Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A60944DA4E7411EFA26F60BC762E951A.roa
File: A60944DA4E7411EFA26F60BC762E951A.roa (raw, json)
Hash identifier: u9mQyGAD51TdyLsqohBg29vYBdcquQBA5WwbzCHLeEo=
Subject key identifier: 88:C3:82:A2:D4:37:D8:97:BF:6A:85:49:3E:7F:A7:0F:AA:A7:5C:DD
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0DFE
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A60944DA4E7411EFA26F60BC762E951A.roa
Signing time: Tue 30 Jul 2024 13:07:18 +0000
ROA not before: Tue 30 Jul 2024 13:07:15 +0000
ROA not after: Tue 30 Jul 2030 13:07:15 +0000
asID: 61290
IP address blocks: 161.123.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 07:21:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3582 (0xdfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 30 13:07:15 2024 GMT
Not After : Jul 30 13:07:15 2030 GMT
Subject: CN=66a8e586-e281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:5f:6e:cc:96:20:9d:99:7a:bc:fa:7a:be:
26:27:bd:f0:ad:13:55:c6:50:41:52:05:8a:3c:0b:
bd:96:8d:11:24:df:d0:99:60:ef:4b:9e:2a:ce:de:
b2:c1:4a:25:17:7e:11:02:10:6b:2c:db:b3:ef:36:
84:bf:3e:66:6f:ee:98:88:ac:03:c7:16:0d:38:3e:
96:23:2a:b6:ac:db:e4:08:0d:78:53:22:d8:b7:1a:
1e:fd:33:bd:4c:06:fa:e8:e3:5f:1d:64:02:9b:60:
ff:19:a2:b9:05:af:e8:41:c0:f5:fa:e1:d7:fe:2e:
33:3d:fd:03:73:dd:86:42:5c:7d:58:7b:0c:ca:ad:
ff:f3:3a:b0:ff:b7:98:02:7d:e6:f4:35:4d:bf:50:
eb:80:e5:c2:cc:4c:f4:1c:57:2a:39:ef:a7:b6:90:
c1:0b:47:ae:e2:1f:bb:08:0d:c6:56:70:d6:5d:a4:
4e:30:c1:ef:7c:f9:c6:a2:26:21:e0:4d:69:3d:28:
89:37:17:c0:ea:ea:06:aa:2a:eb:3e:97:aa:32:1c:
72:c6:20:81:5a:4b:48:c7:5a:8c:e2:87:d2:66:ef:
49:4b:92:55:65:3e:48:9f:cd:07:b1:09:6d:77:45:
39:38:11:f0:17:32:33:f0:ab:d6:41:1d:d0:5d:16:
75:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C3:82:A2:D4:37:D8:97:BF:6A:85:49:3E:7F:A7:0F:AA:A7:5C:DD
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A60944DA4E7411EFA26F60BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.246.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ab:a2:cb:42:0b:7d:2e:ff:1d:ef:89:44:59:6e:b2:40:3d:
3b:39:60:bf:79:ea:55:6f:60:01:a9:cb:01:83:8f:90:4b:81:
43:e3:67:16:41:94:fa:1b:00:cf:8a:d2:a6:58:39:23:a1:57:
12:61:77:cd:ce:65:2a:c4:23:96:fe:c0:f0:e7:84:ae:1e:44:
3f:0b:53:8c:ee:09:79:ff:22:23:69:d8:70:e9:48:97:0e:af:
20:da:d7:35:9f:90:37:bb:8c:69:e2:89:fc:64:7c:eb:70:61:
0f:3d:b7:78:54:9f:f8:c8:49:b7:d5:08:7e:7f:b8:fe:b0:f2:
e4:a8:82:bf:f7:1a:09:8d:44:55:39:f4:db:50:9e:ee:29:d7:
3f:1c:39:24:c5:a8:bf:f2:4d:21:a3:06:d7:29:1e:a1:b4:84:
72:d6:86:33:79:7f:92:c2:09:b3:14:48:2c:be:46:8f:8a:0a:
89:a4:0c:62:66:90:4a:88:6e:95:b6:22:85:15:e5:61:db:7f:
dc:ee:f1:ce:18:85:f8:0e:dc:00:2e:c4:ac:0a:2b:7f:1f:1d:
9c:f0:5d:82:c5:1f:68:a8:86:29:14:e6:64:24:70:62:15:60:
42:8b:ad:95:2b:b3:cd:7c:7d:85:56:e7:17:cd:18:5f:15:98:
55:3f:77:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 10:20:59 2024 by rpki-client on console-fra.rpki-client.org