Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED1EBCE2CBDD11EF9E972E78762E951A.roa
File: ED1EBCE2CBDD11EF9E972E78762E951A.roa (raw, json)
Hash identifier: 14bAxYXqPZU/nxMMxRRlRwL65ry7+64c/FBt/GiGQwk=
Subject key identifier: 8B:DE:93:A4:F8:A8:B1:7E:C3:BB:9E:37:EA:FF:48:95:2C:29:E8:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F7F8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED1EBCE2CBDD11EF9E972E78762E951A.roa
Signing time: Mon 06 Jan 2025 03:25:50 +0000
ROA not before: Mon 06 Jan 2025 03:25:46 +0000
ROA not after: Thu 06 Feb 2025 03:25:46 +0000
asID: 32708
IP address blocks: 156.236.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 10:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63480 (0xf7f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 03:25:46 2025 GMT
Not After : Feb 6 03:25:46 2025 GMT
Subject: CN=677b4d3e-8d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:98:03:65:47:75:50:1d:f7:06:03:da:73:
83:a3:a8:d1:c7:b7:2e:49:de:31:07:17:61:f9:db:
60:c3:32:dc:c5:0f:28:7f:72:0b:99:88:71:40:17:
17:2d:30:78:a3:ee:4e:62:13:a0:49:ee:b2:a9:23:
1d:33:25:ea:a2:4d:ed:11:f1:82:39:43:9a:4b:9a:
55:10:ea:24:e7:d9:2a:6e:61:f7:98:06:1a:b4:8f:
8d:b0:ea:00:58:d7:ee:82:00:9e:11:97:4a:90:41:
23:2f:05:52:38:3a:eb:81:6a:d9:c8:0f:4f:99:b0:
bb:33:07:43:ca:16:1d:d0:93:d2:00:0b:22:e0:6d:
74:38:fa:e1:47:7f:3d:01:4c:ab:93:e8:74:70:38:
f2:03:0a:72:ce:50:64:ec:50:d6:fc:c1:5c:77:a7:
38:9e:d9:6f:06:86:73:51:ab:d7:b8:e6:f6:c4:50:
fa:e1:3f:0d:66:3c:f5:db:db:82:73:6e:5a:89:f9:
77:5f:f6:31:11:c7:f4:d6:77:da:49:bc:3b:5e:d1:
c0:d3:0c:bf:fa:38:7d:88:3b:66:a9:96:4b:08:27:
7b:40:f6:6c:df:e9:7b:f0:92:dc:86:fb:7d:62:2d:
0c:05:6c:2f:ed:58:d4:7f:88:9f:85:f7:c9:37:79:
d2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DE:93:A4:F8:A8:B1:7E:C3:BB:9E:37:EA:FF:48:95:2C:29:E8:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED1EBCE2CBDD11EF9E972E78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.49.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c8:81:54:2d:b9:13:08:20:29:ae:e7:93:2e:28:99:ae:2f:
cd:1d:d9:06:57:d1:34:44:1d:dc:f0:74:72:5e:93:8f:57:2d:
37:0c:ff:ee:5b:89:04:2a:66:ca:e2:b9:71:e1:0b:74:ce:c8:
ba:46:74:20:77:5a:d2:b4:84:51:06:ce:67:5e:2f:df:44:46:
10:61:e3:e5:8b:4f:28:93:62:42:9b:69:ff:80:96:c0:de:71:
2d:e3:1e:dc:70:4d:2c:f7:b8:be:e1:4e:ee:88:ca:a2:40:2e:
ab:4d:5a:52:36:1f:87:d4:2b:f2:b2:e4:12:14:57:df:90:72:
a8:ef:0b:d5:83:8f:86:cb:fb:27:96:09:84:2a:93:8f:7d:02:
d3:7c:af:00:97:5b:71:42:bc:1f:d0:70:0c:98:71:04:11:7c:
61:55:be:93:1a:e3:9d:97:0d:88:27:b5:fc:b4:ce:1b:c1:34:
38:bb:0c:8e:04:b9:63:70:56:99:0b:2b:f3:0f:92:34:3b:2b:
ef:03:eb:25:1c:c8:7f:b7:89:a4:d6:34:3d:60:77:c9:d7:8f:
c4:f3:6c:07:60:dc:83:42:9c:74:3f:f3:da:f4:46:c3:18:f6:
08:56:42:79:f1:2a:78:04:8c:3b:02:66:0f:05:20:f7:3e:a3:
07:c5:de:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:55 2025 by rpki-client