Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2DC42C0C746811EDBDD8498CF1222468.roa
File: 2DC42C0C746811EDBDD8498CF1222468.roa (raw, json)
Hash identifier: rg2HnJrijF3gIa3BCoHLPO9XP+qW9EKdXZW2eH7QHWA=
Subject key identifier: 59:A9:0F:03:D2:7E:F0:F4:4C:ED:8D:0A:02:DE:B0:BE:5E:24:23:EA
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 05E9
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2DC42C0C746811EDBDD8498CF1222468.roa
Signing time: Mon 05 Dec 2022 06:43:51 +0000
ROA not before: Mon 05 Dec 2022 06:43:45 +0000
ROA not after: Wed 08 Dec 2032 06:43:45 +0000
asID: 3223
IP address blocks: 192.142.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jan 2023 12:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1513 (0x5e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Dec 5 06:43:45 2022 GMT
Not After : Dec 8 06:43:45 2032 GMT
Subject: CN=638d9327-c229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ad:3c:6e:f7:4a:6c:66:5b:03:47:bc:21:24:
e2:e0:63:25:8e:1e:e0:41:c8:4c:3b:68:26:7e:65:
43:4c:6e:7d:57:ae:ef:01:20:ac:eb:b4:39:14:92:
e4:a3:7f:6f:54:c3:9c:33:c9:f6:24:57:2a:98:92:
1d:4c:1a:e2:94:fb:79:14:e3:a9:bc:a3:38:80:7b:
98:af:e1:1c:ee:b4:de:dc:02:01:bf:d1:7d:bd:1f:
72:d8:a7:5f:eb:37:44:40:93:af:57:a3:2c:76:13:
64:03:39:f3:0d:70:87:0d:ea:f8:63:01:00:2c:f0:
4c:da:82:a2:ad:f7:b0:16:48:e8:03:79:1e:ba:5d:
a3:3c:17:60:45:a9:53:f0:47:ba:b3:8c:60:8a:20:
3a:7a:ce:03:09:55:87:99:e1:a8:31:ea:ee:39:86:
e9:ed:22:2a:c5:14:42:e7:8d:5d:97:e9:2f:34:5c:
66:f1:45:ad:14:b5:5d:cd:0f:1d:b8:58:54:fd:a5:
74:56:35:6d:00:9c:45:2d:e1:cb:25:18:f9:37:7a:
67:66:8f:86:4d:5c:d5:c1:01:5b:1c:3a:a3:c0:bc:
c3:aa:30:a8:92:58:6f:d8:0b:fe:fd:0f:48:59:c1:
89:3c:de:77:2f:e8:f4:08:93:d5:35:a6:61:60:06:
b0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A9:0F:03:D2:7E:F0:F4:4C:ED:8D:0A:02:DE:B0:BE:5E:24:23:EA
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2DC42C0C746811EDBDD8498CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.192.0/22
Signature Algorithm: sha256WithRSAEncryption
28:7f:34:b2:07:82:19:ad:07:07:f1:3e:80:3e:22:eb:06:66:
8e:a5:82:29:d9:bc:22:49:7b:fd:c0:3a:e4:18:32:e5:d7:d7:
41:9c:0c:aa:73:b1:5f:0e:88:e6:53:8b:db:81:e4:87:f4:bb:
38:20:ac:b8:0e:c7:25:8b:65:34:cf:1c:d3:da:2e:5b:65:8f:
e9:df:6a:05:a7:7d:5b:09:62:21:53:84:7b:42:3d:4d:5d:e3:
cb:ef:20:6d:ba:5a:aa:c0:96:29:c1:58:c0:8f:e9:b0:39:5a:
36:c0:36:8f:5c:49:44:3e:48:b5:b7:b8:60:32:c6:d4:45:cb:
af:ae:02:46:dc:1e:f1:bc:d5:81:ee:c0:e3:93:ee:8a:68:4a:
b7:11:e9:ea:12:f3:79:17:8c:1e:19:7b:36:42:50:bd:92:4c:
f4:e3:da:83:40:4f:05:06:a2:2c:6d:63:87:83:78:4b:7f:fb:
77:40:cc:3e:a8:3f:7d:4f:3f:ae:2e:3f:90:32:a3:a1:35:dd:
f7:70:2d:31:9d:23:0a:62:cd:5f:a6:fa:7c:2c:ab:e0:b2:13:
ff:46:c2:a3:35:b9:a2:84:a4:47:31:ea:b8:5f:7a:b0:5f:55:
87:de:8d:f6:41:80:68:24:68:1f:46:01:48:0a:56:24:d4:35:
a8:ab:c9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org