Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AD92A48C404A11EEBADB083D4AD9E6FC.roa
File: AD92A48C404A11EEBADB083D4AD9E6FC.roa (raw, json)
Hash identifier: QLF/vC1Pgh808GAEYc/H/JoLGs/xpCvU1pOAzNiM7nk=
Subject key identifier: F8:9A:1B:D4:70:C0:30:06:96:B9:41:99:CA:3D:5A:52:06:CD:9E:06
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0BB7
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AD92A48C404A11EEBADB083D4AD9E6FC.roa
Signing time: Mon 21 Aug 2023 17:46:38 +0000
ROA not before: Mon 21 Aug 2023 17:46:35 +0000
ROA not after: Wed 21 Aug 2024 17:46:35 +0000
asID: 207990
IP address blocks: 161.123.228.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 21 Aug 2023 22:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2999 (0xbb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Aug 21 17:46:35 2023 GMT
Not After : Aug 21 17:46:35 2024 GMT
Subject: CN=64e3a2fe-2188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:78:2e:18:fd:37:1c:86:cc:52:46:2c:f4:6f:
b6:a3:74:44:1d:76:78:81:b8:7f:1c:7c:99:1b:54:
0e:9e:81:34:ad:a8:57:8b:77:6e:13:b6:40:19:9f:
6b:b9:96:d4:7f:16:96:2a:2e:d8:9e:22:53:fc:d7:
89:27:79:4c:f8:1c:cd:4d:3a:a1:92:ee:a9:d4:db:
14:ec:4a:d8:5c:8f:7a:8c:53:31:1e:ff:c8:c6:17:
d8:52:47:33:fb:84:bc:4e:83:ca:bd:ca:ef:e6:ec:
48:62:3a:c7:39:2c:ce:5d:7a:62:a9:89:4a:a2:b6:
b9:ea:5a:5a:ad:7e:cb:b6:7b:ee:93:37:6e:5b:14:
4c:ed:b5:ba:a5:ee:0d:94:c1:67:0f:1d:13:38:d8:
c0:12:f1:d1:da:f0:5b:ad:da:d0:89:6c:34:a3:ec:
76:38:98:ae:34:14:31:70:2f:d7:28:bc:30:d4:d4:
88:4f:e5:6c:af:4f:2e:86:ef:d9:cb:6d:c7:0a:ae:
b3:68:59:a9:27:27:8c:d3:43:0f:09:5b:49:22:16:
4c:15:16:65:d0:59:84:5f:8d:ba:18:fe:e7:2f:9f:
58:2d:dc:8b:88:e7:ef:f4:ab:b0:d2:46:a0:78:94:
7e:74:24:61:f5:ef:3b:c7:4d:81:3a:2a:01:14:1c:
c8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9A:1B:D4:70:C0:30:06:96:B9:41:99:CA:3D:5A:52:06:CD:9E:06
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/AD92A48C404A11EEBADB083D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.228.0/22
Signature Algorithm: sha256WithRSAEncryption
47:1a:02:40:cf:d0:f7:8c:97:33:30:e5:c1:c6:a7:07:1d:66:
43:87:2a:83:3e:74:bd:22:e2:5f:26:35:85:e3:af:b2:7c:4e:
ce:43:fd:02:67:3d:30:2b:3f:c7:0c:9a:fc:52:9e:ba:31:a7:
d6:f8:2f:63:4e:d3:f6:4b:fe:43:b8:71:68:ec:db:48:9f:56:
cd:59:5f:7c:81:89:22:4b:1f:4b:c0:32:bc:35:ef:41:98:ff:
4a:1f:a0:26:76:e4:dd:22:d2:b8:eb:56:5f:81:0b:cd:92:a9:
ca:44:13:92:9f:09:3e:37:17:57:41:d6:3e:24:2f:b9:73:7a:
3d:14:d7:65:63:17:7b:c7:e8:19:6e:05:af:b6:d4:3e:0f:f1:
2c:b8:80:97:d9:d6:32:44:0b:43:2b:e1:55:85:e1:d0:1e:d2:
e0:17:17:dd:c1:f5:e1:83:d5:ec:8c:0e:e0:1d:3d:f8:f4:d7:
1e:e4:61:7f:fe:3b:82:0d:93:3b:ee:85:28:91:db:d7:8e:65:
66:02:6a:fa:4e:2b:57:37:48:e8:1b:db:2f:18:ac:49:0c:4d:
7d:aa:92:05:1d:e1:39:68:a8:53:c9:9d:21:c2:c1:46:e4:b4:
50:e0:ef:b8:3a:4d:25:08:7a:8d:d2:cd:51:d1:35:74:af:99:
c8:9d:4b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org