Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/138E76BA191F11EE98BD61294AD9E6FC.roa
File: 138E76BA191F11EE98BD61294AD9E6FC.roa (raw, json)
Hash identifier: Z3vvqRf4LtkBULyxYVUcNEGcPjK/CbhdRjCojBmdAeM=
Subject key identifier: 44:D5:57:8C:12:18:9F:E3:C1:0E:C3:B7:F8:47:D4:B3:4E:A7:95:43
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 0B2E
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/138E76BA191F11EE98BD61294AD9E6FC.roa
Signing time: Sun 02 Jul 2023 21:26:16 +0000
ROA not before: Sun 02 Jul 2023 21:26:13 +0000
ROA not after: Tue 02 Jul 2024 21:26:13 +0000
asID: 149020
IP address blocks: 161.123.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2862 (0xb2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Jul 2 21:26:13 2023 GMT
Not After : Jul 2 21:26:13 2024 GMT
Subject: CN=64a1eb78-a43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:9e:7a:5f:da:ff:97:ce:ab:7c:2c:f0:b6:
70:6c:5a:6b:10:cd:86:a6:00:c8:bc:a7:68:b4:33:
07:a2:d5:28:86:c2:97:59:c3:60:bb:eb:dc:c4:0d:
73:6d:bd:c6:0d:c6:20:06:85:1c:74:e7:7a:4a:ac:
49:f4:e8:46:b6:85:a3:5c:0c:96:78:68:09:2c:8f:
1e:08:fc:85:09:14:18:11:96:45:bb:fd:35:92:7a:
97:2f:f0:50:02:a1:f1:0d:78:d1:9e:f1:54:71:0e:
35:76:e0:a1:d8:b9:e0:c2:c3:6a:78:9c:ff:6d:a3:
3d:93:c1:70:92:c4:25:75:23:26:0b:b4:f6:f5:b1:
01:1d:05:18:0f:67:46:6d:0c:cf:2a:f1:5b:9a:df:
9a:13:f6:7d:42:a2:90:9e:15:af:a6:d2:77:d5:91:
61:7c:9a:61:4f:8c:ba:03:5e:a3:33:ad:81:6b:0e:
b1:8d:c0:3f:d7:35:81:75:34:11:a8:b1:72:ab:4f:
1e:ae:96:0f:5d:a7:ea:91:68:ae:1c:8c:de:a6:13:
7a:d0:44:c2:82:e6:85:86:3b:fd:93:d8:9b:26:44:
49:77:4a:5c:f5:39:c2:90:59:72:25:f9:a7:47:6f:
35:1e:b6:7a:30:8a:dc:15:a2:6f:f0:fc:85:36:0c:
88:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D5:57:8C:12:18:9F:E3:C1:0E:C3:B7:F8:47:D4:B3:4E:A7:95:43
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/138E76BA191F11EE98BD61294AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.241.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:be:e2:b1:66:b9:f8:f0:02:86:22:8b:8c:f6:76:84:29:da:
13:25:cf:5d:6b:de:19:fc:79:94:ea:a5:96:57:0d:20:6a:90:
9a:b1:72:e2:98:f7:11:5e:91:79:cf:e4:8a:9a:9f:4d:aa:1b:
5d:55:cc:5d:52:99:67:a6:2a:0c:5f:be:59:ae:39:07:c3:10:
f6:f0:2c:6d:3c:65:60:86:9f:56:0b:4b:95:d2:79:5c:49:1c:
9e:cf:c1:4d:a0:45:2f:76:01:86:24:5d:fd:13:c7:f9:37:76:
95:9c:7c:c6:f1:09:49:e7:47:ed:77:8b:08:3e:3f:1f:8f:10:
94:24:6c:35:5f:27:02:df:a7:53:d2:ba:bb:6e:72:ba:ef:f6:
02:ea:7d:a2:42:6b:80:ed:dd:15:99:5f:30:98:13:cb:c2:79:
82:36:6e:7c:b2:61:31:7d:4f:00:ce:89:bd:86:56:15:f2:d2:
78:67:64:03:7e:1e:4a:ea:24:4a:b1:88:78:e5:87:92:06:00:
63:7c:e5:70:86:a6:0f:71:90:a9:7e:6e:e8:24:8c:88:e2:7b:
11:08:e4:1d:29:3c:6a:ae:77:06:9a:e6:a8:49:99:f2:87:b0:
c7:e9:55:11:f7:dc:b4:a8:4a:f5:0d:7b:ee:fe:11:34:25:23:
aa:cf:7f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:20 2023 by rpki-client on console.sobornost.net