Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/14D21A50187F11EDAB125887F1222468.roa
File: 14D21A50187F11EDAB125887F1222468.roa (raw, json)
Hash identifier: lu3Xrv9kUsGdNlQJOtsORiCDIbrIrmrzl4TAZWbwObc=
Subject key identifier: 47:3C:AD:85:6A:EC:50:D9:12:C1:BC:25:7B:BE:6F:5E:FB:FF:CC:29
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0534
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/14D21A50187F11EDAB125887F1222468.roa
Signing time: Wed 10 Aug 2022 07:36:01 +0000
ROA not before: Wed 10 Aug 2022 07:35:57 +0000
ROA not after: Wed 11 Aug 2032 07:35:57 +0000
asID: 7018
IP address blocks: 192.142.24.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Sep 2022 06:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1332 (0x534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 10 07:35:57 2022 GMT
Not After : Aug 11 07:35:57 2032 GMT
Subject: CN=62f35fe1-d8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d8:d5:fb:9c:ea:1a:07:8a:41:7a:e3:83:f1:
6c:c7:82:18:de:ef:63:d9:d9:24:24:e7:3c:ed:7c:
92:ff:45:b7:2b:5d:01:f8:a4:7a:72:94:04:43:47:
e8:df:fe:ec:63:ce:2d:45:88:40:7d:0e:9a:30:20:
4b:ae:86:2a:a4:b5:23:50:c3:dc:57:bf:2e:2f:95:
8e:b7:d2:28:ae:6d:64:b8:d9:ef:1b:58:b0:8a:cf:
ab:f2:b2:af:10:ea:ce:ec:90:2a:55:9e:ca:0c:e4:
8a:75:dd:44:1b:d3:cf:85:11:5f:14:23:b9:af:25:
cd:24:17:b2:6e:62:86:00:66:e1:c7:57:c9:b2:a5:
10:a5:12:52:e5:db:8b:68:0d:9b:ac:9b:b9:cc:2a:
41:c0:bd:dc:5c:f3:74:21:7e:2b:76:01:fb:82:9a:
17:2d:75:67:f4:0a:11:8e:f4:bf:10:6d:61:3c:95:
dd:be:c7:6f:01:7d:0f:66:1b:2a:2c:85:f0:5d:99:
26:f7:bc:0d:5d:af:e5:4a:91:55:54:88:28:12:e4:
52:d0:87:d5:ce:f9:33:a6:7a:16:2a:c4:18:b6:c0:
e9:5a:10:c7:29:4f:6c:f8:d8:c3:18:8c:1e:d7:5f:
a0:15:b5:86:54:04:1b:3b:ca:a4:fa:62:f0:04:f5:
60:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3C:AD:85:6A:EC:50:D9:12:C1:BC:25:7B:BE:6F:5E:FB:FF:CC:29
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/14D21A50187F11EDAB125887F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.24.0/21
Signature Algorithm: sha256WithRSAEncryption
95:24:99:7c:bc:5e:3f:a7:9b:08:09:27:d8:3b:84:d8:3f:ca:
10:fd:00:64:dd:a1:c8:48:27:98:02:8b:6a:4f:53:24:bb:2e:
65:d0:d5:20:05:7a:76:eb:be:cd:ca:ca:12:b3:cf:12:25:46:
e8:ff:30:82:7e:52:7e:55:0a:02:91:5f:d8:ab:c4:a1:99:8d:
23:95:eb:d2:19:2d:66:bb:5c:4b:28:d6:68:14:f6:69:f2:c1:
fa:10:c9:b0:06:19:2e:b7:aa:1b:1f:8f:de:04:7e:34:f8:04:
c8:f2:a9:23:dd:d7:8c:aa:32:6e:c7:a9:6b:5c:37:16:b2:ad:
5e:d4:a3:e0:7c:26:bc:f9:47:fa:2b:03:76:1c:30:c4:e2:ce:
6f:5c:cf:c8:f8:9c:04:6f:c6:a9:d4:da:c3:4b:6a:b7:d3:0d:
44:c5:b1:ad:06:7d:54:8c:16:f9:4e:c1:1c:7f:db:3d:a3:58:
7d:60:8c:0b:fc:49:03:eb:7a:74:cd:61:46:9a:75:60:77:fb:
6e:b2:13:5b:82:ed:84:91:51:09:f5:3d:60:b4:3e:58:e0:15:
6e:8a:45:e4:4a:cd:2a:04:b0:cb:6a:7b:a0:86:de:c6:d5:95:
9a:e7:b7:e3:71:26:91:91:ce:3a:1d:15:86:3a:77:9c:5e:2c:
f3:c2:2a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org