Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/985EE956407011EEBB0631324AD9E6FC.roa
File: 985EE956407011EEBB0631324AD9E6FC.roa (raw, json)
Hash identifier: syMaqxBoNRo7IlHwo3/NkxbF47oaZUStR8W+o19ptBI=
Subject key identifier: D2:38:6B:41:5C:F9:EF:C1:BC:86:AB:A1:39:89:AB:5F:3D:36:96:68
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0BC5
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/985EE956407011EEBB0631324AD9E6FC.roa
Signing time: Mon 21 Aug 2023 22:18:03 +0000
ROA not before: Tue 22 Aug 2023 22:18:00 +0000
ROA not after: Thu 22 Aug 2024 22:18:00 +0000
asID: 207990
IP address blocks: 161.123.228.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Aug 2023 07:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3013 (0xbc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Aug 22 22:18:00 2023 GMT
Not After : Aug 22 22:18:00 2024 GMT
Subject: CN=64e3e29b-b4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f9:7a:1f:95:b2:f2:ea:b7:f1:25:16:0b:06:
71:4b:c0:71:33:2b:9b:8a:3f:0f:a6:16:1f:c7:11:
8b:6d:12:ad:f6:dd:73:3d:5a:2e:08:7e:f5:e3:fe:
c7:18:85:36:05:bb:2d:9b:85:6d:27:68:4b:5e:31:
31:82:8d:c4:3e:7a:ea:eb:85:28:59:d9:b3:f1:5e:
28:29:34:0e:f5:1e:ef:d3:4c:85:2e:37:cc:86:92:
4b:09:52:05:51:d1:38:2c:42:bf:2d:87:17:65:73:
8b:20:20:f3:9a:87:99:c9:a4:ff:96:32:0c:9f:c2:
85:aa:59:fa:86:84:e5:5d:a1:39:db:e8:de:90:c6:
7d:b2:dd:0d:ea:f4:11:df:65:31:d6:ff:0f:12:2d:
ee:6e:84:24:2f:29:d6:85:08:88:33:08:37:5b:42:
3f:c9:be:46:9a:d1:ce:cc:43:a6:33:f5:97:d6:24:
9d:2c:37:de:88:d5:a8:5b:0f:b8:d8:2c:54:23:6b:
af:f9:fa:e0:73:74:f6:24:31:cf:ce:bb:3d:63:17:
26:c4:c2:4a:12:ae:f8:d6:33:31:bb:45:7d:bd:44:
d1:1d:6f:6f:d8:2d:3a:83:96:67:c6:2e:cb:59:90:
c7:dd:ec:9d:b4:33:36:d6:0e:39:f9:32:6c:a4:a7:
41:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:38:6B:41:5C:F9:EF:C1:BC:86:AB:A1:39:89:AB:5F:3D:36:96:68
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/985EE956407011EEBB0631324AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.228.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:76:21:c0:1f:33:fa:ca:17:26:57:06:f5:dd:30:d2:cf:d2:
76:41:a5:3d:8e:66:4f:25:ea:d7:b6:b7:c1:e2:06:79:b8:d5:
49:4a:3a:53:63:e8:90:7a:54:81:dc:27:f4:f8:92:ce:67:40:
d7:f3:63:e6:b9:9d:9a:fe:37:96:ac:1a:6a:7c:38:10:3e:08:
e6:1e:3d:bf:90:18:b3:ff:ab:9c:13:54:07:62:2f:43:01:66:
b2:03:01:c4:90:88:5c:ec:10:7f:c1:51:2f:f1:77:c2:8e:e7:
0d:4c:7f:a8:bf:a2:3a:ea:fc:4f:f7:62:a6:eb:21:c9:62:49:
df:1f:a8:42:20:45:2f:a9:81:11:10:7d:a0:a8:e9:3c:a2:af:
a5:81:df:b9:44:b5:ff:31:45:f3:aa:42:1a:4c:d1:f3:4b:9f:
05:5a:e1:f7:96:97:e7:77:d2:b1:5b:4e:7b:3d:78:32:71:70:
44:d5:a2:e8:a4:f4:3d:af:13:b8:8e:89:c7:ba:bd:b4:cc:f1:
7d:ad:04:9f:b7:f4:ce:9d:60:57:f9:e2:86:ca:58:f0:98:58:
e0:e7:22:e5:c7:9f:6f:b3:27:bd:f3:99:99:54:39:bc:1b:b0:
b0:79:73:97:c7:7b:0f:e6:3a:ec:58:ef:5b:d0:da:ab:09:76:
f2:29:d5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-ams.rpki-client.org