Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1BC5D6BE0A1C11EE8249FB214AD9E6FC.roa
File: 1BC5D6BE0A1C11EE8249FB214AD9E6FC.roa (raw, json)
Hash identifier: zYVe+HGdTVhTYZq/u8j5ci7I4EgJmvxRHFSrLassJYk=
Subject key identifier: 1E:DC:8F:5C:38:58:D7:D3:23:AD:08:39:AC:A3:9F:07:9C:A7:A1:07
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 071D
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1BC5D6BE0A1C11EE8249FB214AD9E6FC.roa
Signing time: Tue 13 Jun 2023 18:57:14 +0000
ROA not before: Tue 13 Jun 2023 18:57:10 +0000
ROA not after: Wed 15 Jun 2033 18:57:10 +0000
asID: 64286
IP address blocks: 192.142.184.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 May 2024 07:13:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1821 (0x71d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jun 13 18:57:10 2023 GMT
Not After : Jun 15 18:57:10 2033 GMT
Subject: CN=6488bc0a-f851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a5:3a:d5:3d:49:a4:cb:64:c0:04:5b:54:2e:
0b:63:a4:e3:08:aa:2f:a6:36:1e:7b:1b:0a:c3:dc:
a7:63:12:43:70:d5:aa:d2:18:0f:d0:a7:bb:0c:16:
54:89:b0:ff:3a:51:38:98:a9:87:2c:13:1f:30:e8:
70:78:a2:f6:c8:db:5b:6b:c5:2a:eb:17:54:e8:b7:
b5:07:b6:b8:c3:32:3b:09:ef:08:89:36:1f:cc:8b:
38:0c:7a:17:64:19:33:0c:26:f2:89:d8:bc:84:a8:
79:1a:fa:22:61:b9:27:20:d4:06:a7:29:aa:8a:35:
40:e4:06:2b:3c:a3:88:3f:64:35:3e:be:e9:da:b0:
4e:56:c7:08:17:1c:dc:9b:60:d4:fb:c3:59:34:e8:
da:c9:a9:bc:42:a9:87:ea:43:d3:33:50:b5:0f:9f:
ee:b6:8e:7e:0b:d8:46:b2:7b:9e:1b:43:33:73:55:
7d:6b:bd:70:fb:04:d5:25:51:53:fc:7b:e6:27:22:
58:bd:4b:22:58:d5:6a:10:78:59:f1:27:5b:92:99:
c9:c7:64:e4:92:13:d2:c9:c0:14:6d:18:ad:30:cc:
0c:a0:c6:75:fe:d1:6b:07:bb:cb:df:8c:b5:13:8a:
50:8b:f8:7e:66:77:14:27:a3:61:2c:bb:af:96:4b:
c9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DC:8F:5C:38:58:D7:D3:23:AD:08:39:AC:A3:9F:07:9C:A7:A1:07
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1BC5D6BE0A1C11EE8249FB214AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.184.0/21
Signature Algorithm: sha256WithRSAEncryption
21:0b:f9:73:b1:5b:03:fb:e3:02:76:71:fb:26:75:b7:54:28:
15:c2:4d:3f:0b:27:a8:89:16:a8:13:6c:5e:4a:c7:c8:f3:13:
56:65:6f:d2:6d:46:c6:81:f6:3e:4d:f6:56:74:46:92:78:41:
72:f1:94:5f:ba:59:93:1e:8e:92:c7:42:cc:cc:51:1f:2f:33:
a7:27:81:68:cd:aa:79:0b:4f:f8:21:6c:1c:23:fd:05:26:06:
76:7c:2e:52:be:ea:7b:61:b7:a5:47:18:33:d9:b8:db:0f:85:
2b:f3:e3:5b:e0:0c:72:19:b1:de:64:ce:8a:22:b2:32:01:08:
04:f0:1a:f2:62:fa:e8:1c:a1:8c:f2:99:e8:c7:f1:cf:55:4a:
bd:42:15:a9:c1:02:e2:bb:9c:a8:56:9d:6e:48:2e:0d:12:73:
72:63:ce:60:a0:20:ed:4d:2d:3d:77:8f:45:26:b6:e5:5c:7d:
7c:3d:a5:0d:f1:ae:e6:c0:0e:29:18:7e:41:d6:a1:ad:5b:c9:
ff:b6:05:f9:84:1f:a6:94:3f:df:76:02:9f:7b:d2:ca:19:98:
60:89:2b:5e:c2:43:f5:6d:9c:e2:e0:97:90:53:02:31:6f:13:
cd:bb:81:56:54:8f:1f:9c:27:df:42:60:ca:31:5f:94:44:60:
85:39:c6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 10:46:32 2024 by rpki-client on console-fra.rpki-client.org