Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1E6375ACAB6211EDA861D6F8F1222468.roa
File: 1E6375ACAB6211EDA861D6F8F1222468.roa (raw, json)
Hash identifier: UZpTtIPerec4+t08x8//pB9CGnGWQb3xaqdx2MFxn6U=
Subject key identifier: 90:A8:C5:49:FE:9A:DB:67:F4:65:8A:F1:0E:47:22:AC:59:0C:F0:5B
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0646
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1E6375ACAB6211EDA861D6F8F1222468.roa
Signing time: Mon 13 Feb 2023 05:49:02 +0000
ROA not before: Mon 13 Feb 2023 05:48:57 +0000
ROA not after: Wed 09 Feb 2033 05:48:57 +0000
asID: 10753
IP address blocks: 192.142.140.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 06:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1606 (0x646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Feb 13 05:48:57 2023 GMT
Not After : Feb 9 05:48:57 2033 GMT
Subject: CN=63e9cf4e-dcc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:f4:d5:b6:bb:d3:59:b2:ba:db:62:6b:87:
42:b6:a9:dd:6a:8b:40:77:d3:02:ea:9d:4a:45:83:
fd:ab:51:b2:d7:ad:96:39:15:fa:8f:82:42:3e:cc:
7d:80:03:b2:ef:b9:7b:2f:46:7f:f2:6f:be:ca:7a:
93:35:21:88:d3:f8:38:d1:87:a4:1d:b3:38:47:01:
5b:52:ba:d3:dc:4f:a1:eb:da:65:bd:19:bd:8d:cc:
88:b3:59:3b:e7:c2:0b:37:2b:d7:23:49:0b:b3:f9:
e0:bd:5a:b8:84:37:4c:a8:84:c1:64:df:8c:bb:11:
dd:34:7b:9d:4c:c0:d7:8d:7e:2a:a0:fd:69:92:86:
5d:05:93:a7:00:46:67:92:7b:31:b1:00:db:2b:2d:
5a:a7:4d:af:69:4d:00:4f:45:cf:07:f7:be:a1:6d:
a7:72:51:f3:2c:60:9b:7c:23:f6:3f:96:ac:94:ef:
6c:95:61:41:75:82:67:fb:35:a8:c2:4d:c0:d0:b4:
e9:90:35:cb:af:21:f6:72:53:91:9d:7f:78:f6:6f:
fe:c8:11:db:0a:10:99:ae:0a:97:5a:83:30:b6:23:
22:63:65:a6:ce:ad:b2:54:b8:9e:8f:eb:06:5c:70:
9c:a2:72:3c:72:a8:76:f7:69:ea:46:35:f9:0e:48:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A8:C5:49:FE:9A:DB:67:F4:65:8A:F1:0E:47:22:AC:59:0C:F0:5B
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1E6375ACAB6211EDA861D6F8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.140.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:5e:04:21:4e:69:fc:06:8d:76:59:1d:4c:92:65:13:75:06:
5c:72:51:8a:d1:47:9a:af:8b:52:38:c1:e7:e4:7e:ca:f4:4a:
c4:02:ef:a3:b9:68:02:83:f0:c9:36:43:19:48:28:a6:90:3f:
ef:d4:28:6e:0d:47:53:81:d8:74:1a:b1:e6:c9:ca:03:8f:4a:
a2:93:a9:b6:0d:e5:5f:86:26:51:3a:ca:91:7e:4f:bc:34:df:
e3:82:3b:0f:ec:23:af:ce:05:44:92:72:6a:be:a8:7e:52:2d:
17:7f:2d:59:76:f4:b9:45:eb:46:c5:23:75:cc:87:47:51:0a:
2b:1c:ef:bc:59:27:1e:1f:4e:69:13:bd:80:00:8d:6c:98:97:
3f:33:4e:d8:01:f8:aa:03:81:00:7a:2d:4e:90:33:c4:20:c2:
cd:e3:bc:35:c9:db:a1:49:87:7f:bf:91:3d:b8:49:85:e9:78:
f6:71:c1:66:9d:4a:7d:b0:8a:9c:74:8f:3c:73:5a:9f:4f:e5:
3f:6d:6e:88:a1:86:f3:f4:84:fb:ef:4f:83:b8:7f:2d:ad:01:
7a:9a:b1:2f:1e:e6:73:b9:06:19:af:97:db:3b:53:b5:29:b3:
a3:f2:0d:33:75:55:8e:0a:7a:92:23:ab:d1:21:56:e0:b5:1b:
d4:d9:01:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org