Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/467E92D2520C11EEB051E8584AD9E6FC.roa
File: 467E92D2520C11EEB051E8584AD9E6FC.roa (raw, json)
Hash identifier: xpMdHvP9/b/j3rNNq92ZM/WRe867aVwX6j0mQQw3lVU=
Subject key identifier: 4D:16:3D:C9:69:9E:F8:22:10:69:4A:02:5A:58:8D:C0:B4:CB:31:93
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 07AB
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/467E92D2520C11EEB051E8584AD9E6FC.roa
Signing time: Wed 13 Sep 2023 08:05:17 +0000
ROA not before: Wed 13 Sep 2023 08:05:14 +0000
ROA not after: Tue 13 Sep 2033 08:05:14 +0000
asID: 208949
IP address blocks: 192.142.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1963 (0x7ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 13 08:05:14 2023 GMT
Not After : Sep 13 08:05:14 2033 GMT
Subject: CN=65016d3d-eba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:fe:82:02:c0:c7:20:61:6c:fa:9b:48:31:
fc:fc:da:54:f6:33:2e:be:16:9b:f2:a9:5a:34:3e:
d7:90:25:a9:a9:4d:77:ad:45:e0:32:4b:ee:cc:21:
9b:73:d1:29:1d:4c:bc:32:8e:cc:15:ea:19:69:35:
e8:a5:35:17:80:16:22:d9:9a:d4:95:24:b8:d5:90:
af:63:91:3e:52:b8:e1:c0:df:7a:dd:34:f8:5f:bf:
c3:7e:8e:83:6d:03:00:c6:3a:90:ac:46:05:f3:97:
f9:91:1d:80:c2:3d:1c:d5:c5:f7:b4:57:d0:31:65:
20:c7:0b:8e:32:08:32:18:7b:c5:e0:25:cb:04:1d:
e0:a3:e7:16:2c:01:03:f4:7c:dc:0b:66:46:de:28:
e4:a9:8b:b5:d0:a8:32:1d:37:5d:fa:bb:ed:a8:1c:
ec:cd:c6:47:a5:37:2a:3a:5f:ab:90:9e:32:18:24:
ec:79:6d:32:28:a1:d2:fe:85:14:bc:96:c7:1b:65:
13:9f:99:69:f6:fa:27:f3:08:3b:70:cb:ea:44:ae:
dc:46:ec:93:c5:84:a8:b8:7a:60:71:6d:90:42:b3:
51:58:80:39:28:eb:de:b5:97:e6:5e:95:81:c3:ab:
5a:ed:d0:c9:51:b2:56:05:6d:4f:ee:71:b3:9f:3e:
0c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:16:3D:C9:69:9E:F8:22:10:69:4A:02:5A:58:8D:C0:B4:CB:31:93
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/467E92D2520C11EEB051E8584AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.22.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:83:bd:0b:14:01:8b:86:fa:89:1e:5e:36:af:64:17:90:3a:
89:45:ea:95:fd:f8:8c:f6:bc:4f:11:cb:24:89:37:8e:c9:56:
c8:12:83:b7:5b:66:97:a4:50:a1:cb:cf:d3:10:5e:80:bb:d7:
b6:6d:94:47:d8:21:22:d1:19:eb:19:08:65:94:7d:38:2b:5f:
1d:b6:53:d3:a4:b9:a6:dd:38:b2:82:46:81:97:08:dd:eb:aa:
f3:3b:a3:b3:16:14:86:84:8c:42:7b:4e:2f:98:77:7d:8b:1c:
f5:2d:79:64:8d:ea:cf:0a:f7:c7:45:e4:3e:a8:d8:00:68:01:
f0:b2:95:d3:56:c1:03:73:b9:bf:bf:e9:44:38:dc:1a:49:eb:
c7:53:6e:e1:81:7c:9a:12:63:45:3d:b6:98:23:93:b7:18:4a:
68:38:a7:55:d9:2f:2c:95:8e:93:15:ef:a2:9a:0c:e9:3d:9f:
66:dd:ae:f1:51:18:6f:a7:f9:1c:26:84:af:c8:e9:57:21:23:
43:f7:39:6e:bf:ba:1d:09:01:a1:35:dc:a5:ec:f2:a5:12:17:
37:21:7c:f6:c2:ed:82:4e:05:bf:c1:56:25:82:1d:18:4e:96:
42:88:a8:d1:4f:29:ee:71:04:01:0d:67:38:9b:5b:f9:a7:4a:
83:2a:cf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 13:22:29 2024 by rpki-client on console-ams.rpki-client.org