Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5E573A5C515E11EE93D8BD2D4AD9E6FC.roa
File: 5E573A5C515E11EE93D8BD2D4AD9E6FC.roa (raw, json)
Hash identifier: sIH5BDbNgVJAdMlD/+EXj6Mly4B1HZf5mUGlICMWF40=
Subject key identifier: 0B:E8:40:AC:51:3E:04:2F:B4:E6:25:78:C2:54:F9:C1:3A:8B:42:EB
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 07A8
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5E573A5C515E11EE93D8BD2D4AD9E6FC.roa
Signing time: Tue 12 Sep 2023 11:20:25 +0000
ROA not before: Tue 12 Sep 2023 11:20:21 +0000
ROA not after: Tue 13 Sep 2033 11:20:21 +0000
asID: 1239
IP address blocks: 192.142.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Sep 2023 05:37:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1960 (0x7a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 12 11:20:21 2023 GMT
Not After : Sep 13 11:20:21 2033 GMT
Subject: CN=65004979-17ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:a0:ae:87:ef:95:56:a8:e2:e9:d2:01:9b:
77:b4:3a:2a:66:8a:9a:37:3c:77:fe:2e:7b:9e:50:
58:8b:65:e1:9a:48:47:d3:a2:be:7b:68:73:83:52:
56:0f:7b:54:d5:cd:d0:3f:1c:c5:ff:4b:34:57:83:
be:1a:d8:bb:88:08:67:49:a6:7f:d2:21:38:e9:58:
8b:6a:72:e0:2e:39:c3:29:39:4d:6a:a1:f5:34:b2:
78:aa:00:95:33:20:9a:d6:fa:23:0d:63:16:44:e1:
e7:2e:e4:c2:da:7f:21:15:1f:2a:45:6c:fe:87:3f:
f0:22:a6:c3:70:34:ba:8b:b0:6e:74:96:13:36:c9:
a0:69:68:e6:44:eb:8d:cc:1b:26:cb:3f:82:e8:54:
6e:a5:7f:0e:5c:41:ec:24:45:5e:ff:db:c0:68:6c:
ce:69:54:8a:cd:ce:de:66:68:18:e8:65:8e:fe:3e:
1f:49:32:fd:b1:96:f7:67:16:65:35:56:7a:52:ec:
1f:89:83:7e:c7:fa:57:b8:6f:f3:c3:19:97:bf:4a:
c9:29:97:50:c6:08:d1:75:e4:25:f1:15:b3:7b:0e:
ec:e1:db:32:a9:cb:02:3a:ca:f5:4a:7b:b1:3c:b5:
0a:0b:d0:d4:7c:1b:4f:1c:c8:c5:cf:8f:2c:3b:da:
50:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E8:40:AC:51:3E:04:2F:B4:E6:25:78:C2:54:F9:C1:3A:8B:42:EB
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5E573A5C515E11EE93D8BD2D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.248.0/22
Signature Algorithm: sha256WithRSAEncryption
09:20:f3:b7:08:7f:c5:ed:8a:94:2f:e6:6f:cf:4b:31:8e:83:
69:8d:4a:5d:36:55:4d:42:7d:6a:b4:02:45:c1:07:ad:bf:20:
a7:50:74:63:2f:12:fb:cd:04:c0:ca:f7:80:10:8d:5c:a0:83:
ea:04:b0:ff:4d:19:c9:2f:d2:75:8e:6c:85:88:ba:bb:be:4e:
bc:3a:a5:92:39:44:3b:e8:68:a5:ac:6c:b6:a6:6c:bf:cc:25:
94:7e:13:aa:ab:d6:44:28:86:5e:c6:34:8c:c2:93:64:92:3d:
6d:f6:07:26:db:0a:bb:45:ee:01:10:a4:a8:c7:bd:a4:e4:be:
eb:59:3c:23:a1:e4:a1:83:de:bd:41:04:58:78:19:69:e9:bf:
dd:6a:d5:f4:4c:d3:d7:65:04:7c:09:d5:ba:c1:d9:0c:bc:fc:
bf:20:dd:f9:f6:b0:74:5c:29:ea:32:9b:85:9b:74:25:3b:50:
11:2c:d1:58:9c:a8:ca:df:87:bd:82:6d:0e:49:59:e2:4d:dc:
8d:be:62:ec:b3:f4:4c:ab:7d:49:25:b4:46:44:17:45:62:e0:
04:0d:ca:77:d7:32:31:80:18:a1:31:43:90:93:dc:64:20:3f:
51:2f:6e:46:32:47:57:5b:e8:fd:30:61:18:d3:b9:29:d8:43:
3c:b3:5a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org