Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/028C3624BF1D11EDA6038C92F1222468.roa
File: 028C3624BF1D11EDA6038C92F1222468.roa (raw, json)
Hash identifier: p/7wf1oTKQz38hYe2fLDeSVvPQQpeOsOFEdV2qvZjlc=
Subject key identifier: 08:DC:17:1E:6D:D3:13:B0:AC:E9:7F:6D:24:F2:AE:F2:D6:43:A3:0D
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0674
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/028C3624BF1D11EDA6038C92F1222468.roa
Signing time: Fri 10 Mar 2023 08:24:44 +0000
ROA not before: Fri 10 Mar 2023 08:24:38 +0000
ROA not after: Wed 09 Mar 2033 08:24:38 +0000
asID: 208068
IP address blocks: 192.142.200.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 15:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1652 (0x674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Mar 10 08:24:38 2023 GMT
Not After : Mar 9 08:24:38 2033 GMT
Subject: CN=640ae94c-8ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:69:92:dd:6a:52:7d:19:65:e0:53:ac:24:2c:
73:66:6d:e6:65:da:40:d0:92:87:51:38:51:0e:f7:
65:9e:4b:fa:3e:05:65:2b:f1:82:31:01:e5:a7:a2:
f2:15:1f:8a:71:68:3a:c2:40:a9:77:61:42:29:84:
21:eb:1d:ee:01:f6:50:14:09:6d:06:bd:a2:a0:75:
e4:9f:70:86:98:bd:19:96:39:88:f3:94:5c:db:8d:
44:51:82:72:13:04:9c:bf:6c:1d:8d:18:ce:e2:fd:
5a:47:52:12:0d:c1:23:cb:c9:e4:cd:1a:6e:fd:ec:
b0:2e:29:a4:65:e1:d4:f6:ca:5d:ab:78:6f:50:d5:
9f:c8:fb:a7:ae:54:e3:01:cd:5e:16:a5:e9:6b:61:
01:dc:a0:69:f1:ab:3a:b1:f2:e2:84:0a:7d:c6:6a:
f6:6c:f4:14:db:3e:d8:ea:5e:4f:97:36:8e:17:15:
48:ad:3a:6d:55:54:dd:cd:c0:85:14:cb:f6:3c:d7:
81:d7:0f:b8:85:4e:3c:ee:fa:6e:a0:6f:b0:5c:00:
41:26:c2:30:2a:e1:12:f5:af:f2:00:b0:0e:d6:a2:
62:e2:53:2c:b4:c2:6f:b0:a0:79:51:1e:c4:29:f7:
a0:e1:89:67:2c:ce:84:25:96:3d:da:69:4d:e6:24:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DC:17:1E:6D:D3:13:B0:AC:E9:7F:6D:24:F2:AE:F2:D6:43:A3:0D
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/028C3624BF1D11EDA6038C92F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.200.0/21
Signature Algorithm: sha256WithRSAEncryption
bf:55:71:bb:54:f9:35:0a:f0:13:88:2e:62:09:ea:51:a8:c3:
d0:45:d0:3b:c4:02:a0:41:00:1b:65:1f:9d:ea:15:51:c3:42:
1c:4d:4c:16:63:b3:aa:5f:9c:a4:8b:0a:6b:87:3f:b1:8f:2a:
78:49:b8:d1:a6:d0:5c:41:3f:b4:e7:24:0d:56:62:66:c5:e4:
d6:c3:07:73:99:4a:41:47:61:9d:7a:d1:6d:c0:0b:52:71:a4:
eb:3e:cf:49:d0:31:15:cf:60:61:b1:39:a3:31:f3:e3:d8:39:
87:76:1e:bb:19:00:fa:b1:2f:a8:c1:2b:d4:9d:a9:2b:a0:e6:
13:52:0c:4d:05:db:d2:98:4a:37:d0:b0:86:b4:25:34:e9:24:
55:7e:28:53:6d:df:85:24:4a:fc:05:bb:85:1a:ee:92:98:50:
3d:9c:9b:71:fb:73:ac:dd:d6:2a:4a:5a:50:6b:fc:0a:58:94:
8a:c0:09:64:98:03:3b:50:2b:95:49:60:8e:a8:24:8c:f2:05:
8f:4e:30:9d:4c:0b:af:e1:b0:58:ee:8e:24:6c:a1:15:a5:1a:
fe:15:2f:3f:7e:92:1c:df:b9:02:5e:7e:a5:24:d4:62:8d:b4:
9b:c5:c3:df:ed:5c:51:ad:50:fc:34:24:3f:58:13:4c:4f:e6:
9a:7a:6f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org