Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/5ED33ED478E811EEBA314A404AD9E6FC.roa
File: 5ED33ED478E811EEBA314A404AD9E6FC.roa (raw, json)
Hash identifier: WeH2nbunA+ONG30lA4ZPmpUXz1+YPWclMgP2ERtLMQg=
Subject key identifier: C6:68:B3:65:5F:EA:57:73:8B:A2:F3:A8:85:B4:30:3A:65:9D:5D:DC
Certificate issuer: /CN=F36C1E88AR/serialNumber=5B6F8B0D862E612104D1FCBA691F0368DD34F0A1
Certificate serial: 02
Authority key identifier: 5B:6F:8B:0D:86:2E:61:21:04:D1:FC:BA:69:1F:03:68:DD:34:F0:A1
Authority info access: rsync://rpki.afrinic.net/repository/arin/W2-LDYYuYSEE0fy6aR8DaN008KE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/5ED33ED478E811EEBA314A404AD9E6FC.roa
Signing time: Wed 01 Nov 2023 18:56:31 +0000
ROA not before: Wed 01 Nov 2023 18:56:27 +0000
ROA not after: Sat 31 Dec 2033 18:56:27 +0000
asID: 328162
IP address blocks: 160.119.216.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Nov 2023 19:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C1E88AR/serialNumber=5B6F8B0D862E612104D1FCBA691F0368DD34F0A1
Validity
Not Before: Nov 1 18:56:27 2023 GMT
Not After : Dec 31 18:56:27 2033 GMT
Subject: CN=65429f5f-e21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:37:ea:49:3a:08:5d:72:4d:5f:15:37:36:
fe:59:53:6a:f8:94:6a:c7:b6:1e:83:cc:a6:ed:cc:
10:c7:61:ea:1a:84:1b:21:f8:8d:1e:7a:8f:5e:1e:
0c:83:d7:3a:e6:0f:f3:72:6e:56:1c:2f:46:c7:19:
8c:43:72:42:17:87:fa:1d:53:63:25:0e:04:1e:f9:
92:fc:ec:c9:7a:db:bf:5c:57:ab:21:0e:4b:d5:dc:
11:bc:09:38:74:b4:7f:44:f1:25:49:67:30:9a:3d:
af:08:43:d8:e2:76:84:fe:50:ea:ef:a8:a9:21:46:
24:fd:df:58:5d:e5:8a:4e:b9:45:42:f9:1b:92:b0:
3e:99:f0:b1:a8:49:4a:f6:86:b3:58:15:0a:5c:a0:
40:2a:20:05:ae:aa:87:f4:09:fe:f0:65:5e:d7:a3:
13:56:aa:49:0e:a4:4d:46:fc:fa:90:ad:cd:e4:80:
22:13:db:c6:e3:e6:76:d7:92:d5:ba:cb:2f:21:79:
3b:90:67:e5:0e:b0:b5:a5:f9:42:c7:96:42:1f:a8:
8c:3e:f5:6e:fb:e0:31:ad:5c:11:b8:27:de:97:ba:
96:b6:32:78:9e:63:44:34:46:2f:e7:bb:20:49:c8:
c9:e3:ae:d7:92:a5:87:3d:d5:75:41:51:12:f6:3a:
6d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:68:B3:65:5F:EA:57:73:8B:A2:F3:A8:85:B4:30:3A:65:9D:5D:DC
X509v3 Authority Key Identifier:
keyid:5B:6F:8B:0D:86:2E:61:21:04:D1:FC:BA:69:1F:03:68:DD:34:F0:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/W2-LDYYuYSEE0fy6aR8DaN008KE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/W2-LDYYuYSEE0fy6aR8DaN008KE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/5ED33ED478E811EEBA314A404AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.119.216.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:78:cc:f8:d6:f7:c9:60:70:43:8a:1c:c7:ed:28:da:21:65:
0d:d5:74:13:1f:9d:4b:a6:5c:73:c9:e9:cd:96:12:46:7a:33:
94:8c:37:25:53:4d:13:5d:ab:b4:b9:6e:64:09:be:8f:b6:36:
b6:9f:46:de:ab:39:28:64:f1:4c:91:e0:1c:43:92:d2:2f:0a:
5c:ea:73:9b:4d:ba:98:72:3c:b0:20:6f:26:54:c6:1d:45:67:
ce:60:32:83:52:35:4e:7e:bd:c3:22:b8:c2:df:67:e5:97:a1:
a8:05:55:96:aa:61:01:b0:4c:90:51:f6:82:57:8e:be:96:6b:
54:f1:84:c6:db:76:e2:fe:5b:ca:a9:6e:e1:2a:15:95:92:57:
e0:79:10:6b:48:f9:7c:98:e1:ad:93:88:73:f5:0f:46:00:16:
7d:57:1e:83:c4:28:ea:49:ee:33:f9:76:06:ed:b9:73:cc:c5:
b0:11:19:14:ef:ac:9f:4c:78:9f:4d:3e:14:ae:28:1c:bd:ec:
d5:1b:38:91:08:11:71:55:58:54:7b:5a:73:54:d8:12:b3:4e:
98:d8:07:b3:34:f2:8a:b4:5d:3e:fd:e9:fb:5b:ef:8b:16:29:
cb:d2:e3:d8:66:5a:d0:b2:d2:11:8e:3c:3a:fc:37:32:4a:fc:
ec:ff:76:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:22 2024 by rpki-client on console-ams.rpki-client.org