Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/E88A89C4D78911EFA6AC5045762E951A.roa
File: E88A89C4D78911EFA6AC5045762E951A.roa (raw, json)
Hash identifier: fKKrn0SBvJ8B3FlRUm6CoFQTRXQslloLhM57b1rVinI=
Subject key identifier: 3A:AE:A1:BF:7B:7A:46:E6:E4:1C:7D:D4:4B:3D:BF:B0:1E:86:21:C2
Certificate issuer: /CN=F36CFBB0AR/serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Certificate serial: 17
Authority key identifier: C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Authority info access: rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/E88A89C4D78911EFA6AC5045762E951A.roa
Signing time: Mon 20 Jan 2025 23:54:38 +0000
ROA not before: Mon 20 Jan 2025 23:54:35 +0000
ROA not after: Tue 31 Jan 2040 23:54:35 +0000
asID: 328215
IP address blocks: 160.226.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 21 Jan 2025 15:28:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CFBB0AR
Validity
Not Before: Jan 20 23:54:35 2025 GMT
Not After : Jan 31 23:54:35 2040 GMT
Subject: CN=678ee23e-a302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:26:f2:ce:70:2b:07:ed:50:57:b8:52:c8:
d5:34:3b:ef:26:a7:9e:bb:54:f3:b8:1b:ec:dc:f2:
46:03:75:8e:ed:d5:df:b4:e2:96:57:52:21:d9:73:
93:e7:5d:4e:6c:dc:ec:94:e3:de:58:47:5f:47:62:
59:a6:7c:58:9c:8e:e0:c5:4c:9c:d5:5c:f4:a5:f6:
82:7b:39:57:7c:88:5d:0e:e9:ff:c8:33:0e:6b:93:
0c:0c:36:a2:9b:15:52:d7:a3:2d:80:fc:1d:e5:27:
9e:c0:07:6d:4f:49:5c:a3:33:5b:fa:cb:d3:44:ab:
7a:ce:64:81:c8:a3:e4:b9:37:17:25:8a:71:6a:85:
cc:a4:b8:79:26:d2:43:92:16:88:b6:a3:63:2f:a4:
0d:25:7e:c6:21:c5:02:c2:55:e3:32:42:b5:de:df:
49:e8:90:5e:64:0f:7a:9f:92:2b:7c:d0:b7:11:e3:
67:6f:8d:9b:aa:b6:f9:b7:b1:17:90:ac:37:18:09:
5a:e2:b1:30:5d:3c:17:6f:ca:9c:e0:65:08:1d:40:
6c:09:97:1d:a0:63:5f:15:bd:8c:dc:45:1c:7d:55:
a5:28:5f:8a:a3:8e:b7:af:35:b9:65:2a:43:c5:c7:
16:2c:b6:c8:a9:e1:d6:7e:ab:2d:dd:9a:dc:c5:3b:
64:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AE:A1:BF:7B:7A:46:E6:E4:1C:7D:D4:4B:3D:BF:B0:1E:86:21:C2
X509v3 Authority Key Identifier:
keyid:C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/E88A89C4D78911EFA6AC5045762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.226.184.0/22
Signature Algorithm: sha256WithRSAEncryption
44:35:93:38:8d:1a:54:81:fc:33:19:24:55:65:25:f8:75:a0:
cc:7a:cc:b1:03:60:95:20:19:73:7f:fe:7d:45:ba:fd:d8:71:
d7:84:62:20:88:ac:a3:98:a3:d9:cd:46:67:b8:aa:aa:2c:6f:
ad:46:2a:4b:73:7a:00:3f:cb:74:ce:5a:1c:4a:5d:87:9b:db:
ac:4d:91:19:7f:11:8a:c7:4e:eb:59:a7:eb:ed:bc:c5:2a:bd:
1d:4b:90:02:36:9a:56:81:a6:4f:77:27:9f:4d:22:77:aa:95:
fd:2e:81:ff:ec:3a:91:fc:ec:a5:b8:45:33:18:b6:88:9f:fa:
f0:d5:f7:03:f6:92:3c:d9:1f:a8:5d:e5:51:9e:53:41:c0:30:
ad:45:fc:e6:06:36:1d:56:58:1c:16:2d:2b:40:85:18:d6:24:
b3:2d:4b:41:ad:47:23:bf:6c:f1:cc:db:8f:30:b5:3d:92:2d:
1b:df:ed:0d:90:42:72:1b:03:0f:d0:21:f0:44:bf:1b:7d:5f:
46:01:46:b9:10:09:57:46:8c:5f:5f:06:7f:55:bb:69:88:ec:
cb:4e:b8:ba:59:27:0f:94:43:c8:4c:61:20:09:da:ce:14:aa:
ba:9b:f3:c5:aa:7f:22:06:84:09:1a:b1:4d:b4:10:c8:3e:6c:
39:83:6d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:51:51 2025 by rpki-client