Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D8A94B30587C11EFBCFE1CB0762E951A.roa
File: D8A94B30587C11EFBCFE1CB0762E951A.roa (raw, json)
Hash identifier: z5Txj1WF859OnXPDj9NRE9+Fh6wfPSWHKKV5JaDtHVU=
Subject key identifier: CB:8B:A6:18:79:32:A4:B9:6B:84:A6:E8:CF:42:46:E3:04:8B:73:9F
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0E17
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D8A94B30587C11EFBCFE1CB0762E951A.roa
Signing time: Mon 12 Aug 2024 07:31:11 +0000
ROA not before: Mon 12 Aug 2024 07:31:07 +0000
ROA not after: Mon 12 Aug 2030 07:31:07 +0000
asID: 50028
IP address blocks: 161.123.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 19:18:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3607 (0xe17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Aug 12 07:31:07 2024 GMT
Not After : Aug 12 07:31:07 2030 GMT
Subject: CN=66b9ba3e-549e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cc:15:44:4e:4d:6e:5d:0f:a4:da:ba:b7:2e:
aa:aa:cf:bb:3e:d9:6e:d0:59:b6:b4:b6:b2:ea:98:
cb:87:02:93:5f:3e:af:c2:4d:b6:bd:6c:0a:0a:ee:
50:8a:d4:83:16:d5:b3:fe:e4:6b:c3:9f:0b:7b:33:
9a:91:8f:4e:37:39:c6:95:51:37:ff:54:a7:0f:a6:
e2:90:80:40:3d:f1:0e:cb:d7:5c:15:34:cb:c4:74:
66:91:b8:04:5b:01:b4:ca:a1:e6:ef:7d:3a:74:9a:
e9:3e:41:75:2c:87:6c:f9:d7:76:66:fd:cb:92:c5:
3e:8a:dd:79:40:8d:e2:94:24:36:b8:5e:44:19:35:
a2:9f:b9:af:ad:4d:32:ed:5a:38:51:ff:8c:cb:c0:
2c:77:e2:e8:92:46:dd:fe:33:93:5a:a6:ee:08:71:
96:04:bc:13:a2:54:27:64:d3:93:86:a0:53:89:65:
38:18:43:8c:37:78:4b:0f:b7:b5:4e:dc:17:ac:25:
ab:aa:ff:f1:15:8a:4a:f0:dd:11:d8:54:66:6a:3e:
8f:2a:60:fd:83:ef:7d:ba:b8:d0:5d:fb:fe:bd:12:
55:13:42:94:5f:dd:07:f4:2e:fa:e4:a5:d2:17:6a:
43:60:d0:a1:50:11:e0:91:85:6b:a5:82:6c:99:96:
47:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8B:A6:18:79:32:A4:B9:6B:84:A6:E8:CF:42:46:E3:04:8B:73:9F
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/D8A94B30587C11EFBCFE1CB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.246.0/24
Signature Algorithm: sha256WithRSAEncryption
85:2c:ea:02:ad:d6:6b:e2:28:f9:19:c9:7b:e2:b5:25:ef:af:
50:cf:ee:69:24:47:96:6b:72:99:65:88:0d:c9:a3:0e:0e:d0:
77:d5:6e:31:42:43:80:dd:0a:55:f0:94:32:20:2a:8a:58:5b:
c5:e8:7c:95:08:50:b5:46:7b:b4:00:a8:70:13:9d:ee:a4:2d:
b0:3d:59:8e:16:ef:e6:8d:96:2d:e5:7d:9d:69:c4:e5:1a:74:
20:e4:47:bd:d6:52:26:64:16:28:ab:8f:9a:8b:5c:e6:bb:77:
b1:2d:01:30:32:41:0d:76:04:ff:2f:42:3d:c5:8b:29:ff:17:
73:e0:ee:3f:3d:7a:50:08:75:90:a4:2b:0c:64:f3:7f:1f:29:
12:80:b7:33:b4:1e:e0:e3:97:5e:fe:c7:a2:7d:58:45:8f:4a:
05:50:8b:37:aa:60:87:2c:8e:ca:b8:fa:a1:e3:11:6a:a4:09:
6e:47:10:82:99:b2:c1:87:78:43:e7:81:c2:4a:0c:2b:d6:e9:
f3:84:56:7d:97:11:cc:aa:ae:70:4d:52:5f:8d:21:7f:8c:06:
54:d3:49:33:c0:22:d6:3f:a4:0d:f1:68:cb:d5:73:54:33:53:
f4:6a:07:f5:f7:e3:a7:b0:c4:d8:a2:0c:2b:07:fd:96:6e:5a:
d3:2f:35:77
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDhcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yNDA4MTIwNzMxMDdaFw0zMDA4MTIwNzMxMDdaMBgxFjAU
BgNVBAMTDTY2YjliYTNlLTU0OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDmzBVETk1uXQ+k2rq3Lqqqz7s+2W7QWba0trLqmMuHApNfPq/CTba9bAoK
7lCK1IMW1bP+5GvDnwt7M5qRj043OcaVUTf/VKcPpuKQgEA98Q7L11wVNMvEdGaR
uARbAbTKoebvfTp0muk+QXUsh2z513Zm/cuSxT6K3XlAjeKUJDa4XkQZNaKfua+t
TTLtWjhR/4zLwCx34uiSRt3+M5Napu4IcZYEvBOiVCdk05OGoFOJZTgYQ4w3eEsP
t7VO3BesJauq//EVikrw3RHYVGZqPo8qYP2D7326uNBd+/69ElUTQpRf3Qf0Lvrk
pdIXakNg0KFQEeCRhWulgmyZlkcZAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUy4um
GHkypLlrhKboz0JG4wSLc58wHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0Q4QTk0QjMwNTg3QzExRUZCQ0ZFMUNCMDc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe/YwDQYJKoZIhvcNAQELBQAD
ggEBAIUs6gKt1mviKPkZyXvitSXvr1DP7mkkR5ZrcplliA3Jow4O0HfVbjFCQ4Dd
ClXwlDIgKopYW8XofJUIULVGe7QAqHATne6kLbA9WY4W7+aNli3lfZ1pxOUadCDk
R73WUiZkFiirj5qLXOa7d7EtATAyQQ12BP8vQj3Fiyn/F3Pg7j89elAIdZCkKwxk
838fKRKAtzO0HuDjl17+x6J9WEWPSgVQizeqYIcsjsq4+qHjEWqkCW5HEIKZssGH
eEPngcJKDCvW6fOEVn2XEcyqrnBNUl+NIX+MBlTTSTPAItY/pA3xaMvVc1QzU/Rq
B/X346ewxNiiDCsH/ZZuWtMvNXc=
-----END CERTIFICATE-----
Generated at Tue Aug 13 20:45:21 2024 by rpki-client on console-fra.rpki-client.org