Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5996B51ADCE211ED82368A11306D8C1D.roa
File: 5996B51ADCE211ED82368A11306D8C1D.roa (raw, json)
Hash identifier: w+gQVHADoMRUribBAIm5g2RYh9e9eYFU1yk9y0TA6Gw=
Subject key identifier: 16:E8:B2:E1:4A:F7:39:4D:91:57:0D:DB:47:A1:41:8F:0A:59:8A:6F
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 06A5
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5996B51ADCE211ED82368A11306D8C1D.roa
Signing time: Mon 17 Apr 2023 05:40:24 +0000
ROA not before: Mon 17 Apr 2023 05:40:19 +0000
ROA not after: Wed 13 Apr 2033 05:40:19 +0000
asID: 60707
IP address blocks: 192.142.108.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 06:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1701 (0x6a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Apr 17 05:40:19 2023 GMT
Not After : Apr 13 05:40:19 2033 GMT
Subject: CN=643cdbc8-15a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:ec:11:97:ae:4c:b5:a2:2c:1e:e3:a9:79:
c0:05:26:b0:fa:f9:78:8c:64:e1:e2:e8:b7:3a:7d:
5e:9b:51:bf:63:96:a2:87:fe:98:92:87:e7:16:3d:
55:ee:43:7c:58:b8:35:e5:89:fd:ad:3b:95:af:eb:
30:b0:cf:6e:4e:ab:ae:59:ab:ab:dd:2a:9e:31:72:
2d:3f:b1:a5:60:92:a5:8a:42:2e:bc:42:06:c1:c6:
5a:be:2f:9b:0b:9e:d0:74:97:ec:35:73:51:93:c3:
52:01:36:76:1b:f5:1d:f3:64:aa:14:21:27:f9:8a:
49:e7:f7:13:dd:d6:b8:78:a3:53:21:ad:de:ad:c2:
cf:45:91:54:d4:36:86:59:d7:8a:b2:36:b6:c2:56:
10:37:a0:7d:91:36:f4:0e:29:16:2b:f3:2c:9c:b8:
5b:a6:ae:47:ad:fb:30:f1:98:df:73:45:ae:74:92:
f1:5b:6e:f0:c2:e2:d2:55:c5:19:be:47:12:17:db:
99:37:86:5f:c4:01:31:e3:bb:50:d3:eb:c4:96:d8:
16:13:e6:54:7a:1c:db:0a:bc:67:46:b1:6e:41:e8:
52:11:f9:61:23:75:8c:15:8a:23:f7:87:9e:ca:f4:
c8:cc:fe:f1:a5:81:ca:04:39:8f:f7:0f:02:d8:6c:
5d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E8:B2:E1:4A:F7:39:4D:91:57:0D:DB:47:A1:41:8F:0A:59:8A:6F
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5996B51ADCE211ED82368A11306D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.108.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:3d:47:9a:e5:5f:5c:12:2f:ce:78:c4:a9:57:13:d8:12:6a:
cb:b9:04:86:3b:93:4a:62:cb:97:cd:4b:1d:c6:ad:a7:e9:dd:
77:b6:54:ca:91:5f:f4:a1:d2:2c:fd:e3:5d:73:f9:6b:a7:5f:
be:16:e9:30:03:b5:55:93:61:01:2f:c2:3f:fc:39:ef:07:7f:
a9:bc:4d:03:e3:64:05:5a:61:23:b0:60:a0:34:c8:78:0c:8a:
01:14:32:4f:b1:d4:e1:f3:45:88:40:a8:22:12:c9:89:d1:fe:
8f:38:1b:7c:bd:61:5e:d4:0e:51:20:2f:b4:7c:5c:a7:0c:2f:
bf:4a:b5:bd:1e:7c:28:2b:94:a4:cc:63:2f:27:9c:88:70:66:
d7:b9:26:49:2f:03:2a:e4:cf:c6:df:8f:ff:2c:ef:12:63:b4:
76:f4:4f:b6:6f:b3:3f:84:d4:e2:17:20:03:f9:e7:60:4d:89:
1d:2b:96:03:92:e5:f9:7d:95:e4:d9:75:d5:bc:6e:83:10:f8:
b6:a9:8d:04:ec:99:e6:65:ef:22:f9:3a:ac:e5:20:19:9c:01:
d3:7f:83:00:57:2c:bd:63:7d:d8:9a:3e:b7:3d:95:00:8b:de:
f6:44:b4:b6:c7:21:38:11:05:03:c5:ad:1b:44:11:13:54:1b:
98:b2:da:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org