Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/0C822C38ED9911EDB4505C7F4AD9E6FC.roa
File: 0C822C38ED9911EDB4505C7F4AD9E6FC.roa (raw, json)
Hash identifier: I0kvuJDuIzjUNYRMaSHD1XM7n5PF+a3Z0ZNVgCvMruU=
Subject key identifier: 94:A3:0E:D0:0A:E7:0D:84:BB:BA:43:00:BA:46:7A:B1:7B:15:28:77
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 06D1
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/0C822C38ED9911EDB4505C7F4AD9E6FC.roa
Signing time: Mon 08 May 2023 12:08:31 +0000
ROA not before: Mon 08 May 2023 12:08:28 +0000
ROA not after: Tue 10 May 2033 12:08:28 +0000
asID: 207459
IP address blocks: 192.142.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Aug 2023 06:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1745 (0x6d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 8 12:08:28 2023 GMT
Not After : May 10 12:08:28 2033 GMT
Subject: CN=6458e63f-851d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:6b:46:bd:4e:2a:3f:9a:68:84:a6:71:a6:
65:95:70:6a:94:e9:40:24:f5:10:51:f3:cf:e5:bb:
db:b5:24:b2:47:8b:88:71:73:2e:ec:07:a8:14:36:
1f:8e:d1:20:96:7c:f8:dd:5e:43:aa:b3:ae:9a:ca:
95:2f:a0:76:35:69:30:67:db:f9:77:e9:40:12:59:
f9:6a:04:83:6d:89:ff:24:f0:31:08:ca:b3:eb:18:
29:3c:22:47:09:d4:29:6f:d5:ce:6e:9f:48:a3:24:
00:48:4c:71:b8:fc:69:3d:5f:2d:ea:3e:45:7a:7a:
57:96:2a:ad:2f:7e:ab:e4:d4:09:58:37:17:71:dd:
e8:17:b0:29:ef:7f:10:a8:7f:84:1a:28:63:02:f4:
77:ec:df:18:77:02:3d:39:99:80:9e:ee:41:8e:01:
8d:36:95:da:b0:e1:03:ac:28:51:1a:b3:0d:99:86:
b6:8c:0f:30:4a:91:95:51:81:95:d4:0d:9f:a1:6f:
d0:f0:f1:a9:1e:78:91:0d:a0:cc:6e:14:11:85:c8:
30:d9:24:88:d2:78:d0:81:a4:fc:c5:2c:95:c0:6c:
ef:4e:2e:0c:54:4c:03:6e:ee:fa:8c:7d:18:0a:a1:
c0:a2:fd:3f:20:68:d9:0c:7a:c8:30:4c:1b:df:73:
51:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A3:0E:D0:0A:E7:0D:84:BB:BA:43:00:BA:46:7A:B1:7B:15:28:77
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/0C822C38ED9911EDB4505C7F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.129.0/24
Signature Algorithm: sha256WithRSAEncryption
97:40:8f:27:61:df:2e:7e:8f:d2:57:ac:bb:b3:a6:93:d8:ac:
1d:a8:03:5e:0f:8b:f3:5e:11:ca:4e:b4:12:04:84:ae:2a:3a:
fa:98:27:93:39:39:74:66:b7:53:1a:8c:b2:0c:40:67:80:aa:
d5:24:b6:2f:17:1b:88:36:62:45:87:e2:ac:bc:1b:c4:45:93:
b6:45:f4:ad:c5:d7:5b:5a:00:8e:1c:e5:5f:72:35:4a:2d:a7:
0a:9a:a1:f3:da:90:6c:ec:91:e6:1d:62:e9:5a:89:bd:25:4d:
dc:d4:a7:6d:ee:a5:4b:49:be:b4:59:f6:32:56:46:cc:12:d7:
02:78:99:1d:b1:66:31:c4:bb:1d:01:a9:92:a5:d4:a3:38:65:
1c:e0:50:f6:50:4f:f7:65:31:1a:f0:e7:d3:47:f0:b1:15:b4:
3a:0c:16:4e:99:06:db:76:4d:f3:1e:05:16:f0:18:27:51:ce:
c8:14:8c:3b:c8:ea:7b:e9:23:4e:30:45:13:78:fc:f0:58:00:
f9:5a:7b:14:c9:97:3a:0f:36:2f:b3:23:10:50:4c:40:92:69:
ec:8e:bc:92:80:22:e6:b0:65:27:9d:c2:f2:f4:f8:ea:ab:42:
e9:47:a5:86:7f:af:21:3e:e7:88:69:43:31:70:83:46:a7:41:
6f:7a:11:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org