Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/0E91985A47C211EE9B3BC0144AD9E6FC.roa
File: 0E91985A47C211EE9B3BC0144AD9E6FC.roa (raw, json)
Hash identifier: ZbQBkWemsF4puyg5bg47r32ro9enp3WZya//wnJk98Y=
Subject key identifier: 38:2D:A5:90:BA:B0:B2:28:57:43:5B:CD:42:DF:26:3B:94:70:9B:E3
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 078B
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/0E91985A47C211EE9B3BC0144AD9E6FC.roa
Signing time: Thu 31 Aug 2023 05:48:49 +0000
ROA not before: Thu 31 Aug 2023 05:48:46 +0000
ROA not after: Wed 24 Aug 2033 05:48:46 +0000
asID: 30938
IP address blocks: 192.142.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 10:54:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1931 (0x78b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 31 05:48:46 2023 GMT
Not After : Aug 24 05:48:46 2033 GMT
Subject: CN=64f029c1-9488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:83:46:a9:e0:f3:b1:1b:e3:32:32:e5:25:88:
5e:32:7b:d5:4c:c0:ca:c4:aa:e7:dc:1d:bd:7c:10:
95:9e:72:2d:81:e0:f7:b7:98:82:ae:3c:37:b4:30:
5e:ae:73:80:69:c6:2e:61:b2:4b:6a:78:40:96:af:
58:53:54:b7:cf:ea:b0:f0:7c:d3:25:0e:f1:a9:75:
35:4f:78:e2:57:80:46:9e:be:b5:0f:d5:6b:06:e0:
09:a5:61:2e:5a:97:ba:72:18:fd:5d:52:18:f8:ae:
b9:77:c1:e6:85:d5:2d:3c:1b:14:a2:35:bb:24:08:
23:b0:25:17:d5:e6:c9:03:48:9e:af:a9:2b:72:0c:
35:ee:d9:39:b8:30:38:ef:5e:0d:93:02:96:bd:07:
39:b6:72:41:d0:e2:f6:f4:38:16:ac:0b:2d:59:ad:
74:59:94:a3:ff:ab:fe:3c:e5:dc:4d:39:a9:b5:ea:
8d:fe:dd:1e:18:06:9a:96:aa:b9:44:b8:42:00:3a:
f2:de:c4:5a:dc:1f:56:d1:bd:73:a9:45:c2:ae:be:
ad:a5:68:f5:ec:fd:92:3e:b7:2e:66:6b:32:c0:81:
b3:58:8e:ff:6d:df:f6:ab:dd:d5:6c:f1:e6:a3:a7:
9d:29:55:e9:84:42:6d:92:9b:d1:f7:9e:3a:aa:53:
71:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2D:A5:90:BA:B0:B2:28:57:43:5B:CD:42:DF:26:3B:94:70:9B:E3
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/0E91985A47C211EE9B3BC0144AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.105.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e6:74:cf:d0:cc:14:cb:bf:ba:2a:1a:68:b9:63:3f:e7:04:
22:7e:dd:64:74:39:50:f7:48:06:9d:35:5c:72:2a:da:a7:c1:
42:26:82:77:19:ab:4e:ed:d4:dc:d2:b5:5a:43:f9:2e:fd:85:
a4:11:0a:40:73:0d:d9:23:d6:bb:c5:90:54:5a:6b:b7:0d:48:
31:8c:e8:8e:30:16:7c:4b:eb:fa:b9:43:20:e5:70:35:cc:9a:
c8:fc:40:87:20:71:c6:5e:b8:b5:37:28:fe:77:ab:4e:29:56:
42:db:84:db:5c:0c:ee:37:86:ed:c0:70:2d:1d:fa:b9:e0:e4:
73:d1:c6:8c:0d:53:14:a6:bb:5a:a3:f4:36:98:b1:3d:f9:4c:
ba:39:84:8b:e0:eb:ae:3e:6d:9e:e0:e7:c7:cf:67:4e:ab:2c:
c1:5f:4d:6b:d3:27:f9:6e:e9:1b:aa:44:3b:24:88:2c:15:70:
97:d0:4e:2c:43:37:37:b1:b6:22:05:80:22:b2:a0:09:82:8b:
2f:9f:31:8d:8e:f4:53:40:a8:97:89:8c:65:7a:b9:6c:67:94:
23:f0:c7:d4:69:23:64:23:0a:e8:66:4b:a5:04:c7:f3:92:9b:
a2:99:8e:30:52:6f:fd:b8:7f:6d:51:d1:d9:a7:b8:ab:7a:e3:
e8:46:8c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org