Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/60F0464CEC2B11EEABC8E794775412E6.roa
File: 60F0464CEC2B11EEABC8E794775412E6.roa (raw, json)
Hash identifier: M2kzOwhi90oh2Q3D4tPz5YyHBY7v7MXBbRsnw+U4zdI=
Subject key identifier: 7F:84:8F:61:A9:33:BE:60:D3:22:31:50:EE:2D:3C:BE:77:D5:14:87
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0914
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/60F0464CEC2B11EEABC8E794775412E6.roa
Signing time: Wed 27 Mar 2024 11:15:55 +0000
ROA not before: Wed 27 Mar 2024 11:15:51 +0000
ROA not after: Wed 22 Mar 2034 11:15:51 +0000
asID: 64286
IP address blocks: 192.142.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jun 2024 05:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2324 (0x914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Mar 27 11:15:51 2024 GMT
Not After : Mar 22 11:15:51 2034 GMT
Subject: CN=6603ffeb-a89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e3:d9:15:92:46:fa:95:99:c5:91:c7:52:aa:
be:2d:32:3c:1d:52:ae:cc:70:d8:dd:92:82:60:a0:
7b:31:93:b2:8e:d3:78:7d:93:4f:bc:a8:55:31:04:
3b:09:a4:b2:a6:ca:6d:38:48:f1:a1:de:c9:aa:aa:
ac:08:d9:68:b4:05:a5:0e:72:ff:44:04:4e:ab:ce:
a2:fc:89:94:dd:27:f7:a4:ea:25:42:34:23:72:64:
76:88:6d:3b:a9:fe:e5:f2:64:59:96:28:46:b4:79:
25:4d:95:3b:2d:2d:cf:7a:8b:c3:ea:b7:63:81:49:
a6:6a:2b:48:13:68:b6:ba:79:20:89:d1:c5:d0:d8:
f9:c8:3c:85:ca:06:f9:81:8a:ae:1e:6c:38:85:a7:
2d:c0:cf:d0:12:ff:9e:e1:f7:25:2c:ed:6f:7a:c7:
61:87:c0:19:4f:13:06:a8:34:fd:ec:76:d7:64:8a:
68:2c:16:e0:81:57:d0:8d:8a:52:57:f0:e9:52:7c:
66:f0:00:85:5a:b9:05:be:e5:ec:5b:d4:a2:ba:0f:
88:7f:75:44:33:f9:8d:04:09:66:bd:a9:e2:54:ec:
38:40:2b:a7:a4:98:dc:f5:05:b9:21:f7:ac:bf:1b:
48:d7:f7:5f:73:2f:9c:58:cf:7d:8d:d3:a4:09:53:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:84:8F:61:A9:33:BE:60:D3:22:31:50:EE:2D:3C:BE:77:D5:14:87
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/60F0464CEC2B11EEABC8E794775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.106.0/24
Signature Algorithm: sha256WithRSAEncryption
72:da:fb:42:8f:60:5c:7d:6a:a4:60:f4:b7:7d:7f:27:7f:05:
79:34:d4:ac:23:77:7a:89:c6:15:98:b4:fd:0d:1b:1c:65:f4:
4c:57:f6:d4:46:cb:35:dd:25:71:a1:52:47:8c:5c:d7:f8:76:
db:bc:ab:29:af:86:83:e1:3b:61:b3:44:f3:0e:ad:fd:8f:25:
d3:2d:75:e7:8b:86:98:d1:eb:92:06:f3:04:82:1d:05:77:4c:
f7:a5:ce:69:14:02:b2:66:61:e6:61:e2:0b:1f:4f:c6:4b:14:
61:bf:fb:1f:cb:0f:48:11:d2:4e:6e:3c:01:a0:93:69:d3:0d:
ce:4a:6d:c8:c9:d6:2d:d4:b2:b9:80:3e:8f:3c:a1:7a:38:4c:
15:6e:ec:3f:80:e8:8a:f1:88:87:a8:01:84:97:72:c0:ec:2f:
6d:30:61:10:e5:d1:1c:96:42:a2:0f:c8:02:a8:41:df:1b:96:
1f:a2:62:d1:e6:ef:01:21:25:ed:3c:c0:56:bb:e0:0b:8c:62:
e2:c2:53:90:50:9b:d0:b5:71:9d:cc:10:86:e1:bc:8b:fd:7a:
96:12:07:6c:41:85:c1:4f:2f:a6:ed:27:f0:e8:1a:c1:48:93:
c3:41:a0:33:ca:ac:1a:8d:39:c6:9f:b9:82:2a:a9:ab:d4:dd:
8e:e6:e1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org