Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/C3DB3B18D53211EF94846773762E951A.roa
File: C3DB3B18D53211EF94846773762E951A.roa (raw, json)
Hash identifier: M24hgGdmmEpLWsuIDUbMPF1IWNUwHCrg2GMwWyDPYhM=
Subject key identifier: D3:D1:C6:CF:1A:7F:34:F6:7D:87:1B:46:D5:A3:E3:37:F7:47:CC:36
Certificate issuer: /CN=F36CFBB0AR/serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Certificate serial: 0B
Authority key identifier: C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Authority info access: rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/C3DB3B18D53211EF94846773762E951A.roa
Signing time: Sat 18 Jan 2025 00:25:48 +0000
ROA not before: Sat 18 Jan 2025 00:00:45 +0000
ROA not after: Sun 01 Jan 2040 00:00:45 +0000
asID: 37721
IP address blocks: 160.226.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Jan 2025 01:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CFBB0AR, serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Validity
Not Before: Jan 18 00:00:45 2025 GMT
Not After : Jan 1 00:00:45 2040 GMT
Subject: CN=678af50c-a5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:de:fc:66:51:78:7f:2b:43:42:c2:b9:c9:3b:
7b:cb:1b:49:65:a2:94:e5:cc:91:26:2c:d3:f3:ce:
23:c5:4c:e1:82:f9:b0:9e:26:16:7b:a8:db:c9:de:
9a:a4:7c:da:2d:28:c2:6b:86:c7:71:2a:59:f0:0a:
1c:15:a7:0b:a5:91:55:96:33:fb:ef:63:4d:cc:e7:
3d:a4:02:1e:b8:da:e1:e9:72:12:84:36:28:e8:ba:
9d:7b:15:94:18:86:0e:b6:54:e8:89:99:7c:00:12:
37:e1:68:6a:8a:ed:c6:3e:61:d5:98:4c:aa:99:05:
31:a2:54:ea:a4:87:ab:2e:99:59:67:29:90:9d:2d:
e1:38:a3:9c:b9:87:e6:91:19:e4:ee:0b:6f:32:6d:
6f:27:ab:13:91:97:c5:66:21:94:99:cd:15:dd:94:
33:3d:f0:9b:a2:05:82:65:d7:a9:c7:ba:16:36:62:
67:52:fe:45:a5:51:40:70:81:78:68:75:21:c2:8a:
a7:7a:34:7a:bb:6a:9f:d8:6c:98:d8:1d:d4:40:7e:
87:35:3a:65:13:54:09:72:4a:be:bd:af:a4:02:81:
64:e1:c1:7f:d6:62:ae:27:2d:b5:78:05:57:e2:05:
1f:cf:e6:6a:e0:e0:ea:10:89:3b:21:47:4c:91:c8:
4b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D1:C6:CF:1A:7F:34:F6:7D:87:1B:46:D5:A3:E3:37:F7:47:CC:36
X509v3 Authority Key Identifier:
keyid:C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/C3DB3B18D53211EF94846773762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.226.184.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:52:59:3c:3e:d8:7a:3e:a8:28:1d:f3:c2:35:d9:88:ec:19:
0e:71:0e:8d:4f:ab:92:66:0c:f8:fd:3f:c9:90:8a:fa:d1:35:
14:dc:80:1d:67:22:ca:dd:33:e0:9f:9d:5f:31:f8:64:7e:8a:
71:ea:d9:bf:9d:9c:ce:00:b7:db:c8:af:20:53:c1:de:a6:62:
83:61:1c:79:9c:54:cc:c3:54:6e:de:40:49:45:b5:2e:a5:ec:
13:34:5c:48:d4:98:2b:78:5b:d8:41:a3:ce:79:76:f0:db:93:
e8:1d:0c:4f:20:69:2c:78:fd:3b:a4:b6:bd:53:dd:ea:12:47:
fb:f4:99:b0:2f:d0:32:c6:7f:1f:4b:95:21:b5:f3:c5:ac:0b:
53:1a:b1:5d:6e:fa:9e:2f:3c:98:6f:7a:51:6e:87:ca:32:ea:
11:96:66:bd:ee:dc:3d:4b:c8:83:6c:bd:8f:89:74:09:86:cd:
34:a3:c0:21:a0:7d:51:20:d1:01:5d:d5:4f:3e:c6:c9:3d:b3:
79:9f:73:5a:5d:30:89:8e:22:79:2f:44:f5:e5:aa:e9:73:f1:
fc:58:d6:fd:74:4b:80:46:29:06:67:6b:55:e3:c7:d4:dd:ad:
a8:bd:d7:31:0d:fe:df:60:ce:f7:f8:e8:66:80:f8:8e:e3:1e:
fd:64:72:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:05:23 2025 by rpki-client