Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/9A71E7F80A9011EABCB08C6DF8AEA228.roa
File: 9A71E7F80A9011EABCB08C6DF8AEA228.roa (raw, json)
Hash identifier: q3Fv3oN7r4DQES4ypYIGuAK/poMAGU+Y5CE6F8qnZqE=
Subject key identifier: A8:5F:C5:A5:A6:5A:23:42:7C:46:06:60:C3:9F:EC:63:0B:9B:82:D4
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: AD
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/9A71E7F80A9011EABCB08C6DF8AEA228.roa
Signing time: Tue 19 Nov 2019 05:51:18 +0000
ROA not before: Tue 19 Nov 2019 05:51:12 +0000
ROA not after: Sat 17 Nov 2029 05:51:12 +0000
asID: 327687
IP address blocks: 137.63.144.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 16 Apr 2024 16:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 19 05:51:12 2019 GMT
Not After : Nov 17 05:51:12 2029 GMT
Subject: CN=5dd382d5-23db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f4:38:c1:68:89:54:9c:3a:15:6b:6f:65:69:
63:20:05:33:22:f0:2a:b8:1a:7f:e6:3c:38:78:62:
43:d2:cf:c6:7c:69:98:a0:b0:8f:0d:fa:97:29:79:
8b:5e:2b:1a:c1:90:b7:a9:5a:6a:34:2a:12:16:16:
a2:10:7d:c7:6d:ce:d5:3e:c8:c8:83:ec:19:8d:64:
48:b0:82:05:e4:fe:d5:cd:d4:36:0e:5e:0a:f3:a3:
5c:5f:88:52:b8:ce:46:2e:d9:81:56:de:1d:04:d4:
7e:28:4c:09:3a:7d:82:a1:9b:c1:4a:12:20:b3:51:
1c:7e:7e:48:fe:5e:b2:1b:83:39:e1:79:dd:14:8b:
35:91:97:a8:72:18:d5:2c:f1:78:72:00:d5:76:f7:
9e:56:79:18:cd:93:12:9e:32:fd:66:02:21:cb:1a:
0a:c2:6c:d2:6e:8e:22:e0:7e:80:24:2a:04:fc:77:
38:21:b9:61:e5:85:b3:14:21:ba:82:2a:f4:cf:e0:
4c:a5:ca:6a:61:2c:aa:59:e1:82:d1:47:c1:40:6a:
fd:3f:7c:8c:f7:f9:bc:5f:45:6d:63:a7:0e:1a:ad:
ae:90:c4:db:b9:74:79:6a:34:45:52:e6:42:ae:d6:
c7:13:c4:a4:75:bb:a9:db:e4:52:e8:7c:e3:93:4e:
36:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5F:C5:A5:A6:5A:23:42:7C:46:06:60:C3:9F:EC:63:0B:9B:82:D4
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/9A71E7F80A9011EABCB08C6DF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.144.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:d6:43:ea:e5:9d:4f:8f:53:63:5a:48:36:1d:0b:62:41:14:
1a:af:28:b9:44:10:bc:fb:66:e2:7c:13:0b:56:61:f7:29:ff:
54:f1:06:d0:56:04:33:c5:2a:90:26:f9:0a:44:28:39:5d:49:
0b:0e:bc:d8:00:ff:cd:4b:ed:c7:c4:55:32:8e:46:e3:ef:fa:
da:64:7c:e7:2d:78:2a:30:97:f3:f8:df:d7:58:68:83:a5:4f:
29:bd:13:a3:0b:7f:55:4f:7f:40:96:30:90:bc:42:bd:72:79:
03:b0:f1:20:79:68:57:66:99:45:71:43:27:ec:c0:66:81:e3:
a4:71:3a:bd:5d:67:b4:b1:55:41:ef:c7:22:93:b3:41:5c:b0:
97:7e:5c:49:33:27:4c:ff:a4:7f:c5:32:c4:a0:4e:bd:52:56:
f9:9b:42:c7:3d:54:d0:d4:91:bd:27:47:9e:9c:1e:c8:ca:dc:
07:28:ab:c8:e9:09:7b:3c:8a:a1:08:b3:0e:69:78:32:ab:42:
b6:27:2d:d2:ac:7c:58:47:16:1f:8e:ea:b4:cd:95:0d:bd:e4:
49:fe:dc:0d:3c:fa:ff:b9:92:22:a7:51:80:df:a7:0c:f3:f8:
33:2c:aa:0a:3c:46:5e:47:58:df:22:ab:a1:8e:bb:c3:57:1a:
d8:ad:95:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org