Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/D12DFF28C3FC11E9AD2F2382F8AEA228.roa
File: D12DFF28C3FC11E9AD2F2382F8AEA228.roa (raw, json)
Hash identifier: fiyv3Y8pZHt61iutO7REGGJVo1IKsNUmCi8Bi8RUZOg=
Subject key identifier: 61:23:E6:28:E5:4D:8D:72:FA:3E:24:50:CF:6C:29:CC:94:74:EF:95
Certificate issuer: /CN=F3668037AR/serialNumber=6EF07CF2076CC5A6096B2572AE0895FD673F4712
Certificate serial: 04
Authority key identifier: 6E:F0:7C:F2:07:6C:C5:A6:09:6B:25:72:AE:08:95:FD:67:3F:47:12
Authority info access: rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/D12DFF28C3FC11E9AD2F2382F8AEA228.roa
Signing time: Wed 21 Aug 2019 10:17:03 +0000
ROA not before: Wed 21 Aug 2019 10:16:56 +0000
ROA not after: Tue 21 Aug 2029 10:16:56 +0000
asID: 30844
IP address blocks: 152.108.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Dec 2023 19:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668037AR/serialNumber=6EF07CF2076CC5A6096B2572AE0895FD673F4712
Validity
Not Before: Aug 21 10:16:56 2019 GMT
Not After : Aug 21 10:16:56 2029 GMT
Subject: CN=5d5d1a1e-a867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:91:25:8b:93:2a:5f:d2:8c:2a:c4:44:87:b7:
60:ac:b8:67:3b:9e:ac:d3:f2:f8:38:c2:98:d3:d4:
bc:1e:b5:e0:71:0c:f0:dc:9d:1b:a9:d3:cf:af:63:
b6:df:e3:50:a7:81:b3:8b:6b:fe:ae:96:08:a5:68:
ed:2b:d4:bb:07:99:1d:47:34:44:e2:0d:76:95:52:
e7:34:81:81:06:4f:a2:7b:f5:94:28:6b:c5:97:e9:
07:63:8c:93:68:fd:e1:3c:bf:b5:8d:19:1f:34:6c:
1e:d5:84:24:68:af:2d:87:bf:b6:93:34:90:ee:db:
17:ef:7c:3a:00:f6:3e:97:81:6e:e6:f6:08:00:f2:
5a:63:2c:f9:23:59:b3:19:e5:68:7d:2f:ec:80:53:
06:13:c7:9c:44:e9:32:5d:82:06:e4:db:b3:19:9a:
5b:f8:6f:64:d6:fd:3a:6f:6b:14:c9:03:36:be:98:
d4:ea:16:2e:da:37:e1:d1:7f:9d:63:a5:ff:51:f2:
28:ec:ee:39:62:80:fd:66:dd:f2:15:1d:ef:d8:de:
a1:20:fe:c1:69:ce:0d:f3:58:54:27:4b:5a:d3:b0:
5f:f0:36:09:7f:d3:b1:14:07:61:6e:bf:99:74:9d:
11:4e:f2:4f:2e:d8:7c:f2:89:ab:09:86:25:10:9a:
4a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:23:E6:28:E5:4D:8D:72:FA:3E:24:50:CF:6C:29:CC:94:74:EF:95
X509v3 Authority Key Identifier:
keyid:6E:F0:7C:F2:07:6C:C5:A6:09:6B:25:72:AE:08:95:FD:67:3F:47:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/D12DFF28C3FC11E9AD2F2382F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
152.108.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:61:60:1d:cf:52:f1:d0:ca:bb:6d:70:c5:c2:ad:68:03:3a:
2e:c5:6a:9c:20:a1:3b:6b:31:06:02:50:17:4c:01:08:9e:4d:
02:66:eb:9b:ff:71:cc:39:5f:ae:9c:31:64:e6:45:00:54:13:
66:bb:5f:f4:bd:f7:e4:14:fc:18:ad:78:04:cd:f0:1e:0c:c6:
20:62:9f:52:7e:84:ab:83:ff:e0:d3:b4:5b:38:56:c0:0e:74:
57:96:8d:3d:24:e2:57:c4:9a:72:5b:59:2f:a0:1b:1d:30:7d:
06:68:c6:2e:64:36:78:90:4f:68:21:1b:f1:e1:65:3a:76:47:
04:49:89:a5:6d:cb:eb:7a:58:32:74:5b:62:e8:1d:a7:70:54:
0a:a4:26:74:54:2a:00:6f:43:50:7c:f5:b1:1c:82:4a:70:db:
4d:4e:55:de:36:7d:c5:7e:90:1c:f6:e4:f9:a0:af:a3:32:f3:
5d:6c:b5:1e:9d:0d:c9:fe:28:e1:95:19:ad:b8:f9:c5:c6:c1:
11:66:51:7e:51:5c:ec:73:aa:a0:15:8a:e7:31:3c:67:14:ce:
f5:bd:dd:4a:ce:95:65:f1:a8:a5:ac:e0:5e:4e:41:36:6e:74:
9f:96:6a:0c:58:f8:9d:f3:6e:d9:b6:16:1b:32:52:8d:4c:2f:
22:7f:a4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org