Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/F91C36BC2D1C11EDA278918EF1222468.roa
File: F91C36BC2D1C11EDA278918EF1222468.roa (raw, json)
Hash identifier: 9tNkuHhQmT9tbHnLvOQAdvdO7HgEjXGrBTxO9N7JFGg=
Subject key identifier: 2D:1B:23:DC:7C:80:9D:FC:E9:C2:BE:78:19:07:DB:00:FC:7F:2B:C4
Certificate issuer: /CN=F36A4459AR/serialNumber=A1E01640636C83C22D07099242CCF4C269102B5E
Certificate serial: 02
Authority key identifier: A1:E0:16:40:63:6C:83:C2:2D:07:09:92:42:CC:F4:C2:69:10:2B:5E
Authority info access: rsync://rpki.afrinic.net/repository/arin/oeAWQGNsg8ItBwmSQsz0wmkQK14.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/F91C36BC2D1C11EDA278918EF1222468.roa
Signing time: Mon 05 Sep 2022 13:16:38 +0000
ROA not before: Mon 05 Sep 2022 13:16:34 +0000
ROA not after: Sun 05 Sep 2032 13:16:34 +0000
asID: 37638
IP address blocks: 169.255.64.0/24 maxlen: 24
169.255.65.0/24 maxlen: 24
169.255.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 09:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A4459AR/serialNumber=A1E01640636C83C22D07099242CCF4C269102B5E
Validity
Not Before: Sep 5 13:16:34 2022 GMT
Not After : Sep 5 13:16:34 2032 GMT
Subject: CN=6315f6b6-a749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:7f:a3:27:fb:a4:3b:b2:49:c1:08:08:7e:
0f:a9:e6:02:7e:2c:f9:5b:1a:65:6e:b1:8f:d1:b4:
db:91:dd:81:b7:0e:ae:86:87:18:65:1c:aa:db:a7:
73:7c:79:7c:cc:fa:66:b6:51:d5:f7:9b:22:d9:62:
55:2a:cb:a0:db:4c:fe:cf:31:cc:bd:0a:ab:1c:7d:
f7:e1:af:1b:47:db:a8:13:32:14:97:52:49:e5:aa:
12:8e:e5:44:8e:e1:de:d6:0e:86:32:c0:5d:fc:d9:
ca:e7:9d:53:c9:1b:32:85:76:fb:a3:ee:92:37:bf:
0f:2e:a1:3d:83:85:df:2f:6f:88:d8:dd:1b:19:e7:
87:5d:3b:2f:67:df:36:d8:7a:13:60:49:bd:c4:fc:
8c:bb:67:e6:06:54:73:ca:a4:44:1b:06:a9:72:75:
0d:67:b2:19:a6:11:cd:81:cb:69:10:fb:1b:a5:27:
91:de:f4:ce:af:1c:c3:98:d0:ee:99:72:a0:13:4e:
15:9e:50:e1:69:51:54:1a:a0:92:bc:b9:c6:2a:16:
54:c3:2c:24:21:f9:f9:3c:b9:77:20:d3:dc:5e:23:
ac:3a:ff:ee:26:a4:b3:37:ec:f5:37:6b:63:fd:b0:
fd:60:70:6f:33:63:ac:2e:10:d8:af:dd:cd:a9:61:
ad:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1B:23:DC:7C:80:9D:FC:E9:C2:BE:78:19:07:DB:00:FC:7F:2B:C4
X509v3 Authority Key Identifier:
keyid:A1:E0:16:40:63:6C:83:C2:2D:07:09:92:42:CC:F4:C2:69:10:2B:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/oeAWQGNsg8ItBwmSQsz0wmkQK14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/F91C36BC2D1C11EDA278918EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.255.64.0/23
169.255.67.0/24
Signature Algorithm: sha256WithRSAEncryption
44:83:47:55:ce:d0:61:85:94:29:a8:a8:59:12:8c:fb:a2:92:
57:aa:4f:74:2f:37:e5:73:45:10:9d:be:2e:a5:0a:79:89:6d:
e3:a4:b8:49:0c:c3:30:29:21:12:b8:77:2a:8a:d2:37:ef:88:
5b:0a:f5:9e:e1:d8:47:06:45:a5:b5:12:36:a3:d9:56:ca:a2:
24:3c:9d:b7:6a:8b:e1:ed:39:ca:d3:60:1e:00:10:c2:13:cf:
af:f2:9c:70:53:51:8a:f8:f1:e3:81:e0:7d:4f:29:1f:74:dc:
e8:b9:1c:00:89:b5:ff:54:34:ff:aa:5f:82:c7:2d:2e:22:e1:
24:95:cd:d6:3b:d2:48:b8:59:aa:9d:0f:31:15:61:b0:3b:fd:
04:a2:08:c1:0c:6b:4a:d4:06:b2:10:f8:f8:83:c2:7f:f7:88:
2b:35:7c:ec:e2:06:14:77:2e:dc:b8:5a:b5:8e:43:7b:37:8a:
74:3c:52:40:6f:87:49:52:a5:fa:b9:04:fc:64:f5:1c:94:f6:
77:a5:b7:a2:48:f8:7f:0f:4d:2c:21:3a:e1:5b:f5:ae:cc:26:
02:4b:ac:03:6d:1e:b3:68:e3:8d:5b:3e:fe:6a:37:2e:b0:41:
6c:34:ec:0e:6c:59:e9:bc:c1:9e:44:c9:89:42:96:e5:0b:d7:
48:36:c1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 15:04:22 2024 by rpki-client on console-fra.rpki-client.org