Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/43A3F77AF09F11ECAA9B54C8F1222468.roa
File: 43A3F77AF09F11ECAA9B54C8F1222468.roa (raw, json)
Hash identifier: M3ttWlUPBIBoZRx7MchlZ47uxraMdVJG2ja3QR6q5uk=
Subject key identifier: 54:B2:7D:3B:40:35:60:D4:14:DE:72:4D:DB:AB:4F:B8:23:60:49:44
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 04E6
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/43A3F77AF09F11ECAA9B54C8F1222468.roa
Signing time: Mon 20 Jun 2022 13:45:37 +0000
ROA not before: Mon 20 Jun 2022 13:45:32 +0000
ROA not after: Tue 15 Jun 2027 13:45:32 +0000
asID: 7029
IP address blocks: 192.142.232.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Jul 2022 06:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1254 (0x4e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jun 20 13:45:32 2022 GMT
Not After : Jun 15 13:45:32 2027 GMT
Subject: CN=62b07a01-e21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:67:40:5c:bc:5f:27:5c:79:f8:bf:c8:b8:
02:8c:5d:de:42:4e:19:66:a4:e0:97:2e:df:91:39:
81:97:87:9b:93:d6:3f:36:07:dc:91:a4:ed:6a:d3:
c4:a6:a7:53:63:7a:7f:fc:89:55:10:01:88:f8:eb:
2b:ab:61:1f:43:99:ee:4f:3b:d9:71:ac:13:70:fa:
a3:41:b0:24:62:a7:72:86:be:cf:af:7f:4f:42:cc:
75:4f:9a:14:b0:4f:80:11:a0:c0:7e:c5:3a:3e:74:
32:97:ba:61:57:d4:6d:e2:6d:30:d1:0a:2b:e6:9f:
89:84:da:19:31:be:86:e0:87:63:6f:6e:54:ba:c4:
31:b5:71:ed:e8:f5:08:09:0b:37:20:dd:70:85:9f:
52:5d:36:1b:9e:cb:e4:7f:60:dc:96:2d:34:2e:bb:
f3:66:2a:c7:69:67:ef:cc:e2:0a:bb:53:c3:cf:db:
64:cd:fd:80:9e:c7:a7:da:3d:c9:06:84:d4:b2:a9:
a4:3c:6a:40:04:9c:d4:55:af:cd:41:86:6c:bb:68:
ee:6a:7c:ad:2a:af:e5:29:f8:da:e9:43:d3:7d:0d:
0b:3a:64:47:00:fd:f8:d6:29:74:8b:40:2d:34:d3:
41:e3:e2:33:7d:ef:93:81:88:2f:b4:f5:83:de:cf:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B2:7D:3B:40:35:60:D4:14:DE:72:4D:DB:AB:4F:B8:23:60:49:44
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/43A3F77AF09F11ECAA9B54C8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.232.0/21
Signature Algorithm: sha256WithRSAEncryption
47:4a:8b:b4:9f:61:1a:f9:09:e9:b0:c0:c2:7a:4c:bb:67:d9:
59:bd:3d:23:d2:97:4d:ef:66:d4:23:12:16:23:b5:48:8b:c8:
6e:b4:01:0f:de:36:82:44:d9:8a:3e:ae:bd:ae:e3:07:0a:8c:
6d:ae:bb:63:65:85:2b:fc:98:97:da:c6:d3:b5:e5:fb:34:c2:
d0:4f:19:13:61:75:97:9a:b0:e3:53:50:82:74:c2:ae:70:39:
0d:e2:f3:43:ad:7e:1b:d8:9c:44:ae:c8:ba:ed:73:2c:8e:28:
e3:42:66:f6:1c:7d:83:84:43:21:24:89:1c:a4:7f:85:d0:a6:
88:3f:cd:6e:30:8b:7e:0e:4a:57:5c:18:73:d7:88:5a:df:aa:
74:4e:f7:8b:2f:9e:cb:6e:2f:e0:d5:cf:be:90:2f:58:30:a5:
8c:27:83:38:b6:74:ed:76:9d:3f:43:1d:56:5d:6c:1d:e2:ad:
27:98:92:6c:3e:2c:c9:cb:6c:ca:c2:73:06:49:95:cb:70:71:
58:39:f4:64:25:ea:06:b3:18:e7:55:8f:35:1d:34:c0:97:b0:
80:bb:e8:61:d8:d4:95:5c:27:2c:ff:90:fe:ad:fa:a1:80:ca:
ab:7f:69:70:47:28:b8:39:83:63:fd:ff:62:63:6a:b8:ab:bb:
37:47:1c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org