Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/259024329B1E11EDA8636DC1F1222468.roa
File: 259024329B1E11EDA8636DC1F1222468.roa (raw, json)
Hash identifier: jO4XaRoZ5KlDjdd74yxWhFWTYwBJPN9KOY6AtgY9PKA=
Subject key identifier: 85:69:95:AD:F3:6C:21:02:DA:A9:70:CF:28:D0:65:FA:7A:E4:88:17
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0629
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/259024329B1E11EDA8636DC1F1222468.roa
Signing time: Mon 23 Jan 2023 13:02:10 +0000
ROA not before: Mon 23 Jan 2023 13:02:04 +0000
ROA not after: Tue 11 Jan 2033 13:02:04 +0000
asID: 134143
IP address blocks: 192.142.102.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Sep 2023 05:44:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1577 (0x629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jan 23 13:02:04 2023 GMT
Not After : Jan 11 13:02:04 2033 GMT
Subject: CN=63ce8552-fc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5c:5d:fb:25:ec:93:76:3a:fb:81:f9:b0:c3:
84:9a:ae:1d:6b:55:47:1c:b5:44:b3:aa:4a:f0:3f:
1e:01:4b:51:01:fa:b1:f9:c6:ed:ba:f7:47:07:7b:
69:06:8b:8c:9a:36:2f:44:82:ca:47:f4:cb:57:fb:
d1:f6:55:4c:40:75:fc:87:2f:8b:c1:8f:25:ed:15:
90:51:21:83:e9:8a:9f:a5:a5:1d:c4:f1:c9:35:30:
74:fb:ef:3f:c1:51:98:7b:e6:6b:cf:32:8e:eb:5e:
11:c0:d0:a2:27:e8:0c:bf:17:a3:33:da:50:2f:20:
de:e9:60:ba:78:4b:90:af:53:d7:78:56:66:67:6d:
8f:dd:a8:53:b0:8e:b3:ab:a7:96:eb:0c:a6:49:fe:
ca:16:30:fe:ea:74:c4:12:c7:01:9f:b7:37:47:a7:
24:a2:ef:9f:f1:03:da:b1:e8:d1:f4:21:7d:de:c7:
20:66:b1:d7:66:a3:8d:dd:d2:e1:54:b5:5b:cf:0f:
52:57:2d:91:b6:30:7e:23:e9:19:cb:26:9d:11:c3:
86:98:39:3b:e0:f1:14:98:e6:2c:90:e9:c5:47:ec:
7b:7b:98:b4:be:81:82:61:7d:5c:26:44:6b:fd:84:
5f:d2:ef:af:27:ad:b9:c0:15:49:4d:19:07:81:2c:
b0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:69:95:AD:F3:6C:21:02:DA:A9:70:CF:28:D0:65:FA:7A:E4:88:17
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/259024329B1E11EDA8636DC1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.102.0/23
Signature Algorithm: sha256WithRSAEncryption
59:d8:ce:eb:70:26:01:cc:eb:71:92:2c:bb:b3:a4:89:c8:c7:
50:cd:0c:8a:37:6d:ce:cb:82:b5:b1:cb:4f:6a:d4:ce:11:51:
28:44:ad:30:a9:9f:d1:b1:0b:2c:65:72:40:2c:4b:ba:0d:60:
ec:52:ce:ea:a7:19:c9:49:c2:ca:6c:45:d2:39:19:45:a9:9a:
a4:45:99:89:5a:14:99:0b:9e:1c:2d:56:2f:89:d2:a5:ee:2e:
b7:37:63:3d:57:cd:ce:da:84:f7:12:14:74:cf:8e:ab:1b:34:
fc:85:70:cc:8a:6d:0e:4f:45:b3:ec:f8:92:34:08:db:12:07:
e8:1d:b2:5e:90:04:f3:12:53:59:eb:80:23:4b:f8:95:8b:28:
07:10:51:d6:f2:29:fe:9a:ac:93:78:37:44:6e:a6:0b:6f:5b:
84:1c:bf:6f:ab:5a:2d:1d:8f:7c:00:46:ac:91:b7:5d:73:74:
a1:1c:b6:53:14:c8:21:0e:33:e6:e8:1b:4c:95:c5:fc:9f:a9:
26:62:91:d5:e4:81:b4:a6:29:2b:35:b1:15:ea:bd:23:07:8d:
ff:55:9c:4c:50:ec:da:6a:76:6d:7a:13:ad:c7:b3:e2:44:9a:
7c:1a:af:0e:54:44:50:e0:19:2d:fc:24:e1:5c:11:d0:9f:73:
09:be:3f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org