Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E7F1395C191911EEBBBFEA194AD9E6FC.roa
File: E7F1395C191911EEBBBFEA194AD9E6FC.roa (raw, json)
Hash identifier: 78LGcaJWOABmb8ARGQwWV3pTBx1aGA61Ousyh6JznZI=
Subject key identifier: D7:F1:40:EB:2E:36:58:BD:E0:DD:B1:A4:FF:98:F7:B2:B3:76:C0:C3
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B20
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E7F1395C191911EEBBBFEA194AD9E6FC.roa
Signing time: Sun 02 Jul 2023 20:49:15 +0000
ROA not before: Sun 02 Jul 2023 20:49:12 +0000
ROA not after: Tue 02 Jul 2024 20:49:12 +0000
asID: 8100
IP address blocks: 161.123.102.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2848 (0xb20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 2 20:49:12 2023 GMT
Not After : Jul 2 20:49:12 2024 GMT
Subject: CN=64a1e2cb-3323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:50:4e:c4:c7:00:b0:85:dd:6c:11:bf:38:
07:48:0d:f7:45:0b:58:69:19:8f:45:29:b4:b1:07:
c0:5f:b0:0c:76:74:d5:d5:3d:42:17:7d:8f:a3:25:
bd:4e:e6:b5:d0:41:5a:81:6b:90:97:ff:db:da:b0:
b3:bc:38:9d:ff:a1:34:52:20:ca:de:0c:f9:6e:0e:
a8:e4:9f:6f:a5:71:2b:8c:97:4f:55:28:89:c3:36:
10:7a:2d:3b:e5:1e:87:02:06:cb:c0:cb:45:b0:5b:
67:fd:83:dc:fb:99:26:f5:1d:8e:d8:aa:eb:d5:c0:
55:22:94:ad:93:50:88:24:b0:29:5c:8b:6d:52:c4:
b7:22:f8:ae:33:eb:cc:ab:9e:69:3b:2a:08:5e:e5:
5f:5e:39:36:15:ac:15:a4:c8:c5:04:6f:fa:28:8e:
bf:e6:64:5c:49:06:84:74:9b:1e:1f:90:10:05:52:
f6:a6:53:4c:a1:bb:ab:f1:37:4a:f6:62:e0:41:4f:
89:ed:70:81:ea:fa:52:1e:24:ef:52:02:86:5e:11:
8e:b0:14:0f:95:cd:3c:1b:c2:e1:f9:39:1b:1b:00:
83:65:d5:e1:24:92:c7:5a:4d:04:5e:da:93:30:4f:
70:f7:7d:a0:79:81:c7:0f:c9:8e:f6:25:0f:60:bc:
48:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F1:40:EB:2E:36:58:BD:E0:DD:B1:A4:FF:98:F7:B2:B3:76:C0:C3
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E7F1395C191911EEBBBFEA194AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.102.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:85:5b:d6:28:ec:f4:11:b8:6b:ff:c2:80:0d:52:b1:ca:7e:
9c:c7:e0:5d:24:3f:a0:0b:20:92:3a:4a:83:30:d7:a1:03:de:
8b:6b:b8:f7:fb:2b:8c:fe:d1:c7:dd:fb:f4:db:ff:a0:3a:a5:
08:06:a8:1d:31:8c:10:9b:9e:8e:04:36:8f:3a:76:2c:32:66:
2d:53:db:fc:b3:01:57:1a:88:21:66:ed:a4:38:25:60:ab:dd:
8c:35:a2:f8:d6:2a:19:e1:3f:e6:8b:42:bd:dc:31:5c:a9:a0:
d7:0b:8a:38:a1:aa:40:68:3e:7b:ff:c2:fe:f6:bc:fd:86:20:
f9:89:81:e2:17:fc:45:b4:c6:d7:ba:e6:86:e7:df:12:12:e1:
8b:1e:f4:3d:63:33:00:56:5b:c1:87:d4:20:1b:ec:ec:5c:e6:
b2:4d:52:39:93:e2:58:bc:e9:25:29:60:81:00:bc:78:51:db:
9c:6a:52:96:eb:69:be:e5:95:f9:34:b9:25:d1:85:b0:83:c3:
e6:d9:32:25:0f:26:d6:d7:dc:90:b8:2e:5b:51:0a:98:50:c6:
d8:9b:cc:48:b5:2b:e2:b0:f0:cb:10:f3:d3:64:30:6e:15:db:
3c:d4:70:47:f9:13:2b:a8:8a:d8:4a:49:9f:ba:a9:a6:40:af:
61:25:c6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org