Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/BDD2EEC2191911EEB47265194AD9E6FC.roa
File: BDD2EEC2191911EEB47265194AD9E6FC.roa (raw, json)
Hash identifier: Tz70aANQKHL3mcFJ0sZ2mlO7NaSGLmtMgQxnZ0yqDnc=
Subject key identifier: 50:57:A9:3C:99:41:26:9C:DB:E3:1F:48:42:44:25:16:EC:35:D2:35
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B1C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/BDD2EEC2191911EEB47265194AD9E6FC.roa
Signing time: Sun 02 Jul 2023 20:48:04 +0000
ROA not before: Sun 02 Jul 2023 20:48:01 +0000
ROA not after: Tue 02 Jul 2024 20:48:01 +0000
asID: 8100
IP address blocks: 161.123.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Sep 2023 18:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2844 (0xb1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 2 20:48:01 2023 GMT
Not After : Jul 2 20:48:01 2024 GMT
Subject: CN=64a1e284-1e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:ca:72:c0:53:b6:7f:8b:15:09:73:33:17:
fe:72:34:27:e4:7c:27:f7:d9:4d:09:6c:1b:4f:0b:
13:93:01:b6:87:0a:8c:0a:d8:27:e5:96:98:8c:e6:
e5:4f:b7:6c:e5:11:fa:4b:69:89:cc:cb:27:4c:45:
43:0c:2a:61:2d:a4:4b:42:0b:9c:42:21:a1:5d:56:
cc:76:0f:6d:cf:53:af:9c:91:51:b5:76:2d:82:a6:
a7:6a:84:db:20:2f:a0:c1:52:83:1e:0a:48:6a:3f:
96:ff:a5:24:5d:49:43:d9:a4:95:02:d8:0f:24:4d:
51:0c:6a:7c:b3:f9:3e:69:13:a4:49:f0:24:6a:a8:
83:dd:02:10:d7:63:81:5a:2e:bd:1d:de:8f:66:07:
20:18:71:4f:a0:a3:a9:55:ed:67:18:0e:87:14:d6:
b1:ff:cb:af:28:05:12:13:d4:6b:36:8c:2e:ed:4d:
43:a4:95:9b:15:13:08:22:9b:f3:d9:59:82:31:a2:
77:09:3f:ec:4b:91:9d:88:9e:88:51:0d:57:14:97:
e7:9d:64:c5:64:14:ca:2e:53:5a:fa:94:ec:96:9c:
c5:b9:96:39:64:b2:0b:a2:de:a6:d6:63:29:49:f5:
1e:1e:e8:10:24:67:6d:7a:47:14:c6:ff:49:3d:18:
aa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:57:A9:3C:99:41:26:9C:DB:E3:1F:48:42:44:25:16:EC:35:D2:35
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/BDD2EEC2191911EEB47265194AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.34.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d1:7a:e8:b3:73:48:ed:d2:4b:06:8c:06:ea:26:d1:80:fe:
f7:b3:3c:09:24:4e:52:9c:68:ca:c3:f0:0f:35:a6:ab:a1:ee:
91:4d:f2:c0:17:79:3d:d3:d0:bc:b2:7b:47:9a:94:26:db:63:
62:bd:81:34:cc:1f:c7:e9:d5:57:31:26:3a:44:b9:e7:a0:72:
c8:29:79:11:0e:29:fb:15:e2:1c:b2:c6:50:2b:c3:b4:e9:92:
47:ec:e0:2b:10:50:51:f5:49:01:33:84:42:29:ab:ec:d6:f7:
e9:b7:54:cc:6c:de:20:b3:48:e9:93:27:2e:cc:2c:ed:a9:77:
f5:6c:70:18:cf:9e:f1:a0:40:d1:ed:ad:36:73:63:41:a4:3a:
0c:8b:f6:c8:65:19:f2:2a:1a:7c:ab:38:34:c2:13:fe:f7:fe:
bf:57:dc:e7:f8:6d:15:6f:da:59:52:67:69:c7:d5:9a:74:1d:
eb:42:b7:0b:73:fe:cf:3b:a8:2d:a2:58:6e:5a:0f:50:93:8e:
c1:91:5e:8e:b3:78:9c:d6:e1:56:4e:42:2c:5a:8a:ae:d5:21:
ab:09:04:10:65:86:12:15:ea:18:66:43:61:ad:ff:ff:15:ac:
9e:1c:62:9e:57:32:47:42:7e:09:8e:61:5e:cd:af:a9:6f:6e:
35:5b:0f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org