Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/242229247F8911EEA3D1D8164AD9E6FC.roa
File: 242229247F8911EEA3D1D8164AD9E6FC.roa (raw, json)
Hash identifier: sYAMyJXkrIMUfth3ICGinR0Nm9tLrL93j8o5qa82ufo=
Subject key identifier: 48:77:7E:8C:10:20:57:EF:1E:C2:3D:EB:B1:6A:F2:E4:0F:BE:64:92
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0821
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/242229247F8911EEA3D1D8164AD9E6FC.roa
Signing time: Fri 10 Nov 2023 05:22:29 +0000
ROA not before: Fri 10 Nov 2023 05:22:23 +0000
ROA not after: Wed 09 Nov 2033 05:22:23 +0000
asID: 200113
IP address blocks: 192.142.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 05:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2081 (0x821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 10 05:22:23 2023 GMT
Not After : Nov 9 05:22:23 2033 GMT
Subject: CN=654dbe15-c2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d1:d2:04:03:e6:ce:20:8f:d3:75:16:14:80:
b1:fa:f3:2b:03:2b:a4:7b:95:20:1a:5f:76:f6:b8:
6e:64:16:bf:5a:dd:e2:4d:9d:9c:08:76:f2:a9:d9:
4c:76:88:60:ef:b6:a4:5a:37:81:3f:7c:43:e7:a6:
cb:ac:0d:94:ae:3b:f6:37:13:68:a5:f2:c1:c1:d9:
71:95:b1:6b:a0:cd:97:65:47:65:94:0f:ba:3a:78:
c1:72:40:da:3f:7c:3a:67:90:2c:c9:e5:3b:f9:33:
e1:f1:40:24:70:7f:75:7c:b1:96:7c:b1:70:2f:22:
a3:d0:b4:46:23:50:d6:b0:16:8e:b4:2f:93:b3:34:
18:13:e8:0a:bf:84:9b:5e:6b:ca:79:03:7a:76:1a:
03:68:a9:82:d7:c7:56:2d:11:05:c6:7a:d7:d4:d9:
f9:64:52:33:27:36:4b:4e:6d:54:ea:db:15:90:0a:
2c:38:cc:7f:bc:08:f1:cc:37:19:3d:49:42:81:4f:
c9:10:d7:52:17:7f:94:16:e8:00:24:61:6e:4d:62:
04:e0:39:84:bb:ef:cb:c1:e0:29:70:42:92:1a:02:
8a:db:25:10:be:e4:98:e4:e2:69:58:a1:09:d0:a8:
61:ef:5b:42:cc:ab:84:c7:75:e6:76:83:5e:d4:f4:
af:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:77:7E:8C:10:20:57:EF:1E:C2:3D:EB:B1:6A:F2:E4:0F:BE:64:92
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/242229247F8911EEA3D1D8164AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.137.0/24
Signature Algorithm: sha256WithRSAEncryption
82:0b:e3:31:9d:eb:85:4e:2c:0c:8b:e1:95:86:8c:5c:b6:25:
c0:0b:8f:1e:fd:5c:03:e9:e3:95:59:60:22:1d:75:1d:8a:c0:
41:f0:c2:d0:ec:d5:bb:fb:ee:a4:cb:7e:e6:e4:45:a6:f5:22:
41:88:88:1d:c9:ae:2a:f4:66:2a:64:95:3b:4c:7f:19:52:37:
d6:a6:29:26:fe:b1:4a:30:3f:eb:22:be:f2:83:54:5f:88:f3:
fe:69:0a:fc:5c:2c:6c:6d:73:01:bc:35:b8:7d:9e:34:4c:5d:
63:9a:18:92:c7:0b:cb:5f:89:1d:b3:a1:7e:be:ba:61:cb:f3:
4f:fa:b8:b9:b7:f9:32:eb:90:9c:c2:fe:a1:67:6d:19:6c:b8:
c7:4d:e9:68:c5:ce:1e:73:e3:5d:0f:9e:2e:fa:87:8e:b7:67:
2a:a9:4f:fe:f1:78:6a:d4:a2:22:78:fb:11:9a:52:89:91:fc:
0f:a9:83:0d:4e:a5:71:29:79:cb:09:f4:38:d0:20:ad:93:4e:
16:fa:34:b0:9a:71:db:67:0e:a7:36:4e:41:49:8d:7a:cf:8b:
f2:cf:44:72:3c:f3:0d:53:6b:8e:05:60:76:d3:5c:a7:71:22:
23:5f:e7:e8:3d:7e:41:09:85:a1:10:f0:0f:84:8d:14:08:9b:
68:b6:b5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org