Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8AF925C0191911EEA4A7CC184AD9E6FC.roa
File: 8AF925C0191911EEA4A7CC184AD9E6FC.roa (raw, json)
Hash identifier: Qns52F3s1pzHhxUmAGwYEJGXeWrIiSVge2PBaYeLzlc=
Subject key identifier: 20:20:F8:B7:5E:C6:91:19:60:D7:4E:68:DC:9D:01:5E:AE:D7:CF:FD
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B16
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8AF925C0191911EEA4A7CC184AD9E6FC.roa
Signing time: Sun 02 Jul 2023 20:46:39 +0000
ROA not before: Sun 02 Jul 2023 20:46:36 +0000
ROA not after: Tue 02 Jul 2024 20:46:36 +0000
asID: 8100
IP address blocks: 161.123.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Sep 2023 18:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2838 (0xb16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 2 20:46:36 2023 GMT
Not After : Jul 2 20:46:36 2024 GMT
Subject: CN=64a1e22f-408e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:31:b4:04:12:1c:d4:76:f5:4a:9a:1f:17:
38:39:82:5a:e2:a9:cc:43:04:7b:60:f5:8b:03:dc:
d1:aa:39:e9:8b:68:7d:8f:c4:7b:8c:a2:65:83:e2:
d1:13:0a:35:06:0b:a0:d6:f2:00:f3:f3:89:7e:ff:
f9:de:9f:26:79:29:9f:fd:dd:a0:aa:ff:58:08:90:
c1:56:37:ce:b8:54:40:10:f5:42:40:d9:15:ce:3c:
77:1e:db:81:f8:b6:63:c5:da:6a:e6:3b:49:0e:6a:
7b:a2:52:64:8a:ac:4c:fe:2e:29:b4:32:a9:21:47:
74:c5:da:63:59:23:9a:fc:87:e4:2d:df:ac:ca:a0:
33:ae:a2:14:ee:99:bc:ad:e7:76:82:9e:ee:9a:b5:
a9:fa:ee:fe:95:a8:73:ce:06:f7:76:21:80:b8:3b:
31:83:64:f9:b8:65:61:1b:c3:b0:d7:ac:9d:ca:63:
e0:bd:8d:a6:a8:98:ed:cc:10:67:ff:f3:bd:c0:2c:
f4:43:38:00:ae:ba:04:b9:f9:71:d7:c7:30:d1:0b:
5d:b4:eb:a2:e4:9e:86:d8:da:3e:e8:d7:c0:d0:91:
84:3e:9d:02:17:72:7d:6d:80:c1:2b:be:02:6c:f9:
0f:c0:0f:18:fc:e9:56:9b:63:d4:8c:b4:5e:ec:02:
f2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:20:F8:B7:5E:C6:91:19:60:D7:4E:68:DC:9D:01:5E:AE:D7:CF:FD
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8AF925C0191911EEA4A7CC184AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.236.0/24
Signature Algorithm: sha256WithRSAEncryption
63:8d:26:99:ec:c5:67:21:31:6d:46:c5:3e:c7:07:5e:42:ab:
98:84:d4:df:37:a1:b2:df:48:1b:9f:de:ec:8b:c6:c2:13:9f:
74:d5:ea:03:a9:34:cf:a1:e8:5e:17:93:9b:e4:d7:6d:0d:56:
f2:e6:11:a9:77:43:e8:ea:a3:97:e6:a5:c8:d9:87:0a:fb:0a:
6f:4f:6a:92:29:71:b0:95:74:f9:f9:f7:a6:47:95:bd:3c:7e:
cf:28:a4:29:06:17:62:60:4f:0a:29:fc:02:13:34:ae:c1:c5:
e1:57:7e:12:43:89:b2:bc:e7:44:19:ee:1a:18:f1:8c:ae:90:
04:48:5b:80:42:f0:a0:b5:1c:b3:23:93:06:69:0c:15:14:be:
7a:d1:f6:c3:e5:92:d4:62:d0:58:38:08:6b:ab:76:36:f2:17:
ec:99:38:d6:a7:df:f1:92:84:c0:3a:c5:81:9d:05:74:55:09:
23:00:0c:f2:23:5a:a4:bf:9a:4b:6e:f8:f7:e9:a6:42:33:26:
73:7b:49:63:f1:2c:26:52:54:53:5d:5a:a7:52:4a:94:cf:d7:
07:03:2c:c1:9e:72:83:d1:3b:c4:f5:b9:16:d8:b9:98:c6:5c:
36:8b:dc:5f:70:2a:50:4e:ad:8c:6f:1c:3f:6e:30:18:d8:0d:
6e:1d:97:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org