Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1486E7A2EFFB11ED88FD803B4AD9E6FC.roa
File: 1486E7A2EFFB11ED88FD803B4AD9E6FC.roa (raw, json)
Hash identifier: WB8LsVvRxv6LWtnUm1jADdIDLm0Yvp+eWxfpF1LzfHk=
Subject key identifier: D1:5D:D4:FD:A8:ED:F0:D7:89:4D:83:58:4D:57:5C:DF:57:8A:F4:F3
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 06D8
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1486E7A2EFFB11ED88FD803B4AD9E6FC.roa
Signing time: Thu 11 May 2023 12:55:18 +0000
ROA not before: Thu 11 May 2023 12:55:14 +0000
ROA not after: Wed 11 May 2033 12:55:14 +0000
asID: 64286
IP address blocks: 192.142.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 06:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1752 (0x6d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 11 12:55:14 2023 GMT
Not After : May 11 12:55:14 2033 GMT
Subject: CN=645ce5b6-1b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:61:74:e3:92:1d:8e:84:52:12:c6:c1:17:18:
36:b5:58:09:8a:9f:0a:02:13:5e:e8:c3:45:5b:22:
dc:52:5e:a6:80:61:a7:19:84:bb:2a:05:f9:7c:9f:
65:01:20:53:ec:26:4f:e6:b7:89:5c:7d:dc:c4:87:
43:c9:62:1c:f4:db:24:b8:d5:b8:6b:67:ed:88:d8:
84:bc:4f:4c:f7:82:b7:d4:2e:2a:61:3d:3f:4a:dd:
36:06:1a:17:80:5f:fd:3b:ae:20:b8:7e:cf:c9:83:
0d:94:57:83:a3:a5:33:d6:cf:ae:54:b7:b7:4d:48:
95:40:72:cd:7f:55:a8:d2:b3:b3:be:30:a8:40:34:
20:5f:89:8e:a5:26:c4:b2:e1:b4:8e:48:74:51:78:
ec:36:06:3a:2a:40:eb:d8:d3:b9:1e:71:7a:98:42:
3b:15:b2:c2:63:ac:33:45:0d:57:4b:80:2b:57:97:
34:26:6b:e6:4d:36:d5:c2:70:6d:25:b7:77:e0:15:
5e:6f:6a:36:3a:32:27:91:a1:50:26:d4:fc:0c:b8:
56:10:a2:0a:73:3e:4b:47:48:d7:72:cc:be:a5:2e:
ec:a4:54:b4:09:47:c4:0f:c2:ad:ae:93:bf:a3:24:
36:b1:7b:e5:4d:a6:00:3b:ad:fa:13:be:62:ba:07:
71:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5D:D4:FD:A8:ED:F0:D7:89:4D:83:58:4D:57:5C:DF:57:8A:F4:F3
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1486E7A2EFFB11ED88FD803B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.192.0/22
Signature Algorithm: sha256WithRSAEncryption
50:25:d0:a0:45:63:ed:8e:67:f4:20:7a:49:67:c7:27:5f:1d:
d7:c0:44:85:6a:f7:02:2b:87:56:50:83:96:34:33:3c:b6:ca:
7a:14:e3:2a:00:a1:d6:ca:e3:42:c8:54:d1:1c:60:db:a3:4a:
4d:0d:2f:0c:f8:b3:b5:ed:fa:c7:ef:79:02:06:0b:f6:2e:64:
8e:fb:8a:9a:a2:52:76:11:1b:02:61:6e:75:04:cf:e9:44:3d:
9f:23:2c:85:8b:c2:54:94:0c:3c:d7:2e:62:2c:2c:cc:f9:0c:
52:10:77:25:73:b7:51:7b:63:b4:43:3f:66:7b:1d:8b:3b:45:
7c:3a:06:e5:96:d3:f1:64:74:56:06:74:3c:ae:a4:82:14:e8:
01:71:16:0e:f9:45:b4:05:58:4c:af:95:cc:ba:2f:f2:08:10:
25:a1:67:74:2d:d8:24:38:88:02:de:0d:c7:86:ef:6f:08:71:
34:4b:cd:96:55:04:5d:ac:08:63:77:4e:ad:f3:f2:d1:14:4d:
8e:13:3f:a2:90:b9:4e:b9:43:f9:bb:4a:20:40:8c:f0:cb:8f:
d9:f5:e9:1f:8d:e0:e4:e5:0e:4c:95:34:7c:d3:c3:c7:bf:db:
85:69:9d:0f:5b:6d:c5:2f:e2:4a:fa:97:86:b2:b0:b9:63:44:
af:16:de:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org