Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/461E0A5AD3A711EC9AFF31B9F1222468.roa
File: 461E0A5AD3A711EC9AFF31B9F1222468.roa (raw, json)
Hash identifier: dvpNT1oEVxdvusKFY4dIcYzqZp6ospLzrmo02ybo+Os=
Subject key identifier: 4A:85:DC:AD:58:11:90:14:6C:2D:28:0A:47:20:26:78:49:90:5C:33
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 04B6
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/461E0A5AD3A711EC9AFF31B9F1222468.roa
Signing time: Sat 14 May 2022 16:59:53 +0000
ROA not before: Sat 14 May 2022 16:59:50 +0000
ROA not after: Wed 12 May 2027 16:59:50 +0000
asID: 46573
IP address blocks: 192.142.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Dec 2022 12:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1206 (0x4b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 14 16:59:50 2022 GMT
Not After : May 12 16:59:50 2027 GMT
Subject: CN=627fe009-f1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:39:63:2b:42:01:10:79:51:02:b8:41:37:
01:f3:36:25:54:c7:ba:53:a7:72:0f:fd:22:4b:5f:
55:1e:3b:69:3c:ba:71:4d:0e:47:5e:9d:4b:16:ad:
30:f6:66:07:17:68:8a:16:2c:67:17:0a:61:84:8b:
a8:5f:99:81:a0:fd:63:38:7f:88:7d:a5:90:bf:4d:
f2:86:cb:d7:b9:96:36:cd:d2:eb:73:c5:8a:db:7c:
11:6b:17:94:8b:c1:82:3c:49:88:a4:8e:db:c7:17:
c0:1f:47:20:b7:e5:77:a6:df:29:ce:86:33:99:d9:
5c:2b:68:ff:d1:67:05:08:74:6b:1d:c4:e8:e8:93:
da:03:27:de:22:05:29:d7:8f:e9:a1:ca:40:38:2d:
e3:a7:7d:1b:73:81:2f:0a:19:35:5c:93:d0:3a:99:
36:4a:59:c5:78:58:79:88:d9:ba:09:fd:33:f7:dc:
76:36:2c:24:0c:00:08:58:fb:82:ec:ae:f8:f3:3d:
85:ed:c5:e0:92:03:3f:a4:d2:3f:04:22:26:6e:f9:
aa:43:17:62:6d:75:46:24:61:11:13:12:5a:fc:f3:
8a:1e:f0:87:51:45:77:34:4a:2d:0e:e8:7b:48:2f:
c2:14:9d:3e:64:f6:76:e7:43:de:71:d1:de:f2:a7:
7d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:85:DC:AD:58:11:90:14:6C:2D:28:0A:47:20:26:78:49:90:5C:33
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/461E0A5AD3A711EC9AFF31B9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.7.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:10:2f:c1:22:4f:8a:b6:8d:ad:da:53:c8:2b:05:42:10:fc:
43:4c:63:89:ff:86:18:1b:b2:1c:13:01:bb:b2:c5:69:3d:1d:
d8:a0:fe:97:9a:ed:d8:9e:79:38:00:be:b8:5c:7e:9c:6e:fc:
83:6d:1b:0a:14:90:cc:19:58:f2:4e:ad:c3:ea:8b:52:9f:63:
9e:01:8c:4b:ae:d7:c6:29:ea:24:6c:63:36:9c:f9:2c:79:85:
e8:15:49:e7:0c:20:04:31:03:fd:c8:f4:2c:32:84:60:9f:38:
ae:2f:43:bf:92:38:b5:0c:05:dd:cf:d7:45:91:e3:45:e7:89:
04:19:da:b6:a3:f8:7c:66:81:f3:46:11:dd:a2:7d:c5:87:86:
a4:55:00:86:4f:50:c9:83:52:5f:95:5d:ca:7f:b3:eb:b6:d3:
df:ef:24:f7:2b:82:ba:fc:fc:e4:ff:f1:b5:0b:06:48:e9:26:
a7:ca:2e:55:7f:f9:ef:37:b5:07:d8:bc:59:64:6c:85:ac:ad:
91:0e:e5:fe:55:56:00:16:2c:9f:94:80:70:92:ff:e3:a0:ce:
c4:0f:c3:f7:30:26:75:97:c2:a9:e1:50:41:0d:cf:67:67:1b:
6d:a1:67:72:58:e5:94:16:26:cf:1c:b5:ce:2f:25:d2:a1:03:
d6:93:e8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org