Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/355387F0187F11ED88ECBB87F1222468.roa
File: 355387F0187F11ED88ECBB87F1222468.roa (raw, json)
Hash identifier: QIO25lJW9iGeHcAkb3ZVlTVLqQTMnFEQ1qDkUFhow54=
Subject key identifier: F5:20:54:91:84:54:3D:7A:D9:90:38:57:32:0D:C3:48:7D:63:DB:13
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0536
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/355387F0187F11ED88ECBB87F1222468.roa
Signing time: Wed 10 Aug 2022 07:36:55 +0000
ROA not before: Wed 10 Aug 2022 07:36:51 +0000
ROA not after: Wed 11 Aug 2032 07:36:51 +0000
asID: 7018
IP address blocks: 192.142.248.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Sep 2022 06:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1334 (0x536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 10 07:36:51 2022 GMT
Not After : Aug 11 07:36:51 2032 GMT
Subject: CN=62f36017-84b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:0f:10:c9:90:3b:5c:14:00:04:ed:1c:b3:
b0:dd:6f:9e:ab:a2:83:b0:b6:01:54:26:3f:5d:9c:
be:a9:54:d2:c8:09:77:9e:4e:c8:e8:06:39:2c:7f:
14:00:90:ff:50:cf:3b:69:9a:13:95:d3:2d:c7:04:
4e:e1:74:46:21:ca:39:67:0e:73:7f:d0:84:56:40:
52:f3:7e:0c:e8:1b:c8:6e:6e:29:91:b9:fb:c8:bf:
e2:f5:a1:35:66:b3:d7:f3:2f:a5:76:b4:40:26:dd:
0f:6e:3c:bb:54:03:39:f9:48:1e:f8:61:bf:82:66:
49:ac:1e:5c:57:9e:58:57:06:f9:f1:cd:a5:d0:90:
f3:ac:8c:81:65:c1:f3:87:9d:13:27:cb:61:9b:92:
dc:9a:c5:3c:67:90:1b:4a:ef:4c:44:21:2d:d1:82:
b7:e7:cb:4b:ca:8e:2f:2f:20:a7:e9:7b:cf:2c:2d:
b9:35:e0:f8:8e:11:3f:3d:da:82:91:bf:e4:6e:27:
78:ea:c9:5b:d8:c1:c7:93:ea:b8:07:a0:5a:09:57:
2f:b8:a7:69:76:d6:ad:44:3b:d8:20:ef:9f:bf:46:
20:ab:b4:f6:9e:cb:c1:69:98:46:53:d8:18:33:aa:
43:05:e4:54:3c:ba:1b:78:cd:b3:69:72:86:c3:94:
b3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:20:54:91:84:54:3D:7A:D9:90:38:57:32:0D:C3:48:7D:63:DB:13
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/355387F0187F11ED88ECBB87F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.248.0/21
Signature Algorithm: sha256WithRSAEncryption
71:20:3a:22:f8:3d:f4:37:eb:d9:ea:b8:94:fb:55:f2:5e:cd:
3e:3c:cf:78:5b:a5:39:a4:a7:13:0c:85:14:ba:55:50:3b:b0:
ac:73:0a:8a:87:d4:12:e0:7f:a7:d1:d7:b8:66:f6:c7:c8:5b:
ef:80:eb:b8:21:5c:57:a4:6e:38:ad:83:c8:1e:05:89:6f:71:
08:0f:7c:d9:1c:94:9b:c8:c3:a4:f0:3e:5b:35:6a:cd:cc:c5:
d3:b3:58:c4:36:7e:29:f1:fe:63:66:c6:7e:ff:6a:fe:b2:44:
05:d0:66:d1:8d:9e:ce:20:80:7c:71:54:88:c6:6a:28:1d:ec:
9a:7f:3d:b5:b4:ea:62:dd:8e:57:d3:29:bb:62:e5:b6:36:63:
70:02:9f:9f:08:e5:84:2b:24:99:c3:db:fa:38:a7:89:52:1d:
f9:be:ab:13:84:69:b7:72:46:2d:ae:e8:12:c4:f0:f6:ec:59:
04:7b:9e:c3:6d:e1:53:a7:1c:88:b5:93:21:35:25:30:a6:c8:
dc:50:81:00:89:d8:48:e6:eb:e9:63:c3:43:f9:d7:fd:24:be:
22:5c:23:c0:1b:07:67:aa:60:28:00:32:39:b9:bd:90:62:ce:
d9:3e:7f:5b:40:ef:2a:22:5b:3e:bd:48:68:e3:6e:d9:45:78:
3d:10:72:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org