Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2F2671EE52FD11EEABDECF544AD9E6FC.roa
File: 2F2671EE52FD11EEABDECF544AD9E6FC.roa (raw, json)
Hash identifier: plCXHcuxAUloL2m/DflEkz6I7u8zKpZecA6Y04ueBWw=
Subject key identifier: 2F:2E:51:14:79:E6:72:DA:C2:28:9E:F7:BB:04:9A:DE:D3:B2:ED:50
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 07B5
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2F2671EE52FD11EEABDECF544AD9E6FC.roa
Signing time: Thu 14 Sep 2023 12:49:47 +0000
ROA not before: Thu 14 Sep 2023 12:49:43 +0000
ROA not after: Wed 14 Sep 2033 12:49:43 +0000
asID: 212219
IP address blocks: 192.142.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jan 2024 08:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1973 (0x7b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 14 12:49:43 2023 GMT
Not After : Sep 14 12:49:43 2033 GMT
Subject: CN=6503016b-95b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:02:f5:f3:32:72:d9:ed:81:0c:32:c7:7c:68:
92:17:3e:07:f2:a8:d6:ea:d0:f4:ab:4e:c1:97:a3:
ce:1b:21:a3:a0:62:d6:07:d5:6a:55:71:d6:02:9e:
e0:c0:d8:b0:90:e4:d2:9d:01:ba:f2:c5:22:9b:66:
e4:da:2d:22:21:03:27:df:3c:be:bb:6d:5e:fe:0d:
07:3f:c7:c9:ee:ea:0f:c3:34:d6:31:ca:a0:a2:d3:
85:85:66:95:b1:60:8e:e5:ee:b9:a2:54:62:2a:5f:
4d:c0:99:17:ea:7c:59:0a:b1:58:28:8d:8b:fa:94:
32:bf:5d:87:eb:9e:88:ea:27:d5:a3:a3:ab:43:7b:
50:73:af:9f:c3:2a:97:e9:80:7a:3c:a9:bf:6a:63:
f3:e3:d9:ba:3a:07:7a:19:fb:10:fa:5b:10:ee:af:
c6:9a:d4:54:29:a3:be:7b:d0:e6:b9:bb:dc:12:f0:
f3:f2:2b:c4:11:16:a3:86:ef:e3:75:6a:66:95:90:
ef:d4:98:a8:d3:a8:48:6e:07:d4:52:97:6d:a3:c4:
50:2d:b5:39:30:f4:09:3d:7f:0b:52:b7:50:55:27:
76:57:5e:98:07:c8:96:e1:b9:6b:99:d8:04:8d:31:
7e:e7:b0:43:bf:56:94:51:61:c4:46:40:74:7e:35:
1e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2E:51:14:79:E6:72:DA:C2:28:9E:F7:BB:04:9A:DE:D3:B2:ED:50
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2F2671EE52FD11EEABDECF544AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.213.0/24
Signature Algorithm: sha256WithRSAEncryption
06:55:32:79:1b:7a:14:d0:01:d4:db:fa:54:d9:81:2a:39:9c:
e9:5f:b0:60:72:27:4a:5a:16:b2:da:64:11:dd:0d:7c:70:95:
9e:ae:5c:44:32:86:a8:38:e0:05:cc:52:aa:17:d9:7c:94:3b:
4d:16:dc:7a:7d:9c:55:b0:11:8d:6b:5a:f6:c0:be:c6:59:df:
e9:0d:db:13:95:41:99:ea:b3:04:d1:03:5d:4f:98:2f:1f:e4:
94:43:6e:3a:24:35:b1:8f:b7:e6:d9:ae:1a:11:8e:6c:7c:a9:
89:9a:31:de:75:ca:f4:d0:92:ed:32:89:ff:e1:d3:96:17:7a:
cc:78:b2:c8:1a:bc:24:a9:32:50:b5:cf:09:ef:0b:2b:d6:2b:
78:a5:dd:44:1c:be:30:52:0c:eb:5f:c7:22:a9:65:b3:6d:7b:
f4:da:82:a2:30:4e:ae:1f:57:20:64:67:3c:c6:9d:ef:10:3c:
92:34:4f:d3:4e:24:bf:f1:43:38:2a:41:8f:9b:4b:24:6f:2f:
72:cf:9d:55:27:2c:6a:75:e9:e8:61:92:6e:f9:d5:0b:e9:6d:
95:f0:ce:c4:91:bb:23:36:1a:60:9d:a1:78:ec:e8:84:49:d6:
b0:e6:26:0a:b2:8a:7e:19:a2:de:04:09:8a:ca:bc:19:1e:66:
e4:0c:03:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org