Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/319CB80C0A0011EEB1718A4E4AD9E6FC.roa
File: 319CB80C0A0011EEB1718A4E4AD9E6FC.roa (raw, json)
Hash identifier: L7/sRdBUjDzJ20Hy23uU6vUot0hQyxgepEWIMY/QETQ=
Subject key identifier: DF:EF:E4:13:3E:DF:F8:FC:24:F7:C0:DA:90:C2:1D:38:0B:AA:09:62
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 071B
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/319CB80C0A0011EEB1718A4E4AD9E6FC.roa
Signing time: Tue 13 Jun 2023 15:37:24 +0000
ROA not before: Tue 13 Jun 2023 15:37:21 +0000
ROA not after: Wed 15 Jun 2033 15:37:21 +0000
asID: 64286
IP address blocks: 192.142.232.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 05:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1819 (0x71b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jun 13 15:37:21 2023 GMT
Not After : Jun 15 15:37:21 2033 GMT
Subject: CN=64888d34-035b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2d:fa:fc:e8:56:a1:0a:11:c1:0e:60:a7:86:
3d:4f:d1:5c:60:d3:f0:a8:77:11:69:51:f4:3f:29:
12:a3:a4:49:c7:74:ae:4c:56:c3:ad:b1:96:fb:76:
0c:de:7e:d0:f7:06:5b:49:30:2a:ce:61:1a:4b:79:
87:25:91:80:81:2a:05:1c:f9:53:ff:1c:fa:2c:da:
7e:7b:5a:ac:a0:96:22:2d:1f:80:b8:6f:86:ef:83:
af:39:de:9b:da:6a:b1:d7:15:26:6b:8b:e6:4c:e4:
a0:e6:cd:17:a2:36:da:95:95:97:3a:6b:ed:2b:c3:
6e:87:11:d1:c5:60:aa:78:22:30:d2:0c:66:87:d6:
53:23:0b:50:d5:69:84:57:76:34:26:fb:b5:cc:93:
df:98:43:7e:e6:55:e9:69:96:0f:45:57:35:b9:a7:
e7:87:05:23:a2:06:a1:c4:33:a0:cd:97:b3:df:cc:
7a:dd:eb:cc:a9:f4:36:70:4a:54:7c:3b:00:08:df:
c8:44:80:2c:35:ca:3e:73:31:2d:1f:d3:5f:b0:56:
76:cd:24:ec:64:67:42:a9:25:ad:28:c2:59:4c:43:
74:f5:08:fc:2c:54:8b:95:3c:3c:22:82:b1:64:81:
28:c1:62:54:bb:1d:36:51:7a:6c:c8:ca:30:cb:50:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EF:E4:13:3E:DF:F8:FC:24:F7:C0:DA:90:C2:1D:38:0B:AA:09:62
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/319CB80C0A0011EEB1718A4E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.232.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:6c:23:7a:2e:a4:5e:8c:e3:f6:7f:30:b9:2a:99:63:f7:07:
ef:fd:1e:79:af:71:10:17:dd:48:46:9e:d1:01:f0:a8:1b:e3:
d7:e6:97:00:34:d1:cc:e8:fb:e1:71:ab:0e:07:f1:4c:28:98:
e9:e5:2a:4e:79:1e:60:89:95:4c:eb:de:9f:9d:f1:2a:1e:b7:
2e:0d:ca:2d:7e:4b:6b:f2:30:d2:32:8c:79:f2:9b:bf:f1:de:
e2:d3:5e:a0:32:cc:f4:09:88:36:e6:cd:50:ec:96:53:47:4e:
af:03:dd:cc:84:d4:3b:60:d1:7a:a9:f2:0a:2a:ac:92:9a:d1:
76:f2:c6:bb:32:6a:a5:a3:a2:57:34:48:8d:d7:0d:b4:e4:66:
30:cc:50:db:88:28:86:9d:2b:ff:23:59:ab:92:88:06:e0:c4:
7e:82:e9:e8:ce:95:54:11:81:69:67:3e:47:d3:27:39:20:5c:
d8:45:6e:01:1b:42:55:5a:04:4a:d0:dc:78:c0:b4:69:3f:ae:
e8:95:c3:7b:91:30:c9:4a:5d:fe:43:97:ba:f0:21:3f:02:2b:
cb:8c:3c:4d:fe:37:30:60:2d:75:a4:36:3e:23:9d:7a:c0:8e:
92:19:3d:04:a2:fd:55:70:2c:01:98:dd:90:58:4a:5b:22:92:
f9:9d:3d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org