:40:de:
f3:a0:1c:3d:be:9c:30:b8:39:84:f6:77:1d:e1:3f:
14:18:c2:f7:19:87:c4:03:e1:b2:62:7f:38:95:77:
05:5e:3f:72:a4:48:0e:92:2d:ef:74:7c:2f:fb:c9:
1c:7c:64:e0:eb:74:38:2c:83:01:55:b9:43:9f:9f:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:66:60:B4:67:42:0A:EF:88:55:4B:BD:99:44:B4:9D:E6:28:53:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB168810CBDE11EF9B207D7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.43.0/24
Signature Algorithm: sha256WithRSAEncryption
28:43:36:12:b5:05:c7:ea:b3:ab:86:e3:b8:66:87:03:96:14:
42:71:ef:37:15:a0:7a:b8:50:44:dc:8c:03:f2:29:9e:71:b9:
01:63:38:3f:41:69:c6:64:bb:ae:05:56:57:64:20:97:d3:eb:
e9:2c:45:67:05:39:67:b8:15:d2:47:4b:a5:2c:70:f8:0b:a7:
62:96:5f:cb:6f:8e:41:b6:0f:ea:55:55:46:b4:8d:5f:a2:42:
b0:10:94:10:ee:e1:b1:e4:cb:ee:06:8b:28:21:97:dd:92:4e:
32:b2:7a:5d:fe:d4:b0:55:ea:96:30:0b:b1:01:c4:63:43:6a:
58:d9:35:b7:72:0f:41:ed:ba:4b:55:d1:70:aa:1c:a2:e8:3b:
ef:14:dc:14:b6:ac:b0:c5:44:f0:99:2e:e0:d8:2f:d1:5d:46:
24:66:80:24:f6:cb:ef:b4:66:a0:12:ce:5f:75:ec:3d:12:7d:
df:42:56:7e:98:a2:fc:76:5c:85:62:e4:52:12:6f:9e:9a:39:
33:b8:e8:24:de:b1:a4:54:7f:85:d5:9f:5d:c1:f4:b8:e2:d8:
8b:24:4b:57:6b:46:0b:77:8e:20:64:e6:d7:39:65:55:e5:5e:
df:ac:7d:37:97:8b:e3:de:bf:15:c7:86:00:e7:96:c3:d6:db:
bc:1a:92:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:40 2025 by rpki-client