Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/06EF6EF0207711EE86A059134AD9E6FC.roa
File: 06EF6EF0207711EE86A059134AD9E6FC.roa (raw, json)
Hash identifier: 7ZW5frBawBACsjbCL0BncGQYfK/bYzca9FqBAuS+rJQ=
Subject key identifier: 51:11:08:77:A1:79:96:76:C5:98:F7:27:E0:29:E5:4C:0F:47:8E:3A
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0747
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/06EF6EF0207711EE86A059134AD9E6FC.roa
Signing time: Wed 12 Jul 2023 05:43:28 +0000
ROA not before: Wed 12 Jul 2023 05:43:24 +0000
ROA not after: Wed 13 Jul 2033 05:43:24 +0000
asID: 60707
IP address blocks: 192.142.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 06:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1863 (0x747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jul 12 05:43:24 2023 GMT
Not After : Jul 13 05:43:24 2033 GMT
Subject: CN=64ae3d80-993c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:19:1a:49:9e:20:64:b3:7f:be:c9:b5:2b:
32:7a:ca:1b:a1:b1:d5:b5:7c:7a:8b:ad:13:98:66:
f0:ee:ec:ad:c2:86:db:b4:fd:d1:a4:f9:c3:32:05:
bc:28:d8:97:87:09:20:0f:54:27:3c:db:2f:30:da:
43:83:b5:74:77:1b:23:a5:a3:f8:d3:5a:63:cb:96:
38:4b:a3:20:36:c8:5d:1b:df:c3:1b:da:12:e5:9b:
1f:9f:1c:07:7b:1f:d5:4a:5a:37:65:a9:55:15:8e:
45:ee:53:1e:3c:99:e3:31:b9:3d:1d:94:2b:1e:96:
75:21:af:17:2d:b0:58:c7:fe:36:e7:12:e9:51:2b:
30:5a:8d:5d:44:ae:9e:fd:b6:ad:3b:3b:7b:ef:52:
d3:15:b7:53:37:fe:34:aa:bf:e9:d7:da:d3:2e:f2:
88:79:6e:79:57:a5:63:06:27:a4:ca:cf:49:6b:52:
6e:2f:cb:53:4d:4a:5e:ca:ef:b6:60:17:e6:3c:10:
c1:66:49:3e:dc:2d:64:b2:73:0b:3f:3d:95:ef:d5:
e7:4e:9d:3a:64:47:dd:b6:df:45:cc:a8:80:4e:b7:
70:79:2b:a8:28:6b:fd:52:fc:bf:4c:60:86:12:d4:
9e:76:c5:6b:33:a4:32:ab:46:67:46:ba:30:4b:ff:
18:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:11:08:77:A1:79:96:76:C5:98:F7:27:E0:29:E5:4C:0F:47:8E:3A
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/06EF6EF0207711EE86A059134AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.130.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:29:92:9f:83:97:43:29:e3:db:9a:1c:1c:c8:da:4b:87:51:
11:e2:06:04:f4:de:ba:78:a0:1b:58:01:f6:82:13:0d:79:38:
1e:06:1d:16:c7:bb:db:a6:90:68:97:fd:fa:e3:7c:13:7b:4d:
00:70:38:dc:08:1a:d9:c8:4f:7e:4f:ca:f3:92:bf:a4:cc:0d:
0f:10:18:69:8e:08:d1:6c:58:30:19:4c:ab:d6:01:82:ed:d9:
f7:92:5a:4d:43:17:46:97:37:75:70:8d:11:c9:51:7c:28:22:
be:41:77:e2:0e:14:10:34:c2:98:09:78:1b:08:48:4b:80:a6:
81:e9:db:a5:ac:65:21:10:de:ec:be:0d:23:e2:e3:c2:e3:fe:
50:a9:e6:5c:05:94:3d:cd:08:79:2d:c3:12:c2:c1:75:8e:40:
eb:34:2a:e1:92:92:3d:58:f8:20:7e:27:e6:a7:32:a8:3e:59:
71:e1:28:48:43:ab:d8:0a:4c:67:18:54:5c:bf:bb:b1:47:30:
6d:8a:e9:92:e2:53:d4:56:c5:ee:f7:12:6b:c7:26:5d:9d:f5:
29:d7:4e:69:8a:11:ce:72:d0:6c:47:a6:b9:f7:c7:7d:43:13:
a6:c4:50:df:db:8e:56:3d:37:90:aa:33:d2:6c:76:89:3c:f5:
c6:99:41:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org