Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/2E6EE534D46F11EFA5E9666D762E951A.roa
File: 2E6EE534D46F11EFA5E9666D762E951A.roa (raw, json)
Hash identifier: X/YgLoLukK0s8ae7uTl5Cy97AhltC5C42IrJImmBHm4=
Subject key identifier: 9F:1D:28:C0:CB:50:06:AE:E6:17:6A:73:49:72:E1:BE:A4:79:5B:EF
Certificate issuer: /CN=F36CFBB0AR/serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Certificate serial: 02
Authority key identifier: C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Authority info access: rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/2E6EE534D46F11EFA5E9666D762E951A.roa
Signing time: Fri 17 Jan 2025 01:05:46 +0000
ROA not before: Fri 17 Jan 2025 01:05:42 +0000
ROA not after: Wed 16 Jan 2030 01:05:42 +0000
asID: 328215
IP address blocks: 160.226.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 17 Jan 2025 09:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CFBB0AR
Validity
Not Before: Jan 17 01:05:42 2025 GMT
Not After : Jan 16 01:05:42 2030 GMT
Subject: CN=6789acea-10a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:08:22:85:66:64:36:77:24:11:b0:fd:7d:
7c:35:01:d1:03:47:84:04:0a:bb:00:71:8e:5f:3d:
6a:8c:e8:ea:9b:e8:6a:c5:ba:41:91:a3:b1:ed:4d:
30:9e:e6:f8:e5:fa:4b:2f:e3:36:6d:51:20:fa:ed:
6e:36:ab:b8:78:93:5e:18:eb:5d:d6:de:12:fd:c0:
d7:9e:53:b2:b5:c4:c7:91:82:93:44:7a:11:18:a5:
2a:4b:d3:bc:09:0c:b7:b0:d5:a6:c0:f1:ea:d5:c2:
21:65:3d:9e:71:3a:43:72:1f:94:78:e5:e8:2e:0e:
44:d4:55:ba:a5:90:b2:be:ad:e5:6e:3b:83:ec:66:
f4:6f:90:ed:f9:bf:d9:83:33:d9:a7:19:31:93:c0:
f6:c4:5e:61:33:2c:3e:08:e7:f7:5b:c9:c7:7e:bf:
7c:39:4e:cd:89:b4:ec:3b:eb:00:34:b8:56:47:2e:
b7:ba:f3:97:b7:ba:95:46:4e:d9:6f:1e:80:8a:fb:
df:d5:f7:64:32:06:a2:49:62:77:42:00:c0:e8:b0:
2a:ec:fc:f0:79:1f:71:ad:de:a4:eb:6c:cf:5a:63:
d4:9c:c0:0d:f5:73:48:fc:b8:bf:6c:d0:dd:76:47:
dc:dc:20:ca:90:0a:04:09:cd:19:c2:dd:bf:ae:41:
b0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1D:28:C0:CB:50:06:AE:E6:17:6A:73:49:72:E1:BE:A4:79:5B:EF
X509v3 Authority Key Identifier:
keyid:C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/2E6EE534D46F11EFA5E9666D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.226.184.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:4c:ad:38:10:1e:3d:5d:3f:01:2c:6d:c2:ee:38:0b:86:8b:
10:24:1e:5b:30:83:9d:52:4e:09:fd:de:a8:40:87:0f:ea:74:
1d:65:e0:a2:f4:99:d0:e1:c9:07:cb:01:82:0f:34:c5:55:41:
8c:58:9e:ad:2e:89:91:18:ea:a7:ba:84:08:f3:da:23:c7:0b:
95:a7:0a:21:3a:0a:33:d5:da:c8:11:f6:1d:dc:5e:ab:bb:9f:
ff:57:e5:ad:4c:87:f9:47:46:33:0e:09:f4:46:94:da:d9:de:
77:bb:97:75:f9:9e:1d:2c:f4:52:e8:8c:32:33:cd:30:47:b8:
6a:35:d2:aa:aa:b7:5f:87:3c:77:f5:fa:e8:48:38:4b:90:59:
40:49:79:f8:90:86:a6:84:08:48:05:ac:9c:33:a6:c0:3d:5b:
c2:7a:ce:bb:6c:71:72:ee:b0:33:b4:ee:97:60:77:c0:e6:46:
e2:1e:65:cb:e6:8c:11:f3:0d:a7:5c:fb:40:e9:08:0e:e5:df:
06:ad:95:6d:ff:fc:bf:43:8d:42:48:84:8c:b7:d4:48:c8:77:
73:a4:5a:e6:a5:6d:67:cb:88:cc:78:3d:e0:2a:d3:56:fd:73:
10:df:19:f3:3f:48:fa:5e:f7:83:a9:0d:e9:11:2c:5f:a6:71:
2f:b4:21:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:58:26 2025 by rpki-client