Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F60683727FE311EEAD5F8D164AD9E6FC.roa
File: F60683727FE311EEAD5F8D164AD9E6FC.roa (raw, json)
Hash identifier: RRKUAXlt+dANUwevgnkf2vKJL2oIwqHstdJv4YE5VJ4=
Subject key identifier: 3B:BA:D3:DD:2B:79:DB:C8:C7:B4:E4:8A:01:F1:60:D8:D2:BF:CA:4A
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0CAE
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F60683727FE311EEAD5F8D164AD9E6FC.roa
Signing time: Fri 10 Nov 2023 16:12:36 +0000
ROA not before: Fri 10 Nov 2023 16:12:32 +0000
ROA not after: Mon 10 Nov 2025 16:12:32 +0000
asID: 216440
IP address blocks: 161.123.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Nov 2023 20:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3246 (0xcae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Nov 10 16:12:32 2023 GMT
Not After : Nov 10 16:12:32 2025 GMT
Subject: CN=654e5674-2723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:e2:e1:fc:00:64:f8:4f:d1:ba:e1:22:84:
bc:bd:49:15:96:da:ff:ca:4c:4d:09:03:f2:12:72:
c3:0e:94:a8:50:d2:4a:b1:c2:ed:03:22:d1:10:2f:
6e:56:68:a2:9a:ad:5e:62:8d:65:9c:87:fd:ab:14:
0a:c6:1c:6b:b2:dd:e8:75:f2:ea:56:93:38:37:75:
1b:5f:20:ed:e4:0e:89:1b:98:d5:b9:4e:be:c4:0a:
0c:23:d6:cf:85:1f:91:fe:e6:50:e9:6b:3c:d8:6b:
df:3e:5b:06:97:c2:f6:98:7f:4d:2b:88:95:1f:3e:
7c:0d:9a:3d:c4:80:cd:19:d6:ef:de:c0:83:4b:ac:
eb:a9:51:b8:b9:3f:fc:b4:23:8a:11:85:7e:66:d6:
52:82:e1:c5:00:b7:3b:c0:2c:83:a4:46:2a:8d:a1:
c0:6a:75:2f:22:9c:20:68:17:38:93:8c:d3:5f:12:
70:82:3f:cc:8e:d5:ef:05:fa:42:3d:51:c7:35:67:
3a:c4:5f:af:ee:18:1f:a8:fc:64:40:d6:86:d7:a3:
02:44:bb:97:6e:ef:d9:b2:e1:35:4c:a8:29:6f:13:
8e:33:41:1d:9b:fa:3a:4e:2a:46:f3:8e:c2:31:31:
51:ee:ac:d8:6f:35:b4:02:00:c4:2b:94:9d:b0:16:
62:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BA:D3:DD:2B:79:DB:C8:C7:B4:E4:8A:01:F1:60:D8:D2:BF:CA:4A
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/F60683727FE311EEAD5F8D164AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.150.0/24
Signature Algorithm: sha256WithRSAEncryption
44:83:b4:3e:be:74:d0:ed:a4:99:ea:b4:9e:51:77:7e:e9:47:
6f:ad:20:1c:9b:c4:9d:e2:e9:e6:31:b4:0c:04:e7:ca:3c:35:
f7:0a:db:5d:5f:0e:62:96:65:08:c1:05:4a:8b:b0:2a:e0:60:
cf:97:92:7c:ad:4f:3e:f3:46:a4:41:f3:f4:21:3e:c1:5f:78:
48:01:58:94:7b:5f:c7:67:1a:cd:01:b4:3f:da:1b:77:8a:af:
a2:8d:44:85:cb:27:3a:45:7a:ac:f3:d1:30:45:73:61:95:54:
1f:6b:a2:ac:11:be:dd:9a:78:68:5f:91:7b:97:66:f5:5c:37:
64:ee:85:40:0d:01:74:29:ca:b9:cc:6e:99:ac:8f:d0:4c:12:
58:26:1a:2b:f4:d9:cd:35:4c:ed:3c:9f:70:db:20:30:76:70:
70:be:18:8c:01:59:59:3a:fb:e3:88:c5:95:fb:84:d6:15:c3:
7e:6c:ff:8d:9c:19:96:95:6b:49:c7:0b:b8:5a:a2:5b:bf:b6:
04:45:34:14:60:98:e0:26:f6:c6:06:b5:d6:cc:89:69:41:a8:
06:e1:11:cc:d5:c9:fa:a1:37:83:e6:c0:b1:a3:d9:e7:ba:54:
6b:75:24:a8:96:c9:ad:ff:20:ff:06:d2:04:27:9c:c4:6b:c4:
c4:a2:ef:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-ams.rpki-client.org