Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4270BF6C7F8911EE881626174AD9E6FC.roa
File: 4270BF6C7F8911EE881626174AD9E6FC.roa (raw, json)
Hash identifier: 7uCOmlSpmzoUajTVcg9LVnp4Y3Okumt7lupbqyY5+uk=
Subject key identifier: 1A:DB:6A:18:D5:4E:E6:FA:14:AC:F2:E8:FB:F1:98:C0:89:90:81:64
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0823
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4270BF6C7F8911EE881626174AD9E6FC.roa
Signing time: Fri 10 Nov 2023 05:23:20 +0000
ROA not before: Fri 10 Nov 2023 05:23:16 +0000
ROA not after: Wed 09 Nov 2033 05:23:16 +0000
asID: 21221
IP address blocks: 192.142.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 10:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2083 (0x823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 10 05:23:16 2023 GMT
Not After : Nov 9 05:23:16 2033 GMT
Subject: CN=654dbe48-865e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:b2:eb:bf:09:e6:29:b2:61:6a:77:72:b9:
7d:06:93:49:f6:8e:e9:af:cf:15:30:b3:c3:8a:5b:
46:dc:70:81:85:ad:b3:30:a4:2a:e7:1e:98:ac:ba:
a7:f9:f6:55:f6:50:4c:e1:34:ee:c7:35:d0:00:1e:
0c:49:27:d0:e9:3e:94:d6:e9:0c:b9:d7:2e:97:a9:
76:d5:a0:0c:7e:f7:e1:09:18:33:f8:a3:f7:4a:29:
b0:43:64:6b:91:d2:74:f3:57:32:4d:93:62:7f:38:
14:cf:19:77:74:d5:9e:3f:c0:29:2a:38:81:4e:ac:
d9:2f:dc:b8:7d:b4:11:ec:83:1b:4a:e1:d0:30:83:
19:10:b8:dd:a4:5a:68:f8:58:c1:7c:c8:16:bb:2a:
6e:44:f3:ad:7a:12:36:49:68:33:85:c4:2d:04:63:
fc:c0:80:1e:fa:59:a7:13:2e:5f:6a:b1:a6:7a:05:
a1:a4:b5:52:28:63:ae:43:6b:27:d5:44:90:16:a9:
dd:9c:da:96:bc:a3:c2:c6:47:36:88:ec:99:19:0d:
93:0a:52:63:fd:83:6b:1e:ca:22:78:52:96:da:0a:
40:e7:d3:ef:81:a0:0f:78:fb:32:ee:37:28:25:d6:
14:76:9c:bc:3d:8e:bd:d8:fb:25:e3:3d:55:e4:8a:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DB:6A:18:D5:4E:E6:FA:14:AC:F2:E8:FB:F1:98:C0:89:90:81:64
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4270BF6C7F8911EE881626174AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.173.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:d7:e7:25:76:dc:8b:a4:c2:4e:ed:ea:1b:ab:bc:95:71:89:
f1:db:8b:4b:70:a2:16:ec:c0:94:c6:b3:37:86:95:92:a8:06:
1a:38:c9:b1:c9:78:be:08:fa:b7:10:b0:81:ac:da:61:a3:32:
e5:d2:52:2a:e0:c2:48:4e:76:3c:8b:ba:28:f4:a5:6d:b8:70:
69:c8:b2:c0:fc:17:e0:e1:53:cf:e3:37:06:a1:9d:b5:ed:2d:
fe:f2:00:75:2b:0d:a7:ec:ca:ee:77:d0:1d:eb:9c:d1:ed:c4:
d3:2e:4e:55:95:6a:2b:69:7a:32:da:25:04:ed:51:7c:53:07:
b5:15:9d:73:e5:cd:67:00:59:3a:92:28:99:67:d7:b8:ab:03:
9a:e5:5d:4f:84:ab:f1:1f:c4:4f:d7:1c:d2:ca:1c:2b:1d:64:
45:b1:7c:f2:6c:35:a0:c1:1c:b0:4f:5e:ae:7a:b6:12:2a:b3:
53:62:44:03:69:8f:1f:0d:93:11:8c:bb:91:c6:6f:17:f9:b3:
5c:e4:81:7e:19:67:27:28:3d:c2:30:92:3b:c6:fb:4b:7a:a1:
9b:14:0b:03:7a:95:f1:d0:20:08:a6:08:f6:59:16:8b:7c:92:
18:0f:4e:3a:c1:e1:18:ed:5a:a1:2f:ea:2e:3e:35:19:17:c1:
1d:e8:f4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org