Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/541DF4200E3B11ED8C6EB5E2F1222468.roa
File: 541DF4200E3B11ED8C6EB5E2F1222468.roa (raw, json)
Hash identifier: Z9tN+A8JmreuT2GuQ72qgKDWochB8rGt1qRFrRdGUqc=
Subject key identifier: 82:0B:EC:6E:99:DD:6D:D9:28:EF:F0:93:35:6D:D2:D8:6E:9F:EC:8F
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0519
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/541DF4200E3B11ED8C6EB5E2F1222468.roa
Signing time: Thu 28 Jul 2022 06:05:50 +0000
ROA not before: Thu 28 Jul 2022 06:05:46 +0000
ROA not after: Wed 07 Jul 2032 06:05:46 +0000
asID: 398465
IP address blocks: 192.142.24.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Aug 2022 13:53:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1305 (0x519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jul 28 06:05:46 2022 GMT
Not After : Jul 7 06:05:46 2032 GMT
Subject: CN=62e2273d-25d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d0:53:23:ae:1d:49:38:bc:e1:b8:ff:e3:ad:
03:6b:64:57:b3:21:10:10:52:41:67:48:39:49:dd:
ca:5a:20:46:66:1b:7d:06:d2:fa:2f:0e:46:e1:1e:
e3:5e:2f:63:ad:c4:dd:4f:04:8e:4e:7d:7d:2a:87:
5d:75:00:5f:1b:98:ab:0e:ed:e4:a3:0b:bd:ee:1a:
e0:4f:63:64:62:64:f0:82:f8:72:02:47:7a:c2:cd:
08:1c:1e:6d:cc:a7:f7:4a:35:a3:38:b8:d6:eb:09:
b8:d3:70:2d:3d:b7:08:7f:df:70:89:f4:d4:40:ca:
fe:b0:8f:b6:c7:78:7b:7d:9a:5b:c1:a6:c3:4b:92:
51:bb:6f:99:d5:39:52:44:62:f9:65:a6:2b:8a:d0:
92:8a:f9:f0:5a:67:00:4b:d0:7e:05:7c:f7:1a:1a:
fe:fe:61:d0:53:d7:31:d9:fb:20:37:19:e4:42:c5:
bc:48:8f:03:1f:e0:ac:2e:a0:ce:f2:bf:ff:bd:b3:
ea:0e:6b:76:58:44:95:ee:7a:5e:f1:00:89:c3:00:
88:e7:1b:c5:5c:d7:69:3f:79:46:62:e2:43:f0:7f:
b6:b9:02:f2:9d:d0:54:8b:cc:b2:c6:dd:15:99:65:
76:f1:5d:d0:e3:c7:c7:f8:72:46:f3:7b:9b:25:e7:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0B:EC:6E:99:DD:6D:D9:28:EF:F0:93:35:6D:D2:D8:6E:9F:EC:8F
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/541DF4200E3B11ED8C6EB5E2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.24.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:20:36:20:13:9c:0c:0e:d0:0c:5d:da:ee:3c:86:99:7e:b6:
60:38:fd:e2:32:d7:a3:af:82:18:8c:be:1c:fe:00:74:28:03:
d2:26:84:6f:c9:0d:1e:df:b8:eb:1a:e9:84:2c:fa:b7:4a:5f:
8e:00:4f:e3:20:cf:09:e2:2c:e7:b4:5f:8b:48:17:fb:84:a2:
c5:6a:f3:e8:1d:16:e8:8f:7c:0e:c8:6a:6c:07:c3:e1:0d:d8:
4d:d0:6e:40:06:78:85:58:de:d6:77:ab:19:af:23:8e:82:7b:
7b:2b:3c:da:97:f1:38:cc:3c:f0:4b:27:58:ca:fb:fa:10:4d:
14:dd:f6:bd:5b:23:f9:3d:e5:a3:1f:7d:0a:1c:48:7b:11:f6:
d1:ee:1c:80:1b:8f:84:10:5b:04:dd:a3:bf:1b:07:20:8c:c4:
be:1e:b7:17:0a:8d:08:50:d9:13:a9:84:2d:5e:21:71:23:bb:
6d:5a:39:8b:03:31:70:02:84:ae:0b:1d:90:e6:de:ca:81:09:
69:96:9d:46:7b:d8:29:db:5e:2c:6c:2a:c6:1d:ca:a8:fe:98:
ba:ca:14:5d:95:4d:bb:cd:09:4f:7f:15:5c:b8:53:2f:18:79:
96:88:e6:d1:94:d8:7b:3b:24:62:e1:45:4d:b2:3d:d3:eb:d4:
91:ad:de:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org