Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E0E5990A7CD311EE8D245C434AD9E6FC.roa
File: E0E5990A7CD311EE8D245C434AD9E6FC.roa (raw, json)
Hash identifier: LYw+R06DCJ1fcK9QFF7XmTC/pk1dMEBDI/P1NlJnhe4=
Subject key identifier: A8:C0:FA:07:59:50:3E:2C:21:2B:FF:71:6D:28:E7:CC:92:31:65:BC
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0C6D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E0E5990A7CD311EE8D245C434AD9E6FC.roa
Signing time: Mon 06 Nov 2023 18:39:55 +0000
ROA not before: Mon 06 Nov 2023 18:39:51 +0000
ROA not after: Mon 06 Nov 2028 18:39:51 +0000
asID: 207990
IP address blocks: 161.123.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Nov 2023 18:41:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3181 (0xc6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 6 18:39:51 2023 GMT
Not After : Nov 6 18:39:51 2028 GMT
Subject: CN=654932fb-f637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:3f:53:58:21:a2:75:bc:a4:d7:eb:6e:99:
c0:ac:d2:95:2d:d0:c9:69:a9:f7:6c:15:a7:a4:01:
26:a1:81:cb:3f:1b:90:2a:63:0d:4c:7e:9a:f2:f2:
56:e8:66:35:31:4b:de:ed:be:57:76:1e:5c:fd:4c:
3b:12:79:8f:72:75:3c:bf:4c:46:2c:16:6c:f3:c7:
61:d0:16:88:3d:08:e6:fd:ea:11:02:43:0e:9a:96:
00:3b:f0:ce:49:66:88:45:c4:69:a0:04:b3:29:38:
a0:ea:20:dc:a5:56:33:60:27:35:90:56:13:67:1c:
d4:56:8d:fa:29:e5:f5:87:1a:59:fe:9b:de:5b:2f:
e4:4a:a4:16:c1:8c:9b:3e:74:2c:b5:c4:7e:60:8b:
a8:01:e5:12:4d:2c:6c:8e:4d:6b:f4:14:70:28:95:
e2:3c:75:83:79:2b:d1:03:26:e2:f1:06:c3:a9:a7:
ba:79:e9:6b:ba:78:34:94:0c:60:71:2b:ee:20:17:
b4:fb:94:27:24:29:9b:3f:b9:75:97:75:a2:13:cb:
04:05:5f:18:9c:ea:d9:97:57:e8:3f:de:83:d9:d5:
a4:30:17:15:3b:86:f8:58:f5:bc:c4:55:95:ac:9a:
3a:10:6e:c1:7d:5f:8c:f9:ca:40:0b:34:23:9d:38:
d6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C0:FA:07:59:50:3E:2C:21:2B:FF:71:6D:28:E7:CC:92:31:65:BC
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E0E5990A7CD311EE8D245C434AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.8.0/24
Signature Algorithm: sha256WithRSAEncryption
49:a0:7e:78:65:4e:1e:e6:e2:4f:52:8d:48:23:36:12:ee:9b:
4a:fb:7d:b0:cf:9b:54:bc:1e:0f:97:32:2a:e9:af:24:64:bc:
58:44:bb:e6:d2:87:98:7a:1d:4f:63:d5:9e:27:5d:d7:ed:96:
54:6d:a2:b6:4e:51:0c:37:06:38:e4:09:50:99:d7:5b:19:17:
ba:f9:81:c1:92:03:52:76:c9:99:29:6c:69:b9:01:89:34:40:
36:4f:41:0d:e9:26:d4:24:e2:c0:32:c6:b7:22:f5:e7:cc:a1:
16:8b:7f:75:03:e6:2d:00:e1:ce:e3:62:f5:43:1e:83:da:17:
09:df:d1:ec:93:b6:e1:f5:8e:1c:96:c4:9a:70:08:2f:f0:18:
ab:db:6e:cf:dc:b3:5d:5c:d3:4a:3c:f9:16:0f:5c:5f:cd:c9:
8c:00:68:a5:8f:1b:6d:fe:92:e8:21:07:cb:64:77:e5:9a:fe:
23:d1:51:a5:60:8b:7b:eb:d1:14:80:fd:40:7c:25:09:ec:d4:
41:81:50:eb:3d:07:f3:b7:89:b1:63:89:8c:c6:d0:ba:a0:43:
c3:42:a5:e2:11:ca:38:8a:d8:fa:42:d3:a7:95:8f:5f:2e:82:
c3:a9:5b:8b:bb:cb:49:4e:65:66:08:58:13:06:c2:61:3e:cd:
bc:ae:b7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-ams.rpki-client.org