Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/21E6F644D52D11EFAC2C3750762E951A.roa
File: 21E6F644D52D11EFAC2C3750762E951A.roa (raw, json)
Hash identifier: 7GnxYHAExYnpxxiielYNTfOQ81KQb77CSBzMLCShHv0=
Subject key identifier: 67:E1:F4:A1:F3:82:D8:B4:DF:BF:E5:C8:3E:6A:34:8E:C4:27:E5:CB
Certificate issuer: /CN=F36CFBB0AR/serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Certificate serial: 09
Authority key identifier: C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Authority info access: rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/21E6F644D52D11EFAC2C3750762E951A.roa
Signing time: Fri 17 Jan 2025 23:45:29 +0000
ROA not before: Fri 17 Jan 2025 23:45:25 +0000
ROA not after: Sun 01 Jan 2040 23:45:25 +0000
asID: 328415
IP address blocks: 160.226.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Jan 2025 00:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CFBB0AR
Validity
Not Before: Jan 17 23:45:25 2025 GMT
Not After : Jan 1 23:45:25 2040 GMT
Subject: CN=678aeb99-3a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:97:82:b9:be:ed:e6:94:27:ad:71:6a:21:d9:
f8:96:24:22:54:88:5f:fe:e1:b7:dd:a2:fc:6e:8c:
d1:f3:f3:58:7a:a4:6f:e4:35:c3:0d:58:af:41:6a:
f4:f5:33:eb:11:14:24:81:d4:7d:26:4d:aa:14:3f:
43:45:a2:a8:fa:18:dd:ba:d1:d4:af:38:bd:55:52:
f2:c0:75:af:53:11:89:da:47:e5:df:f5:23:27:a1:
69:dd:1e:37:0e:fc:48:0d:c5:cb:ef:96:ea:cb:a6:
19:45:d8:4d:ab:1e:a9:39:4b:21:ea:08:cd:34:0b:
12:2c:14:59:ae:b5:85:f6:28:ce:94:29:6d:7a:96:
21:67:13:af:0b:b7:c4:6c:50:6e:6c:ac:f4:45:1a:
ba:9b:b1:d1:f8:50:c7:50:c7:5d:fe:3b:f4:0e:3b:
05:a1:15:20:ea:68:73:ea:10:8c:51:0e:28:08:55:
d5:3d:0e:87:cf:23:d7:d7:3a:31:21:9f:29:33:0d:
69:4e:d0:b3:fa:1b:16:70:15:8f:4f:e4:1f:cc:11:
b7:f8:78:d5:62:da:5d:82:0b:8d:81:29:bd:2d:89:
4a:62:f8:22:ff:bc:d3:12:0d:df:f8:1c:e8:71:ee:
f6:27:ad:28:12:7d:72:6d:b4:96:6c:36:02:15:e3:
bd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E1:F4:A1:F3:82:D8:B4:DF:BF:E5:C8:3E:6A:34:8E:C4:27:E5:CB
X509v3 Authority Key Identifier:
keyid:C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/21E6F644D52D11EFAC2C3750762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.226.184.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:4f:fd:f7:d3:1f:c1:81:4a:59:6a:76:c9:ba:a7:ee:0c:f7:
6a:f1:a9:b2:e7:c3:43:2e:f9:de:64:d6:8e:04:7c:72:54:d0:
1b:e4:bb:75:2e:fc:ba:e8:4b:a6:c6:d5:74:95:5a:0d:3e:20:
0f:3f:95:cb:d8:67:c2:b1:38:93:20:f5:64:df:b8:c5:1d:b9:
54:71:cc:28:f1:de:8f:b0:75:4d:31:a8:3d:36:7b:ab:16:d2:
7f:48:1e:2c:ea:8f:d5:ef:51:73:be:af:09:01:e3:5f:2a:47:
1d:a0:44:a8:31:9f:2d:4e:8e:ac:18:94:9b:c4:19:f8:4f:d1:
dd:96:17:c1:a2:44:28:bf:1e:4d:cb:3c:7b:33:c3:7a:ea:07:
b7:75:2d:da:f3:8a:b3:a2:27:db:ab:82:72:6e:53:e8:b1:e8:
07:fe:dc:f9:f0:d2:e1:6c:96:1c:c2:5e:c1:c1:8f:66:87:f3:
3f:66:18:af:fc:a6:bd:51:75:51:d5:28:d2:c5:ba:8f:68:05:
3c:4e:9e:a4:42:f9:5f:91:ab:65:dc:dd:7e:19:4e:d6:be:d3:
80:87:21:d5:16:1a:b7:61:20:fe:cf:36:6c:e0:1d:33:9d:c3:
2e:25:4a:5a:a5:f0:49:cd:19:2e:67:7a:d7:74:08:c3:76:dd:
6f:cf:93:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:49:56 2025 by rpki-client