Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4C4255A422D911EDBD86BAE7F1222468.roa
File: 4C4255A422D911EDBD86BAE7F1222468.roa (raw, json)
Hash identifier: 6+FufPy41JEaQYFkn6djocOfo0a/6EhD+74RPNVZeRE=
Subject key identifier: 70:4F:7F:02:3A:97:35:9C:84:30:9E:37:8E:21:B7:79:D9:1A:99:90
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0555
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4C4255A422D911EDBD86BAE7F1222468.roa
Signing time: Tue 23 Aug 2022 11:47:00 +0000
ROA not before: Tue 23 Aug 2022 11:46:55 +0000
ROA not after: Wed 11 Aug 2032 11:46:55 +0000
asID: 19437
IP address blocks: 192.142.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Oct 2022 13:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1365 (0x555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 23 11:46:55 2022 GMT
Not After : Aug 11 11:46:55 2032 GMT
Subject: CN=6304be34-99f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0a:2b:a6:ea:e6:ba:eb:9c:45:21:1f:be:79:
32:62:d0:fd:b0:4e:bc:63:1e:37:75:2d:30:41:e8:
69:48:40:dc:8c:e9:db:3f:3d:93:2f:8b:65:3c:19:
a8:dc:9f:c6:e1:9e:20:dd:d1:05:b3:b3:36:3c:86:
6c:4b:ba:d1:44:52:23:95:61:32:57:7d:7a:9f:fd:
f3:c0:d9:ee:bc:af:0b:dc:60:22:a8:75:1e:34:8d:
76:b1:84:d7:b7:04:88:16:7e:bd:11:81:eb:de:94:
b3:b4:15:73:39:0b:ec:ff:d0:1a:81:5f:12:6e:6f:
0e:de:21:ec:ed:a4:d7:d4:b1:51:48:87:09:f7:b9:
de:02:93:f8:95:c5:58:a3:d7:ce:92:ae:e3:20:a1:
88:c3:48:4d:8a:72:59:d8:4a:f6:1c:03:c4:e9:26:
94:86:79:16:d2:3f:19:3e:d6:57:f7:bf:55:73:a5:
bc:fc:b8:0a:e7:c8:ba:71:c5:0f:db:96:49:33:42:
c2:05:f8:57:f8:48:c0:9f:f9:06:9c:d0:d7:ad:94:
ff:8b:88:87:21:e2:31:3f:ad:8c:e5:16:37:e6:cb:
55:1a:d3:26:47:eb:8a:7d:84:3d:d8:cd:b9:80:95:
41:5b:d7:e8:f6:51:60:1e:92:ca:74:7f:62:bd:cb:
8f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4F:7F:02:3A:97:35:9C:84:30:9E:37:8E:21:B7:79:D9:1A:99:90
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4C4255A422D911EDBD86BAE7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.105.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:99:36:aa:06:4a:04:27:4c:9a:3c:40:7c:8f:a5:db:ba:aa:
25:57:77:e4:17:b0:9a:51:ce:ac:8d:92:46:ac:8d:c6:fb:1c:
36:2f:30:3f:08:3f:5b:d0:f3:b2:1c:62:59:a4:d4:a8:c6:2f:
58:24:c4:c9:64:d0:f8:c5:31:a9:bd:96:02:0a:72:14:5c:ad:
df:ba:89:f1:6a:21:17:15:b2:91:f2:45:7d:88:27:0e:7b:96:
5b:bf:17:38:69:e1:71:f2:79:81:df:fe:32:3a:a3:1e:29:ae:
5c:14:66:25:18:5f:e0:b1:bc:5f:20:70:1d:0e:1d:72:51:a1:
8e:c7:0f:59:d7:8f:59:84:5f:66:c6:80:d7:60:f9:cd:10:82:
cd:5a:e2:0b:9d:2a:d5:12:2a:4b:09:db:57:58:6f:75:41:64:
5d:25:46:e6:60:58:9e:e3:ea:27:fe:b2:4f:91:f7:1e:8b:c9:
cf:db:2a:f9:80:0a:20:df:81:1e:89:67:1d:b0:40:f0:ca:71:
ea:68:78:af:b2:96:8a:33:73:b2:b3:59:39:0a:3f:b6:00:28:
c8:2d:5d:96:c6:16:b9:2f:a9:d8:83:d5:41:59:f0:75:e4:27:
b1:34:d4:b1:ed:0d:16:dd:8a:cb:f4:7a:3d:61:d8:8b:1e:4a:
41:70:f8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org