Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6CC25CDE4E7411EF828218BC762E951A.roa
File: 6CC25CDE4E7411EF828218BC762E951A.roa (raw, json)
Hash identifier: 768Bojt590GHvH9fXE0JR30RoYtabcBIK61wRi8R3zY=
Subject key identifier: C2:76:4B:79:81:82:04:BF:35:CA:E1:C0:10:7F:5E:1A:6E:CF:F5:DA
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0DFC
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6CC25CDE4E7411EF828218BC762E951A.roa
Signing time: Tue 30 Jul 2024 13:05:42 +0000
ROA not before: Tue 30 Jul 2024 13:05:39 +0000
ROA not after: Tue 30 Jul 2030 13:05:39 +0000
asID: 61290
IP address blocks: 161.123.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 07:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3580 (0xdfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 30 13:05:39 2024 GMT
Not After : Jul 30 13:05:39 2030 GMT
Subject: CN=66a8e526-2f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:aa:2d:03:dd:d1:f7:7c:e4:c5:37:ff:5b:
31:63:ac:1c:89:7b:33:23:53:f2:1c:bf:fc:42:eb:
1a:47:8d:3f:d1:b3:0e:d1:0c:f1:ef:07:2a:15:22:
fa:06:46:61:22:06:58:f5:77:49:4c:71:fc:cf:a8:
ed:d6:c5:50:9a:b8:cd:a7:6c:43:9b:77:ea:e3:05:
b8:d4:c8:14:d7:11:10:a6:4a:c8:18:fb:3d:6d:5e:
24:e2:36:df:42:86:b7:61:15:87:8c:a5:6d:47:87:
f0:5f:c7:84:e3:21:9c:5a:8c:80:bf:82:b2:35:32:
cf:da:f6:c1:0a:b6:d8:86:f7:03:dc:94:07:a5:50:
05:09:94:15:1a:ba:ee:43:f7:e7:2d:73:73:6a:07:
c6:3c:48:f9:13:4f:ed:25:64:02:d4:97:1f:a2:49:
f8:ae:89:12:7f:bc:b9:bf:42:84:51:c9:73:1a:7e:
4d:89:94:1c:cd:9d:6f:91:fa:ac:a1:df:7f:b4:85:
6c:0a:67:f2:d7:66:e6:62:51:e9:bb:70:0d:28:14:
64:2b:ee:2e:3e:32:8f:0c:25:df:2c:b0:a0:50:b3:
10:ef:ff:59:25:4b:4c:d0:0e:85:33:b4:5f:95:01:
d8:39:d4:1a:b8:7b:64:a5:66:d1:fb:8b:22:aa:fe:
72:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:76:4B:79:81:82:04:BF:35:CA:E1:C0:10:7F:5E:1A:6E:CF:F5:DA
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/6CC25CDE4E7411EF828218BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.216.0/24
Signature Algorithm: sha256WithRSAEncryption
17:49:cd:dd:13:45:77:fc:2b:c8:06:d5:71:5b:53:d5:e4:e4:
91:dd:52:20:6f:0f:f2:bc:97:02:29:d0:4d:47:52:96:2b:6e:
c3:63:00:b7:c8:a6:a0:e9:fb:0c:ef:a5:63:c3:12:8b:14:07:
61:85:9a:2b:79:05:73:e2:39:13:c0:4b:5c:32:81:97:e3:64:
86:a7:f4:0b:4f:ce:cb:26:5f:f5:43:bc:3e:b2:f3:f3:e5:05:
43:78:39:d7:3b:75:55:83:6a:ce:9a:c9:97:5b:b6:d9:9d:e6:
d4:96:ef:08:90:f1:eb:a3:ab:49:19:08:30:8f:b2:8f:58:10:
d5:43:c7:0d:19:5d:17:6b:c9:04:2f:c8:51:37:41:1c:10:8a:
69:09:93:8c:f9:3b:f2:c6:dc:bb:8f:4c:5d:fe:f9:be:7d:f4:
ae:b0:5f:be:7d:b7:35:6e:df:7f:54:01:09:fe:41:f0:c4:1b:
e7:9c:2e:b9:43:d9:d8:02:71:4d:79:63:c5:38:1b:ce:6d:bb:
7b:9b:39:f1:0a:3a:a0:cc:db:44:1e:c0:0a:56:34:b6:56:ce:
ef:ac:7c:be:1d:fc:4f:27:43:6b:a8:e9:af:95:83:35:76:95:
9e:98:ac:72:8f:f0:f8:47:ce:67:81:9d:fc:bd:d1:5b:6b:36:
72:db:8d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 10:20:59 2024 by rpki-client on console-fra.rpki-client.org