Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1D5CB48C1C5D11EDB73284CDF1222468.roa
File: 1D5CB48C1C5D11EDB73284CDF1222468.roa (raw, json)
Hash identifier: ztLbrf5GZkC+YoPtBZuFd4RyBYcJQ0Pzd8doE5GMYks=
Subject key identifier: 2E:C1:13:E1:7E:64:C9:94:75:F4:A6:6F:E3:8D:9F:CB:83:65:57:04
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0547
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1D5CB48C1C5D11EDB73284CDF1222468.roa
Signing time: Mon 15 Aug 2022 05:42:57 +0000
ROA not before: Mon 15 Aug 2022 05:42:53 +0000
ROA not after: Wed 04 Aug 2032 05:42:53 +0000
asID: 19437
IP address blocks: 192.142.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Nov 2022 16:10:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1351 (0x547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 15 05:42:53 2022 GMT
Not After : Aug 4 05:42:53 2032 GMT
Subject: CN=62f9dce1-c48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8b:2d:c4:4e:83:6e:92:6b:cf:5b:db:cf:96:
3a:54:ba:27:b9:84:34:4e:cd:59:98:25:64:00:86:
41:60:51:ed:7e:d0:23:0b:50:44:bd:39:3c:63:61:
52:41:55:b4:0c:ba:4a:bb:08:4b:41:36:6a:5f:19:
4e:9f:8d:88:3f:b0:d1:1f:75:b0:c5:95:07:87:73:
ed:02:e2:7d:25:59:d0:fa:c9:75:07:85:68:56:8c:
83:ef:f7:ee:74:13:64:2b:fe:19:56:ec:60:f9:e6:
af:bc:bb:ca:e3:36:51:1a:95:90:d0:ee:ae:b0:fa:
8d:2a:c5:08:28:9d:8b:d4:c1:5b:a8:3a:0f:d7:b9:
5a:52:c6:9f:37:be:25:b3:c5:da:2e:e9:7f:85:ab:
9c:fa:09:e7:f3:f5:7f:1d:f2:c1:63:fd:b3:7f:ab:
e0:97:e7:93:62:0a:31:1a:58:42:9f:09:48:74:e8:
a4:84:1e:6b:31:52:99:bb:a8:3a:57:b7:75:fb:f8:
ab:b8:aa:db:0f:52:b8:fb:fc:9c:1d:e2:47:7c:5f:
05:e6:6d:17:49:b0:d7:60:32:bb:02:c5:c6:14:9f:
b4:13:16:b5:f9:91:b1:92:d2:5e:b9:af:7f:c7:60:
d8:7a:c8:b8:63:08:4b:f0:8e:a1:f8:88:00:9f:a7:
5f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C1:13:E1:7E:64:C9:94:75:F4:A6:6F:E3:8D:9F:CB:83:65:57:04
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1D5CB48C1C5D11EDB73284CDF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.106.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:4d:28:ae:c2:65:60:5a:23:09:5d:e2:d8:18:f9:da:0f:44:
47:4a:17:04:b2:f5:df:14:27:d6:37:53:63:3c:2d:6e:c1:f1:
c9:bf:77:62:ed:b7:09:78:83:f8:3c:4f:bd:92:53:a8:4c:1a:
56:12:42:92:14:9c:7c:25:4e:af:ee:0e:d5:fd:83:34:e6:4f:
3a:f3:01:4f:9d:b5:57:ca:92:e7:d6:28:ff:92:db:42:14:89:
37:a9:70:ca:fd:cf:3f:5d:3a:49:3f:a8:4f:46:28:63:7f:7c:
52:23:f3:67:f3:54:5a:d4:2e:c7:39:70:04:f1:99:90:4b:f3:
0d:cc:c0:ac:50:b5:ca:65:f8:a8:e7:2f:1a:1a:06:c8:3a:95:
fc:5c:f7:04:c5:b1:bb:8e:69:7a:cd:0a:8f:4b:10:8f:1e:fe:
53:f9:c8:6b:ca:27:ff:58:ff:16:5f:83:b4:73:ad:01:74:b0:
30:7c:13:13:12:84:d7:53:8e:f1:c1:e8:e3:e1:1c:62:27:1f:
4a:dd:58:23:0b:29:9e:48:af:94:1c:87:47:30:48:af:9d:02:
89:9d:73:e4:ca:e4:67:42:a6:44:03:1f:29:b7:82:35:e9:37:
2b:7b:54:82:b5:3a:83:7e:9e:f7:8c:47:0e:05:2d:b9:b2:4f:
f2:ef:b7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org