Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3A8A5C3A4E7411EFBE62A0BB762E951A.roa
File: 3A8A5C3A4E7411EFBE62A0BB762E951A.roa (raw, json)
Hash identifier: HRxu09TsWUVmJhg1ybct4OWeTMQwyF3xY9FIAIETmoU=
Subject key identifier: 8D:69:BB:4C:B4:20:7E:63:28:62:E8:63:95:A0:E6:C6:95:DC:88:F6
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0DFA
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3A8A5C3A4E7411EFBE62A0BB762E951A.roa
Signing time: Tue 30 Jul 2024 13:04:18 +0000
ROA not before: Tue 30 Jul 2024 13:04:14 +0000
ROA not after: Tue 30 Jul 2030 13:04:14 +0000
asID: 61290
IP address blocks: 161.123.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 07:20:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3578 (0xdfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 30 13:04:14 2024 GMT
Not After : Jul 30 13:04:14 2030 GMT
Subject: CN=66a8e4d2-c461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:6f:ad:9c:56:66:3b:64:8c:43:7d:cf:d2:
0b:7f:77:48:77:ca:01:ab:7e:0b:23:ec:3c:34:06:
78:8c:f6:02:e8:f1:b9:aa:b1:4d:ad:85:bd:a5:97:
2d:20:2f:d0:09:95:06:1e:85:5b:84:2a:64:51:84:
90:0d:9c:b3:9d:c7:04:7d:42:ba:92:86:1e:f3:d7:
23:05:43:84:ff:3f:61:6f:e7:05:60:b1:76:ef:8a:
06:8d:b4:cb:83:e0:91:88:ad:3f:78:90:6f:0b:e0:
0a:e3:17:51:f9:0e:09:5a:81:a0:18:81:25:12:db:
f1:cf:75:04:fb:4d:4d:35:e3:6e:0e:06:db:1b:16:
a9:45:81:bc:fb:b9:d4:37:a9:51:ec:d0:ec:94:61:
87:87:f4:52:13:09:b6:af:04:36:8b:f2:24:c6:46:
d2:01:93:84:f7:c3:9b:d9:8d:c1:89:89:49:84:91:
81:0d:a0:07:84:c6:bf:0b:2a:c8:0e:52:88:d0:66:
64:1d:e2:9c:b4:87:a8:ad:31:dd:12:aa:5f:7e:33:
82:da:c2:f3:d4:00:f6:e3:af:a7:cc:0d:b4:83:ef:
86:57:2f:94:19:ca:24:df:ba:e3:5c:91:22:4b:8b:
01:96:dc:8f:1b:b1:8a:03:38:e3:c0:95:db:7e:61:
b8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:69:BB:4C:B4:20:7E:63:28:62:E8:63:95:A0:E6:C6:95:DC:88:F6
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3A8A5C3A4E7411EFBE62A0BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.220.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:91:ef:81:81:8a:6d:40:00:4b:30:0e:f6:93:22:e4:65:6d:
96:75:7d:a9:20:8d:b0:c2:42:3b:54:54:b5:54:34:6d:6d:79:
5d:f3:69:3c:09:c7:0b:23:be:de:c3:07:8f:21:6a:ac:e5:15:
7b:3a:5a:b7:bc:0a:6a:eb:12:a8:4e:03:fe:3e:c3:a4:b7:65:
5d:ab:ff:e7:03:5b:d8:5d:76:50:fd:54:5f:ca:f1:2f:1b:2f:
e9:a7:62:7d:4c:3f:d6:b3:58:08:48:41:4a:b9:de:cc:e8:25:
ea:a3:08:e8:b7:3e:15:27:f9:23:7e:04:c9:4e:78:f8:e3:2a:
11:92:72:61:ee:56:da:17:10:a8:8e:9e:63:ed:83:46:fa:4d:
8e:6f:a1:78:a0:fa:b4:f4:e6:b5:79:48:20:9b:04:32:b9:07:
14:ed:27:ee:3f:70:36:e0:ee:06:c7:14:6f:b7:a0:a3:9f:58:
d7:36:26:77:43:cb:29:88:4d:d0:84:33:66:20:f3:29:3e:b8:
3c:4b:1b:f1:41:7e:44:2d:6e:2c:f6:6e:5c:5a:b4:d5:9e:7d:
9b:e6:75:95:d2:99:f3:43:c4:e1:c4:99:8f:ca:20:33:5f:25:
4d:4c:f1:e9:43:78:bb:0b:86:ba:8c:e5:66:50:ce:fb:d1:10:
40:f6:4c:a6
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDfowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yNDA3MzAxMzA0MTRaFw0zMDA3MzAxMzA0MTRaMBgxFjAU
BgNVBAMTDTY2YThlNGQyLWM0NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7X2+tnFZmO2SMQ33P0gt/d0h3ygGrfgsj7Dw0BniM9gLo8bmqsU2thb2l
ly0gL9AJlQYehVuEKmRRhJANnLOdxwR9QrqShh7z1yMFQ4T/P2Fv5wVgsXbvigaN
tMuD4JGIrT94kG8L4ArjF1H5DglagaAYgSUS2/HPdQT7TU01424OBtsbFqlFgbz7
udQ3qVHs0OyUYYeH9FITCbavBDaL8iTGRtIBk4T3w5vZjcGJiUmEkYENoAeExr8L
KsgOUojQZmQd4py0h6itMd0Sql9+M4LawvPUAPbjr6fMDbSD74ZXL5QZyiTfuuNc
kSJLiwGW3I8bsYoDOOPAldt+YbgxAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUjWm7
TLQgfmMoYuhjlaDmxpXciPYwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzNBOEE1QzNBNEU3NDExRUZCRTYyQTBCQjc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe9wwDQYJKoZIhvcNAQELBQAD
ggEBAByR74GBim1AAEswDvaTIuRlbZZ1fakgjbDCQjtUVLVUNG1teV3zaTwJxwsj
vt7DB48haqzlFXs6Wre8CmrrEqhOA/4+w6S3ZV2r/+cDW9hddlD9VF/K8S8bL+mn
Yn1MP9azWAhIQUq53szoJeqjCOi3PhUn+SN+BMlOePjjKhGScmHuVtoXEKiOnmPt
g0b6TY5voXig+rT05rV5SCCbBDK5BxTtJ+4/cDbg7gbHFG+3oKOfWNc2JndDyymI
TdCEM2Yg8yk+uDxLG/FBfkQtbiz2blxatNWefZvmdZXSmfNDxOHEmY/KIDNfJU1M
8elDeLsLhrqM5WZQzvvREED2TKY=
-----END CERTIFICATE-----
Generated at Mon Aug 12 09:16:32 2024 by rpki-client on console-ams.rpki-client.org