Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/03A725149C5B11EB8F67461BF8AEA228.roa
File: 03A725149C5B11EB8F67461BF8AEA228.roa (raw, json)
Hash identifier: yAHnGKI1/94e9/ifHL0gXqMKjXh8VVTc283GClhJ+1s=
Subject key identifier: B6:BA:49:12:5A:D2:94:A1:28:7D:7A:56:2B:B3:A5:4D:EA:72:64:32
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 02C3
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/03A725149C5B11EB8F67461BF8AEA228.roa
Signing time: Tue 13 Apr 2021 13:20:28 +0000
ROA not before: Tue 13 Apr 2021 13:20:23 +0000
ROA not after: Wed 09 Apr 2025 13:20:23 +0000
asID: 64286
IP address blocks: 192.142.132.0/22 maxlen: 24
192.142.144.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Aug 2022 13:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 707 (0x2c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Apr 13 13:20:23 2021 GMT
Not After : Apr 9 13:20:23 2025 GMT
Subject: CN=60759a9c-e7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:ed:cf:34:fe:de:94:5c:27:49:3a:1d:c6:
93:b0:13:23:ff:cd:1d:cb:d5:8e:3e:d0:bd:8d:a3:
02:0d:ef:19:ab:35:44:09:0d:b6:80:3a:86:d4:9a:
dc:32:62:e2:da:60:4f:95:f6:de:62:54:17:bb:bb:
5f:c2:9d:a7:64:11:2b:f3:94:f3:17:fe:78:fa:6a:
8d:f5:59:8e:c4:a2:fd:61:94:6f:61:81:fe:1d:34:
f9:8b:37:3d:c4:b5:36:ea:7e:28:64:4d:bd:f3:19:
c9:93:6b:c9:4d:0e:94:75:ed:61:99:f7:a6:e7:40:
72:e9:51:b9:f8:77:fe:92:26:2e:90:82:e8:65:69:
04:ab:04:b6:08:21:9a:2e:ce:b2:a8:36:91:d7:21:
be:28:a3:d4:11:35:6c:f6:c4:91:20:90:46:27:08:
69:88:cb:61:80:23:a2:53:fd:bf:c3:fb:1e:ec:a8:
70:b1:ea:e6:c9:7d:17:99:2b:8a:57:2a:bd:15:35:
92:07:b0:b0:88:44:79:dd:3f:5f:89:d1:7c:71:d0:
34:2a:3b:96:4d:7b:68:81:b5:dc:7a:3c:4d:61:80:
bd:54:46:1d:2f:d1:10:0e:63:79:3a:07:65:f6:71:
ed:0a:0a:26:82:fa:8b:a4:25:06:d7:22:52:33:36:
89:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BA:49:12:5A:D2:94:A1:28:7D:7A:56:2B:B3:A5:4D:EA:72:64:32
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/03A725149C5B11EB8F67461BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.132.0/22
192.142.144.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:48:ab:47:85:37:d7:b3:f6:ff:7f:aa:7c:9e:de:db:c9:5c:
72:01:d4:e8:09:cf:62:3e:55:02:7a:3b:63:a4:16:21:9a:51:
84:0b:12:f0:b2:09:da:c4:68:07:05:d2:03:a4:7c:fd:55:7c:
dc:30:cd:58:4d:21:18:a7:fe:13:e5:0d:8b:b6:7a:a5:e4:f1:
24:f8:8e:d6:20:77:7d:7c:81:1f:70:4e:5e:cc:70:0f:cb:62:
2b:8b:cc:bc:3b:25:20:c3:cb:f4:0a:fd:36:af:e4:3f:4f:bf:
f7:70:d3:0e:87:eb:55:5c:70:ce:f5:3f:8a:15:66:fc:e2:18:
00:b0:1b:97:a2:b8:52:6d:2a:cb:f9:b8:9e:3a:92:cb:1f:40:
70:32:a4:fc:51:cc:dc:15:70:12:ed:e8:79:22:3c:58:13:ef:
bb:e0:76:2b:77:73:fa:50:9c:77:f3:db:54:bc:8b:e3:0b:3a:
db:f4:ed:d5:4f:b3:6b:89:e2:d1:d0:f5:2b:c1:7d:52:6e:4b:
64:1c:67:01:d3:96:72:9f:33:71:33:5f:11:bf:b3:bb:6b:95:
c9:cd:48:c0:80:25:4a:a5:2b:56:f6:9e:57:d6:21:dd:e7:ba:
1f:00:f0:ec:bb:d2:bc:ae:47:4a:c4:2e:ee:25:18:70:26:24:
af:15:57:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org