Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1112B428930511EDB3243DE4F1222468.roa
File: 1112B428930511EDB3243DE4F1222468.roa (raw, json)
Hash identifier: j9JjoqTZ3ay2ZxHBZHIYNm23P2KXnvmm+r9SGyL4sKk=
Subject key identifier: EA:5C:93:43:83:1C:E8:B4:FE:8B:6A:26:D7:BE:8E:58:7E:BB:1A:9F
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0616
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1112B428930511EDB3243DE4F1222468.roa
Signing time: Fri 13 Jan 2023 05:42:29 +0000
ROA not before: Fri 13 Jan 2023 05:42:23 +0000
ROA not after: Wed 12 Jan 2033 05:42:23 +0000
asID: 205320
IP address blocks: 192.142.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Feb 2023 06:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1558 (0x616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jan 13 05:42:23 2023 GMT
Not After : Jan 12 05:42:23 2033 GMT
Subject: CN=63c0ef45-9c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:34:0b:1d:8b:cb:61:b2:c9:f6:52:af:02:
84:d6:5e:90:8d:37:87:9e:a3:0c:75:84:77:d5:9c:
58:13:01:10:29:78:8e:e9:06:83:89:ed:16:4a:a7:
38:7d:2b:63:4c:1d:f4:55:2a:f3:bb:13:36:d1:7d:
24:7b:cc:2a:4e:4d:11:86:cf:9d:5a:30:5d:5b:b1:
0f:d1:3e:43:1f:df:f5:a2:17:60:59:a5:f7:1b:91:
5a:9d:20:18:d5:ca:b5:36:05:28:ef:c4:06:0b:ec:
32:ed:52:ff:f5:4b:e7:d7:b7:5a:e8:d4:b5:e2:04:
49:17:01:03:57:35:c4:d1:4f:2d:26:f4:87:06:42:
0f:95:58:b9:d5:89:1e:9c:dd:7f:f7:86:73:14:2c:
a6:b0:b1:ea:d0:2e:c4:08:b0:2e:67:eb:41:7f:9f:
1e:5f:69:be:d6:8d:ba:4b:a6:b6:c5:8d:9f:48:ab:
1f:79:a3:26:7d:b0:2f:40:0d:f1:33:d0:25:fc:fb:
9b:78:58:52:76:f5:76:28:01:0a:26:8f:7d:d0:a3:
eb:b4:15:60:ac:85:b2:f0:18:50:25:67:07:43:80:
4c:00:90:ca:0d:78:c5:3c:6f:2c:57:9b:0d:42:af:
80:93:2d:00:ae:6b:50:c0:d8:22:13:b5:b0:99:6f:
d2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5C:93:43:83:1C:E8:B4:FE:8B:6A:26:D7:BE:8E:58:7E:BB:1A:9F
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1112B428930511EDB3243DE4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.28.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:a0:e6:de:2d:85:7d:7b:55:3c:f5:73:30:7c:b0:9c:a2:c7:
43:87:99:34:b6:e3:bd:d0:5c:04:c3:57:49:c7:25:4a:50:34:
b4:0b:06:9d:77:ce:e7:44:48:90:e1:75:27:a1:1c:f3:8c:5c:
37:91:4e:bc:e2:79:78:12:34:e8:87:0a:97:82:b6:da:4f:3b:
ef:e5:3f:89:76:30:ac:52:5e:2c:8f:f0:f5:a7:72:61:5e:b9:
5b:28:66:08:4c:17:48:0c:c0:be:47:fe:83:41:2c:36:2c:12:
49:8f:6d:01:3a:20:1b:f6:25:d3:51:f8:86:e0:b5:1a:3e:3a:
0c:2b:de:dd:1b:ed:3a:06:c2:19:1d:4a:12:88:21:7a:34:aa:
db:a9:3b:24:a3:28:f8:f2:4c:1d:1e:39:32:ba:3d:d0:a5:cf:
cd:4a:35:39:f8:52:c2:17:54:79:9a:5a:21:3e:c7:8a:78:bc:
40:34:c9:a6:1b:1a:0e:b9:a7:6c:fd:f9:d0:f4:23:ec:d7:e1:
d4:dd:a0:1b:7b:44:bc:bc:cf:6b:79:00:64:90:61:fe:71:cf:
06:16:75:65:3f:e5:63:14:77:2c:5c:ba:9a:c0:6c:65:5f:99:
6c:04:20:bf:59:dd:75:f7:4c:83:85:4e:76:f0:fc:23:1a:15:
e3:5a:75:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org