Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/7A81C1B2D53C11EF9AB93DB8762E951A.roa
File: 7A81C1B2D53C11EF9AB93DB8762E951A.roa (raw, json)
Hash identifier: OOXTjEDbBVWZsmrg2/ik2lCf+MFNJXHbCXHESJLIK4A=
Subject key identifier: 5C:42:50:15:3F:B1:2D:5D:D5:A3:91:77:68:66:15:69:B5:5B:22:8D
Certificate issuer: /CN=F36CFBB0AR/serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Certificate serial: 11
Authority key identifier: C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Authority info access: rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/7A81C1B2D53C11EF9AB93DB8762E951A.roa
Signing time: Sat 18 Jan 2025 01:35:20 +0000
ROA not before: Sat 18 Jan 2025 01:35:16 +0000
ROA not after: Tue 31 Jan 2040 01:35:16 +0000
asID: 328215
IP address blocks: 160.226.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Jan 2025 18:11:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CFBB0AR
Validity
Not Before: Jan 18 01:35:16 2025 GMT
Not After : Jan 31 01:35:16 2040 GMT
Subject: CN=678b0558-77fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3b:67:7a:d1:1f:a6:57:76:f7:60:67:83:50:
53:3b:e3:d1:9f:e7:27:5f:a2:3d:5d:89:4a:86:5f:
5d:20:59:35:15:4a:d8:e6:80:af:e2:bf:35:04:2b:
62:17:d0:f0:fa:fe:f4:08:72:74:d3:5c:f0:a7:d5:
40:9a:7f:dc:33:f4:76:61:35:b3:a4:9f:70:18:7e:
00:a0:00:38:4c:2e:db:8e:31:a0:42:71:19:fe:a9:
ec:d5:8f:cd:eb:bd:0f:df:40:66:7f:45:94:7f:71:
f7:45:01:d7:16:38:77:29:70:45:09:f4:36:b8:30:
a4:6a:48:2d:a4:77:eb:8d:bd:4e:bd:ac:1f:09:1b:
1f:f8:da:63:41:22:9a:95:ea:38:cb:c5:63:e0:13:
a1:8c:b4:3f:a4:b9:84:46:13:b6:98:33:4d:43:39:
ac:e0:70:b7:d8:33:cf:33:be:20:a1:ce:77:f1:9c:
35:97:60:6d:26:d5:4b:81:27:d9:23:21:09:58:34:
3a:56:24:72:bd:49:da:c2:23:ff:65:fe:77:5a:01:
e4:22:3c:7b:f2:3d:a1:da:1f:c6:12:39:0a:a0:aa:
60:64:cf:df:20:9a:c9:51:a1:d3:9c:55:99:5d:ba:
33:c1:04:52:64:68:2a:ba:80:82:3f:14:07:18:e8:
2c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:42:50:15:3F:B1:2D:5D:D5:A3:91:77:68:66:15:69:B5:5B:22:8D
X509v3 Authority Key Identifier:
keyid:C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/7A81C1B2D53C11EF9AB93DB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.226.184.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:5c:a2:e1:92:e3:8d:0b:ee:77:09:f2:be:3a:4a:2c:dc:71:
c2:d9:1a:96:d3:9a:a7:9b:60:1f:fe:a2:21:3a:16:fe:7c:0a:
d3:96:12:47:a9:8d:5b:84:5b:88:6d:5f:25:d3:da:0c:94:9c:
3f:83:48:df:20:7c:74:1a:70:4e:ad:e5:76:aa:2f:08:e1:8f:
c1:65:cd:e1:15:bf:eb:5b:84:53:5e:4f:c1:a2:34:71:1c:38:
f6:b2:9c:ca:9e:7d:d8:ca:0b:16:20:63:c5:de:33:b8:02:3f:
70:ea:c0:6f:fb:85:0f:f2:6b:ca:bf:8c:43:2f:57:91:e0:2c:
40:6c:28:76:a7:a5:fd:8d:be:cf:b0:35:30:a4:93:9c:c0:b3:
64:4b:06:ad:86:19:16:9c:31:9f:dd:e3:f9:56:eb:d8:32:8a:
a2:d8:3c:76:09:9e:ec:86:d5:4e:48:29:a1:02:d7:9e:59:03:
61:7e:c2:d9:04:7b:36:33:90:4d:1f:53:ed:f8:b7:a4:15:4a:
f5:87:7d:d4:7e:3f:38:31:54:d9:67:0b:b7:0e:a2:12:52:46:
88:92:c2:73:70:cb:62:82:4e:de:53:d6:b5:8e:4e:1b:33:17:
fb:5c:e6:08:41:ab:d4:7f:89:41:db:cb:7e:67:ff:bf:83:c9:
8b:bf:e5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:56:37 2025 by rpki-client