Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/52CE27AAEB4111ED941473614AD9E6FC.roa
File: 52CE27AAEB4111ED941473614AD9E6FC.roa (raw, json)
Hash identifier: FtOmr6neZkJU8XzO1FE6fuQzxV0L2pvTFyyHVbAHKF0=
Subject key identifier: C6:96:5C:07:58:00:39:CC:7D:BD:6D:EA:50:C5:D5:97:7C:25:E0:0A
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 06CA
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/52CE27AAEB4111ED941473614AD9E6FC.roa
Signing time: Fri 05 May 2023 12:35:31 +0000
ROA not before: Fri 05 May 2023 12:35:26 +0000
ROA not after: Thu 05 May 2033 12:35:26 +0000
asID: 207459
IP address blocks: 192.142.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Jun 2023 13:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1738 (0x6ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 5 12:35:26 2023 GMT
Not After : May 5 12:35:26 2033 GMT
Subject: CN=6454f813-50d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:1d:34:d8:d8:37:92:71:ce:da:5e:5c:4e:
a1:d9:61:ee:10:c8:e2:8a:6c:8d:f3:69:6b:ed:bc:
a2:3a:0e:ad:7f:5a:5d:a7:a5:83:b8:e7:a8:c0:01:
db:48:bd:33:e2:65:e9:04:57:67:a1:a8:8d:47:11:
16:71:13:f3:07:e6:ca:17:9a:36:15:23:1f:79:79:
d2:31:71:bf:85:bc:79:42:ef:27:22:2a:af:47:96:
5d:56:68:da:76:67:e2:4e:23:30:2c:33:d1:ae:dd:
7d:c2:fe:08:81:d4:d6:77:b6:2c:b0:81:20:7e:d8:
06:bd:94:16:4f:ea:bd:ea:1b:66:a3:87:b7:fd:33:
69:da:3c:7a:50:8e:93:d0:ee:0f:02:ed:c0:9a:1d:
c0:d0:4d:83:87:cd:a6:c4:f4:4f:1d:9a:35:85:de:
98:5b:41:a4:61:94:e5:69:a3:4f:da:54:e3:b3:95:
91:c4:16:17:79:51:e7:c8:fa:ad:c9:9b:4d:01:34:
94:bc:ea:10:76:ae:45:52:d1:69:e3:77:41:ac:58:
91:af:15:df:e6:24:17:69:20:d2:9a:d3:27:79:2e:
0c:da:30:52:4b:55:eb:22:40:6f:6b:7c:1e:3c:14:
1a:60:0a:f1:c1:d1:ef:07:1f:41:ef:3f:2a:19:4b:
82:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:96:5C:07:58:00:39:CC:7D:BD:6D:EA:50:C5:D5:97:7C:25:E0:0A
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/52CE27AAEB4111ED941473614AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.135.0/24
Signature Algorithm: sha256WithRSAEncryption
95:20:de:9b:ce:d6:42:dd:78:c7:29:49:87:ae:f5:7a:50:19:
6d:b2:21:27:f2:e8:e6:af:86:1a:f4:95:fe:ae:4a:48:68:e7:
e4:06:7c:63:ac:09:97:92:e8:de:d2:11:cf:87:8a:f0:66:73:
67:f9:46:95:a1:e9:75:13:ef:95:4f:37:2e:a1:e2:3e:67:f9:
de:f8:6b:2c:e6:8e:56:6e:6f:d1:da:b9:ee:63:7a:9c:4d:f3:
b5:d2:5a:41:16:5f:48:32:d5:1b:9e:21:a0:9d:32:31:01:95:
bc:b5:9b:02:64:23:60:d3:0e:1a:2c:5c:dc:12:b4:d7:ce:4b:
31:65:55:bb:fd:01:73:bd:2a:c4:9c:44:5f:c7:fa:40:2c:d4:
7c:48:3c:fd:59:59:dd:d0:1b:96:ef:ed:ac:fd:3f:81:0d:15:
ed:da:4e:81:6c:9b:ec:df:07:46:07:c8:6c:16:18:67:74:bb:
11:52:37:e5:31:f1:86:34:1f:5b:47:a4:cb:83:e6:56:d6:a8:
be:cb:01:a2:8c:c7:49:56:d5:cc:c3:02:f7:02:6f:c0:9b:92:
b3:fb:1e:c0:3a:6d:54:3f:8e:73:6d:bb:56:b6:3e:e7:ad:cc:
c5:a8:1a:f4:5e:9c:a3:01:1e:df:b3:27:04:e7:1f:56:01:0d:
a2:29:54:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org