Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/6528C7B878ED11EE9D44684F4AD9E6FC.roa
File: 6528C7B878ED11EE9D44684F4AD9E6FC.roa (raw, json)
Hash identifier: wLQ0mdNLEI+nPNbWFj9Cggg45lwlIzXvBcIua1+rKjE=
Subject key identifier: 85:6B:BD:EF:B4:D0:AE:AD:99:54:78:A5:C8:06:03:5F:43:71:A0:8F
Certificate issuer: /CN=F36C1E88AR/serialNumber=5B6F8B0D862E612104D1FCBA691F0368DD34F0A1
Certificate serial: 04
Authority key identifier: 5B:6F:8B:0D:86:2E:61:21:04:D1:FC:BA:69:1F:03:68:DD:34:F0:A1
Authority info access: rsync://rpki.afrinic.net/repository/arin/W2-LDYYuYSEE0fy6aR8DaN008KE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/6528C7B878ED11EE9D44684F4AD9E6FC.roa
Signing time: Wed 01 Nov 2023 19:32:29 +0000
ROA not before: Wed 01 Nov 2023 19:32:25 +0000
ROA not after: Wed 30 Nov 2033 19:32:25 +0000
asID: 328162
IP address blocks: 160.119.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 29 Jun 2024 20:37:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C1E88AR/serialNumber=5B6F8B0D862E612104D1FCBA691F0368DD34F0A1
Validity
Not Before: Nov 1 19:32:25 2023 GMT
Not After : Nov 30 19:32:25 2033 GMT
Subject: CN=6542a7cd-e331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:d2:e5:8c:d7:e0:38:fa:0f:7b:b5:77:90:
1c:d2:7c:0b:b8:86:5e:48:8b:42:df:20:9d:96:59:
24:08:7d:71:28:e6:25:77:bf:6f:d8:ce:ec:13:e3:
25:83:5c:46:1a:37:9c:ef:a5:26:db:18:83:23:ae:
99:9f:bf:3d:ec:b5:5e:bc:b0:f7:93:5b:cf:1c:48:
bf:c0:32:e2:00:33:fd:1f:5d:06:0a:c5:62:a4:8d:
05:4f:70:15:8a:8f:a7:2c:41:aa:97:95:48:25:d3:
c4:41:18:4a:16:fa:ca:e9:13:6d:44:1f:55:f4:80:
4c:dc:09:b1:eb:27:d7:8c:eb:02:6f:fc:2f:b1:52:
8b:8a:86:8b:74:af:ec:42:39:c5:67:d7:06:d6:e3:
31:1e:06:4f:06:3f:aa:46:88:78:42:57:bf:c0:86:
40:d7:5b:42:d6:f4:2a:26:fa:16:00:32:1a:04:0e:
6c:77:13:27:88:af:97:85:a6:b9:b7:85:84:70:be:
40:5d:62:ea:76:dd:01:90:2c:2d:2e:8d:6e:fe:b7:
3f:88:7b:9b:12:40:c7:95:b9:eb:4e:97:13:ab:c2:
d1:f3:5a:14:0f:68:f4:1e:b8:a2:a1:d7:eb:d5:2b:
75:7c:7e:83:34:44:ba:a5:83:5f:e1:79:ab:67:13:
4c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6B:BD:EF:B4:D0:AE:AD:99:54:78:A5:C8:06:03:5F:43:71:A0:8F
X509v3 Authority Key Identifier:
keyid:5B:6F:8B:0D:86:2E:61:21:04:D1:FC:BA:69:1F:03:68:DD:34:F0:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/W2-LDYYuYSEE0fy6aR8DaN008KE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/W2-LDYYuYSEE0fy6aR8DaN008KE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/6528C7B878ED11EE9D44684F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.119.216.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:d4:c9:c9:bd:3f:3b:3a:54:35:87:1c:eb:af:56:da:fb:73:
0e:fb:df:19:d6:c3:b3:ad:eb:44:4c:10:4b:cf:22:ab:63:7a:
5d:58:4f:cf:a7:90:c3:21:f2:cd:d9:4e:9a:c0:25:08:22:2e:
c5:65:fb:e3:c2:a3:b1:d9:de:15:2c:59:f3:a1:4e:c2:2b:b4:
ce:a0:7e:54:14:72:88:06:5f:45:4b:6b:32:28:8f:ea:b3:1a:
14:e8:ae:3e:7b:99:93:ae:f9:27:da:1e:2f:18:5b:7d:f6:e0:
e4:22:9f:c7:f9:e6:66:27:61:fb:e0:1d:d2:31:86:68:d2:5c:
4d:98:10:a1:a6:24:a6:11:6c:57:72:a0:b2:6b:08:17:a2:86:
be:2f:02:a1:20:b1:b1:df:e3:a0:a0:68:be:30:ef:e8:02:87:
3e:7b:c8:da:86:ca:4b:d0:3a:75:68:67:c9:7b:05:e1:fe:a4:
c8:90:48:72:50:0e:ba:44:56:b2:c4:b0:fe:de:17:af:4e:1a:
5b:4c:ac:d3:aa:c3:be:c8:75:bf:20:f3:0b:91:13:44:e3:34:
36:8f:be:32:7c:3d:30:b3:01:79:3c:78:42:5a:df:c0:bc:28:
1c:53:23:7a:89:36:7d:49:43:94:2b:3c:b8:e5:b0:5b:c4:4f:
a9:7e:fb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 22:16:45 2024 by rpki-client on console-ams.rpki-client.org