Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/22D71292A61111EEBE24E220D25BE465.roa
File: 22D71292A61111EEBE24E220D25BE465.roa (raw, json)
Hash identifier: WQHqNS5bqIIz2Kid2n+5ioc+2Cfw/Cyukq13sVY4XSA=
Subject key identifier: AF:87:10:BA:90:A3:1B:0C:34:2A:7C:78:FC:F1:B2:20:9B:23:ED:8C
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 086C
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/22D71292A61111EEBE24E220D25BE465.roa
Signing time: Fri 29 Dec 2023 06:11:42 +0000
ROA not before: Fri 29 Dec 2023 06:11:39 +0000
ROA not after: Wed 28 Dec 2033 06:11:39 +0000
asID: 396998
IP address blocks: 192.142.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:42:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2156 (0x86c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Dec 29 06:11:39 2023 GMT
Not After : Dec 28 06:11:39 2033 GMT
Subject: CN=658e631e-4757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:73:0e:5c:5a:3e:04:1d:6a:9b:53:c4:89:73:
58:79:fb:d2:d9:8a:79:61:98:64:82:f2:d3:0e:89:
12:ae:e5:57:2a:e7:6c:bb:a1:10:28:37:21:21:95:
4c:6d:9a:5d:78:8f:8f:aa:36:0c:a4:5d:66:70:65:
29:7e:ab:e7:04:92:19:e5:79:11:c0:8d:a0:b9:b4:
8a:a5:64:d5:90:0e:ca:a9:e9:ab:16:69:5e:44:65:
69:41:f1:6b:8d:82:71:4d:15:e0:94:f5:15:a9:d9:
42:60:ab:bc:b8:8f:1a:b7:63:be:f9:40:1e:3b:fc:
ea:57:7c:2b:43:64:1c:ba:4e:3a:26:6d:41:fe:c4:
d1:d1:e5:83:85:6e:c9:ac:77:d5:7b:0a:71:02:61:
8f:a7:71:8f:e0:44:8d:93:2b:8d:cb:07:79:2a:ed:
79:79:ff:b9:4d:f2:1d:9f:ac:fe:f0:91:d3:e3:df:
41:0d:9a:61:2b:70:6d:79:db:49:7f:c9:d0:b9:ba:
00:3a:53:a5:1d:9d:a5:b3:0a:77:27:db:fc:d8:e3:
7d:ed:2b:25:3d:9c:6a:54:f9:1b:b6:37:a0:76:23:
c4:27:f1:65:bb:f3:b9:5c:3c:cf:e2:a1:41:26:ee:
86:60:83:7b:76:4e:b7:99:c7:80:b8:7c:70:93:f1:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:87:10:BA:90:A3:1B:0C:34:2A:7C:78:FC:F1:B2:20:9B:23:ED:8C
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/22D71292A61111EEBE24E220D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.28.0/24
Signature Algorithm: sha256WithRSAEncryption
57:09:9e:8e:e1:8a:49:76:f2:2e:61:6a:79:d8:95:b5:7b:b6:
5d:66:4e:70:24:66:34:3f:75:92:f7:60:49:22:27:0d:98:3a:
86:9f:19:a3:df:37:a5:a6:d5:4a:f9:9c:a3:26:c8:62:ca:0d:
8e:53:d7:12:ca:9e:27:6b:8a:be:f1:7c:4d:a4:26:a0:af:bb:
f0:41:e7:20:fe:37:1d:5e:0c:4f:b9:b9:d8:99:04:37:36:85:
ef:13:b8:63:9a:4a:89:72:4f:c4:ae:db:91:91:a1:39:9f:b6:
9d:11:bf:f5:61:68:1c:5e:e5:39:98:86:ab:46:60:df:f3:a2:
2b:e9:6c:71:3a:a1:0b:6c:e9:de:af:f4:58:76:f7:4c:70:24:
a6:db:63:96:69:e7:37:9b:ba:1b:46:3d:f1:3e:9b:71:ee:6d:
82:4f:55:41:f1:79:76:b5:e5:b6:a1:c3:69:4b:e2:22:32:2a:
42:54:82:95:1d:1f:83:51:ea:e2:7d:32:74:dc:d2:c4:c9:13:
99:24:d8:1a:a7:ae:49:9f:20:6e:45:dd:52:63:7e:db:50:cf:
b6:00:5c:30:1c:ea:5f:da:6e:36:bc:61:95:0a:4e:b1:23:9d:
8f:46:bc:13:82:66:05:70:71:3e:2d:d9:cf:d8:dd:c6:d2:a0:
fc:3c:68:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 12:52:16 2024 by rpki-client on console-fra.rpki-client.org