Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1D14469EBF1D11ED8A580193F1222468.roa
File: 1D14469EBF1D11ED8A580193F1222468.roa (raw, json)
Hash identifier: PYJZFtvqW64k1sekIjNx+8BndJ2BMKs3MLWJ4HinSf0=
Subject key identifier: 42:A0:1F:2B:C4:C5:BC:05:10:7E:AE:FD:69:10:55:47:0F:55:A9:9A
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0676
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1D14469EBF1D11ED8A580193F1222468.roa
Signing time: Fri 10 Mar 2023 08:25:28 +0000
ROA not before: Fri 10 Mar 2023 08:25:25 +0000
ROA not after: Wed 09 Mar 2033 08:25:25 +0000
asID: 208068
IP address blocks: 192.142.232.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 15:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1654 (0x676)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Mar 10 08:25:25 2023 GMT
Not After : Mar 9 08:25:25 2033 GMT
Subject: CN=640ae978-f0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:9b:a0:98:8b:0c:be:23:08:76:92:74:31:
9f:f3:23:c7:fa:49:7a:34:62:80:78:bb:0b:5e:5e:
9c:f2:aa:5f:79:a6:21:ee:06:cd:d2:a4:7e:3b:0c:
f0:3f:63:36:7f:a0:ff:87:a8:c5:7e:6e:96:4e:48:
86:e7:c6:e8:15:dd:68:42:e9:c9:e7:c1:1b:c1:ed:
5a:93:4a:6d:ec:70:7e:f4:3f:60:a6:cf:cd:e2:b9:
29:01:1e:a9:87:90:2e:5e:47:b9:33:c6:71:a4:c2:
11:9f:9d:1b:ff:17:d6:28:92:84:30:0a:b8:3f:f8:
1b:f1:a3:61:9f:23:c8:72:c3:6a:41:1d:26:cb:9f:
28:b3:df:2f:9c:5b:1f:bc:79:98:a0:f6:47:ce:1e:
f7:2c:99:c9:d9:7c:1f:bc:b5:ef:c7:a9:64:f2:1c:
06:db:67:0b:bb:a8:e3:d8:5a:60:fe:5c:86:a7:51:
e8:df:df:00:52:ca:c6:09:c2:c4:0b:d2:48:c4:4d:
45:1f:1b:7a:39:da:78:ad:bd:63:8c:8e:7f:a9:82:
ac:69:0a:69:48:34:be:21:b1:4a:e7:7e:45:30:3b:
8c:c9:ae:72:0d:a6:07:6d:93:c5:21:47:5c:19:95:
b8:ac:ae:59:8d:98:f6:56:b2:ca:d7:39:0f:e2:63:
bc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A0:1F:2B:C4:C5:BC:05:10:7E:AE:FD:69:10:55:47:0F:55:A9:9A
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1D14469EBF1D11ED8A580193F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.232.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:a9:e4:48:8c:c7:0a:6b:34:44:64:5c:e4:d7:eb:aa:73:31:
6d:0a:26:99:4f:c3:22:25:29:e5:f3:83:4f:5d:44:22:8c:14:
0d:be:b0:67:9b:62:be:e0:1b:10:16:cb:53:13:3e:f3:c1:60:
8c:d8:8b:b5:6b:1e:00:d9:c5:30:58:b0:9c:c9:e6:63:de:93:
c3:5e:06:fc:3e:71:fb:3c:78:a9:a1:62:23:e3:0e:ca:e1:19:
2d:0b:08:e3:15:5b:13:d9:6f:1e:fb:b0:06:fc:38:6f:25:a2:
0d:45:88:ba:ba:d1:b2:0a:a3:6b:58:7b:c8:75:61:12:ca:aa:
82:a1:13:f3:22:34:b4:43:48:cd:19:cd:71:53:ee:b4:b1:1f:
cd:65:05:97:ee:a7:42:f6:50:3b:d6:de:85:79:a6:af:74:e7:
e2:9f:4f:98:ee:6c:c2:50:90:42:9d:c2:83:5d:d6:3b:28:f8:
f6:43:77:80:c7:6e:5b:19:4e:50:f0:96:1b:4b:b4:aa:6e:ce:
b3:7f:a4:b9:d2:58:5b:67:50:e4:73:36:31:15:7d:03:d1:3e:
a4:a0:3e:ef:ee:e8:99:5f:ca:55:7d:20:d1:97:00:64:45:8a:
95:f4:dd:e1:b3:1d:87:b9:2d:b9:b1:3d:d1:97:44:7e:68:5a:
f9:f7:c4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org