Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/BE808B0ABAB211EEAE81417C775412E6.roa
File: BE808B0ABAB211EEAE81417C775412E6.roa (raw, json)
Hash identifier: gIhwNGWzEKKXIWIlTAbz26pPP0FVTwaDjMd5E0ANDfo=
Subject key identifier: C6:64:C1:B0:C6:72:41:42:B8:EF:73:90:81:DD:85:E4:4F:7F:70:66
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0D16
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/BE808B0ABAB211EEAE81417C775412E6.roa
Signing time: Wed 24 Jan 2024 12:18:56 +0000
ROA not before: Wed 24 Jan 2024 12:18:53 +0000
ROA not after: Thu 24 Jan 2030 12:18:53 +0000
asID: 212738
IP address blocks: 161.123.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 11:09:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3350 (0xd16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jan 24 12:18:53 2024 GMT
Not After : Jan 24 12:18:53 2030 GMT
Subject: CN=65b10030-02ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:e6:f0:b3:cc:f6:50:9f:f7:41:20:e6:1f:
a0:57:bd:b5:53:36:2c:e2:97:37:25:a0:77:b0:12:
7a:5d:c4:4d:1c:f5:3d:65:29:ac:15:66:df:5f:e3:
82:7d:b5:a2:8d:f3:4f:0d:3f:1e:59:4e:35:ef:1a:
eb:ef:95:1b:cc:06:2e:a5:38:15:0b:ad:0b:33:d9:
11:5e:99:87:30:88:05:27:d0:85:94:d8:35:97:c0:
fa:79:56:4c:56:23:74:7d:f4:1d:29:44:11:b9:48:
d8:52:ea:3f:88:65:a7:5d:98:10:bc:6e:f3:86:ec:
90:72:92:01:d5:3f:48:60:c7:e1:ab:dc:10:3d:1f:
29:7a:95:18:41:20:09:7a:cc:b2:2d:86:09:93:af:
1a:02:59:50:87:f9:9e:d6:b2:1f:bf:c2:75:c0:cd:
48:17:be:f5:2b:9b:df:be:50:b3:56:87:d4:34:cb:
c0:f5:7b:05:ba:fb:ba:09:47:dd:ba:ac:56:15:04:
16:eb:2b:1f:9b:49:4b:b0:15:4b:70:fd:61:87:5a:
f7:f4:07:0b:a8:9e:c9:3a:99:cb:c8:09:cf:c2:d5:
8f:ff:93:20:ae:b4:a1:d6:4d:c1:8b:4d:3c:12:6e:
25:2b:c9:8b:fa:83:9e:98:33:ed:5e:d6:ad:0e:4c:
6c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:64:C1:B0:C6:72:41:42:B8:EF:73:90:81:DD:85:E4:4F:7F:70:66
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/BE808B0ABAB211EEAE81417C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.200.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:ff:41:66:39:eb:7b:f2:1b:f3:a7:6e:b1:f9:59:7b:80:3e:
ef:8a:14:24:7f:b2:87:48:a0:fb:52:09:29:44:3d:51:55:ec:
35:9b:bd:1b:41:da:58:ff:d4:a2:26:fe:ae:7c:80:7d:8c:8d:
b1:9b:8f:4a:db:c6:94:a2:e1:3f:66:57:74:68:d2:e7:ab:05:
a3:46:cc:64:15:99:91:0c:e1:50:3e:10:95:91:23:3a:07:98:
b9:44:7d:9b:d7:e1:06:2b:eb:93:3a:ae:55:e0:64:ec:f8:17:
72:12:13:17:7d:f5:e0:7d:d7:42:5b:c6:51:ef:6d:69:71:4c:
ec:24:47:b2:71:cd:15:9d:65:1f:ed:78:87:94:70:59:68:26:
54:92:ea:76:e0:ba:7a:51:5b:c8:7a:84:76:0b:38:60:6e:5a:
6c:8a:47:e9:41:b7:03:3e:46:a5:4c:0c:db:f2:08:ad:36:d8:
a6:c5:2f:5d:5e:44:ee:d2:14:3d:b8:62:ec:df:7c:2e:fd:26:
2a:cc:ed:7e:cd:b4:c1:2d:df:a6:d8:3e:9b:b0:32:5b:d3:e4:
7e:78:c7:32:cd:d7:ae:38:6a:70:f4:6d:a5:7c:30:95:e2:d1:
3b:16:27:39:4d:1d:3e:1e:a4:22:a2:7c:c9:a3:4e:aa:85:ae:
a0:89:6e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org