Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/5AF6A1E2B57411EFBA0F18B7762E951A.roa
File: 5AF6A1E2B57411EFBA0F18B7762E951A.roa (raw, json)
Hash identifier: QPGIA2oh0U6qk45ImdEcCxMhZWzo+4DvrcyYLZH0kOE=
Subject key identifier: A3:4A:C1:3D:CD:93:FC:E2:DB:CA:C7:33:78:A8:15:FC:FF:DA:A3:E7
Certificate issuer: /CN=F36F62C3AR/serialNumber=4BB03261F14D04B00B26B29725E420EE539EFAC1
Certificate serial: 0D80
Authority key identifier: 4B:B0:32:61:F1:4D:04:B0:0B:26:B2:97:25:E4:20:EE:53:9E:FA:C1
Authority info access: rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/5AF6A1E2B57411EFBA0F18B7762E951A.roa
Signing time: Sun 08 Dec 2024 14:54:42 +0000
ROA not before: Sun 08 Dec 2024 14:54:38 +0000
ROA not after: Wed 01 Dec 2027 14:54:38 +0000
asID: 132839
IP address blocks: 160.124.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Dec 2024 15:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3456 (0xd80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F62C3AR
Validity
Not Before: Dec 8 14:54:38 2024 GMT
Not After : Dec 1 14:54:38 2027 GMT
Subject: CN=6755b332-8e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:a4:24:07:0f:f0:d0:81:ed:7e:5c:82:de:
aa:eb:95:f1:16:06:9e:f6:3d:08:2c:9d:64:aa:0a:
fb:0d:6a:68:a0:2d:19:02:03:2f:93:5d:cf:0e:a2:
46:ef:d7:10:46:db:42:c5:87:8f:63:6b:37:7a:49:
d1:60:2c:9a:07:4c:fb:ca:61:a8:2a:c4:e7:e0:68:
3b:64:51:bd:c6:1a:90:cc:ee:42:ce:83:5f:9a:c8:
0d:d4:38:14:a4:aa:a7:df:8e:90:9d:2c:a6:ca:ee:
8b:e0:fb:ad:2b:d4:3d:10:0c:ce:c3:7f:fa:3b:82:
d1:66:7b:e9:75:82:a1:68:71:a6:73:cc:94:ee:c9:
79:c2:fc:da:4d:9a:6c:bb:fa:69:fb:83:c7:06:80:
57:f8:89:b8:5c:4f:37:d4:30:70:54:cb:5d:38:a0:
91:43:04:9f:c9:28:52:dd:70:99:5c:4a:af:b3:6d:
2e:a8:70:67:f1:d0:e0:f1:ba:75:05:a4:77:f8:41:
ea:89:10:fe:d5:01:fe:4b:4e:c5:d7:f7:2f:d0:09:
6a:b7:17:ae:88:bb:14:87:42:3d:2f:a4:e7:9f:54:
04:5b:52:b3:17:84:25:ad:8d:ea:86:6b:75:15:46:
8a:72:c4:42:18:fd:99:43:00:41:a0:bf:81:1b:11:
ed:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4A:C1:3D:CD:93:FC:E2:DB:CA:C7:33:78:A8:15:FC:FF:DA:A3:E7
X509v3 Authority Key Identifier:
keyid:4B:B0:32:61:F1:4D:04:B0:0B:26:B2:97:25:E4:20:EE:53:9E:FA:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/5AF6A1E2B57411EFBA0F18B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.124.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c4:8f:23:0e:6c:fe:2d:d2:f2:77:3e:13:03:da:63:aa:9b:
73:4e:a6:4d:80:33:13:66:39:a1:19:20:a1:68:41:d7:93:6c:
07:db:fa:53:80:97:a4:81:b7:85:3b:78:46:00:30:39:21:b3:
19:2f:00:84:9a:59:bc:b8:ae:05:2a:36:9d:48:70:ef:8c:69:
56:3f:96:6a:dd:7d:48:e3:13:50:1f:37:fa:d3:47:ec:74:f1:
80:d8:7f:72:4e:62:c9:fa:9e:14:84:ec:20:b2:fa:87:e0:4e:
04:1b:65:7c:23:c5:f7:b8:33:bf:4d:0f:0a:e2:9f:10:d1:b6:
83:fe:e0:1a:55:d3:d7:10:ab:65:a1:2b:71:3c:ad:d7:19:e7:
91:85:03:98:61:4e:09:93:f7:a5:6d:5d:94:5c:01:ae:90:d7:
d1:b4:b8:e6:00:2d:d7:b6:11:54:c5:56:1d:e3:e3:4e:b1:46:
a3:66:c4:d3:ba:03:b7:df:dc:5a:67:f6:c1:a7:91:1b:15:eb:
1c:e1:de:6d:6e:e0:05:52:fe:19:64:0c:9e:ad:ef:a5:71:a0:
7b:c6:6b:1d:50:3d:ea:72:a4:e8:3a:c9:b9:e0:95:4f:6a:eb:
1d:5d:3b:b9:4f:e9:ef:06:85:d4:55:d5:e1:95:be:9d:74:07:
63:63:8f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:57:10 2025 by rpki-client