Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2E13B516F3AB11ED9F117A1B4AD9E6FC.roa
File: 2E13B516F3AB11ED9F117A1B4AD9E6FC.roa (raw, json)
Hash identifier: xaEu9oXM60Zfd5THUGi9AVDbFP8Jv9bTXPPVyo79XI4=
Subject key identifier: 26:D1:95:1B:8B:99:96:B8:E3:F4:30:39:11:88:E0:BE:BD:58:53:16
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 06E1
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2E13B516F3AB11ED9F117A1B4AD9E6FC.roa
Signing time: Tue 16 May 2023 05:33:26 +0000
ROA not before: Tue 16 May 2023 05:33:20 +0000
ROA not after: Tue 17 May 2033 05:33:20 +0000
asID: 206092
IP address blocks: 192.142.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 May 2023 05:41:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1761 (0x6e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 16 05:33:20 2023 GMT
Not After : May 17 05:33:20 2033 GMT
Subject: CN=646315a6-7250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:14:46:3a:e1:88:6a:60:f4:cb:96:13:40:
6b:09:35:cf:c4:8c:f1:e4:e7:04:d0:37:57:1a:f2:
c9:52:0d:52:b4:da:d7:f2:e4:92:9b:3f:8e:c0:5b:
ac:fc:3b:d8:f3:ee:ae:e8:1f:b7:07:63:9b:d2:ba:
1b:18:6a:6b:6b:e4:68:d6:1c:70:08:f5:ca:d4:30:
4c:68:16:da:d1:d6:be:a1:cc:37:00:2f:34:b5:c1:
6a:48:25:48:4a:c3:32:fa:d2:b5:f4:7b:c4:82:0e:
45:01:06:f9:26:64:7f:a4:04:25:59:f1:d9:50:d1:
99:81:fd:a6:11:2a:0d:9a:f1:4c:fa:48:59:2b:e1:
88:11:97:7a:87:ca:85:f0:b2:7d:cf:ef:67:26:14:
dc:02:f0:6a:c7:9f:11:70:37:88:3e:d7:de:26:23:
46:78:5a:df:e9:4c:54:1b:e9:67:81:75:2b:50:8a:
7d:69:b6:3e:6c:36:ad:ef:15:d7:a8:bb:7c:bf:ff:
d9:c0:67:c4:9e:5d:24:ec:a5:99:9f:5b:d0:b7:70:
66:86:e6:7a:dc:5f:66:79:1b:74:31:c0:73:76:7b:
11:54:bd:52:6e:38:15:34:fa:6b:f0:db:6b:72:4b:
49:15:ee:1d:70:86:94:03:02:ec:95:0e:99:7c:9b:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D1:95:1B:8B:99:96:B8:E3:F4:30:39:11:88:E0:BE:BD:58:53:16
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2E13B516F3AB11ED9F117A1B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.130.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:75:6e:94:d1:c3:ad:3e:b3:12:84:b1:fc:a5:ee:1f:15:c2:
51:be:9f:52:63:a0:a7:15:db:96:cd:5c:73:57:0d:a1:9e:38:
9c:1d:fc:3b:9e:f8:3c:f3:2b:96:2b:49:25:67:41:18:cd:ab:
a7:32:89:5e:24:0a:9d:17:92:fd:a6:be:ec:eb:e9:32:4a:42:
5b:32:29:ec:eb:9f:a2:ff:44:ed:7f:f9:3d:43:bd:ac:99:99:
3c:42:14:33:4e:dd:fe:0d:ab:54:c9:b4:82:5e:e0:60:85:45:
49:49:6d:ee:59:96:e6:35:32:a2:75:0d:9a:68:04:20:bc:fa:
65:9c:08:2c:6d:ce:e5:9c:d0:d5:ee:c0:9f:52:b9:3d:f9:26:
73:9f:2a:96:40:c5:d1:dc:4e:6c:c4:14:26:84:0e:de:d9:f2:
bf:b9:1d:73:b3:07:29:26:c3:f1:b8:36:25:9e:a9:ea:b5:7b:
71:97:58:8c:90:50:58:7d:24:18:46:f1:24:f2:2f:8e:92:47:
e6:ad:d0:72:fe:32:9f:bd:b6:63:e1:aa:ed:f7:78:8c:41:2d:
4a:ad:db:5c:c7:1a:cf:5e:7c:07:4c:b3:ca:e5:f3:00:ff:3c:
ea:0e:33:20:54:40:f7:0d:df:43:4a:85:18:95:6c:b6:a1:20:
92:ff:6c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org