Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/34E182840E3B11EDBCB148E2F1222468.roa
File: 34E182840E3B11EDBCB148E2F1222468.roa (raw, json)
Hash identifier: CZ5CBRMB3uJ4cVsetnHdJ3QsqzUcYgRmWAPhvX7cYqk=
Subject key identifier: B9:A3:74:83:2F:6F:45:59:71:70:E5:80:3F:E4:F3:E8:CB:7C:F8:09
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0517
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/34E182840E3B11EDBCB148E2F1222468.roa
Signing time: Thu 28 Jul 2022 06:04:57 +0000
ROA not before: Thu 28 Jul 2022 06:04:54 +0000
ROA not after: Wed 07 Jul 2032 06:04:54 +0000
asID: 398465
IP address blocks: 192.142.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Aug 2022 13:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1303 (0x517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jul 28 06:04:54 2022 GMT
Not After : Jul 7 06:04:54 2032 GMT
Subject: CN=62e22709-e6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:78:c1:d9:38:d9:4b:60:c0:fe:40:59:c1:
e9:18:9c:b8:dc:5d:99:ee:78:08:79:d1:6a:a7:eb:
7e:da:03:09:57:53:f1:0b:85:60:61:6a:c2:75:8d:
4c:b4:29:0e:17:d7:54:79:fc:be:18:0a:ed:01:73:
e1:38:5a:30:3d:a2:24:46:5d:07:49:5e:0d:14:bd:
a1:ca:43:19:6d:4b:b6:01:e8:77:5b:41:90:4b:c4:
32:ea:04:81:fe:9c:b1:c0:07:6d:fd:92:f5:98:47:
10:89:ea:62:de:ec:56:ad:0e:f7:a6:07:9a:d6:7d:
ab:ef:87:7d:72:d5:a6:f0:33:93:59:07:d2:f1:3c:
9c:6e:cd:e4:d7:be:61:24:81:be:66:2f:e0:99:41:
7f:ca:31:45:3b:48:52:e7:05:bf:e8:83:63:71:8e:
74:33:98:cf:d4:88:bb:48:90:c8:38:52:6d:3a:9a:
8f:66:3b:b3:43:1d:f5:e2:19:3b:2d:5a:92:c7:e4:
04:2c:3a:81:71:c1:66:5e:8d:80:2e:ae:bf:b3:d8:
75:30:6f:f7:9e:dd:40:14:48:84:ce:68:b8:df:58:
59:3a:05:ac:86:5a:d6:49:80:b9:27:df:18:bf:9b:
ea:50:a1:20:be:6e:54:33:e8:26:00:6e:09:54:66:
90:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A3:74:83:2F:6F:45:59:71:70:E5:80:3F:E4:F3:E8:CB:7C:F8:09
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/34E182840E3B11EDBCB148E2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.8.0/21
Signature Algorithm: sha256WithRSAEncryption
c1:e8:a5:e5:d9:18:2d:01:3e:a5:fd:ce:3b:ab:5f:76:dd:5d:
f8:ab:28:a4:c8:96:40:e6:69:27:79:ed:25:c3:51:01:42:29:
5a:05:c6:3a:68:35:90:46:55:12:9f:01:16:49:12:b0:36:cc:
73:a3:38:49:15:ae:87:7d:b1:e7:b2:e8:23:42:aa:63:ac:33:
26:74:06:b0:02:ea:ad:d3:83:01:56:ea:0e:a1:7a:31:5d:dd:
20:93:2f:13:d3:e6:a5:dc:74:4a:72:bf:5e:d8:b5:2f:5b:a5:
f0:15:77:98:ed:1a:06:c4:08:72:5f:17:11:9b:1b:c5:35:13:
66:f1:51:0c:b3:08:1f:1a:19:a2:0c:8e:b4:66:c0:bf:f1:c6:
ac:dd:08:31:9c:38:56:a8:94:fb:13:39:ba:da:16:b0:8f:64:
ec:1a:b5:e0:b8:8c:fd:54:ab:01:17:09:bf:12:c9:be:58:88:
91:5a:5c:34:74:84:de:bf:be:36:2c:44:87:6b:90:a6:06:c6:
86:d6:39:1b:4a:59:4c:cb:ae:b3:3a:61:c6:d5:a1:77:b5:59:
ba:13:69:bb:8d:cb:dd:5a:5f:d3:92:e2:d4:2b:3f:09:1a:e7:
0b:71:08:19:6d:c4:44:08:a3:61:96:be:f7:44:77:2a:25:8e:
dd:8e:e4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org