Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/61073BC6CA6811ED9A9D9DD2F1222468.roa
File: 61073BC6CA6811ED9A9D9DD2F1222468.roa (raw, json)
Hash identifier: x7DSYLLJOaljCFEGHcVPcGCWdInsKoUkFVQcDHnsf6Y=
Subject key identifier: CC:AE:D3:0A:4C:98:EF:B1:97:9C:68:01:93:CA:92:5C:02:7D:14:96
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0686
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/61073BC6CA6811ED9A9D9DD2F1222468.roa
Signing time: Fri 24 Mar 2023 17:21:57 +0000
ROA not before: Fri 24 Mar 2023 17:21:52 +0000
ROA not after: Wed 16 Mar 2033 17:21:52 +0000
asID: 64286
IP address blocks: 192.142.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 05:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1670 (0x686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Mar 24 17:21:52 2023 GMT
Not After : Mar 16 17:21:52 2033 GMT
Subject: CN=641ddc35-1424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:4c:04:80:b6:57:5c:33:07:62:36:80:a4:
61:d3:68:07:91:15:bf:9f:05:c2:95:3d:a5:02:7b:
c1:e6:08:75:dd:0d:39:fd:bf:6a:04:c1:c4:cb:ba:
63:9e:3e:64:e0:e4:50:50:b8:ab:d9:a5:a9:05:c2:
48:ca:58:5a:2e:8a:f9:ec:a0:92:ca:63:ed:ba:e1:
1e:13:52:fa:40:d9:7b:16:fb:d2:cb:54:72:12:4a:
78:77:d9:27:8c:1c:50:01:2e:69:51:b7:16:57:ab:
94:14:28:f3:b1:b3:2f:97:f0:c1:0f:04:ad:88:cd:
bb:85:39:ff:88:23:b4:29:90:24:e2:e7:87:5f:7e:
6f:d4:5f:55:6d:6e:d9:fb:64:bb:35:53:11:d9:22:
fd:aa:2a:82:c3:a4:7e:ba:0e:22:25:79:3b:20:48:
60:94:b8:18:80:42:01:2f:15:0d:db:9d:7e:99:a4:
10:e1:74:da:9e:ce:cc:be:96:6b:45:c2:68:38:23:
18:84:9a:38:bc:8a:31:a9:c5:39:55:05:f3:92:42:
36:f4:ec:d1:19:0b:59:1b:c5:70:0b:9a:5e:79:37:
9f:27:b7:12:96:e5:7c:6d:d0:5b:34:d4:97:9b:80:
d0:2b:7f:91:98:90:8f:17:42:f6:2b:a7:9a:c6:5d:
f8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AE:D3:0A:4C:98:EF:B1:97:9C:68:01:93:CA:92:5C:02:7D:14:96
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/61073BC6CA6811ED9A9D9DD2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.29.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b9:a9:d4:35:4f:45:4c:8b:a5:66:9b:d3:dd:84:30:ee:8d:
15:4d:66:15:8a:36:6e:24:b0:54:77:a3:45:ca:97:d2:ed:2d:
30:c5:62:36:63:d8:fb:7f:a7:28:c1:7e:54:79:32:cc:4d:f5:
de:54:61:02:60:75:3b:82:c2:bf:a1:49:96:dd:e9:f0:54:37:
8c:00:70:fe:d8:5c:62:d8:5f:04:a3:7a:65:26:6d:10:a8:2f:
f4:a2:2b:cb:df:99:ef:b4:34:38:39:ad:8e:00:d1:72:6f:5d:
8a:d7:0b:73:15:1a:77:39:9d:96:5b:a1:74:58:cf:24:9e:f0:
a6:05:43:88:ab:01:12:d9:a0:4c:7f:a7:bf:89:0e:36:c4:59:
2e:4b:1c:8a:91:e6:63:0e:ee:91:eb:a7:93:82:97:d8:8b:cd:
67:00:92:8b:04:b9:6b:f9:32:e0:c8:7b:0b:42:71:97:43:e2:
da:cd:f8:47:fa:8f:18:f3:25:fa:92:20:58:56:c1:c5:e0:d2:
b7:93:dc:86:02:72:56:00:e7:d7:a3:79:27:7d:28:0a:ee:bb:
aa:a9:19:67:3d:31:8e:ec:ad:db:eb:b9:9c:45:1f:0b:fb:93:
65:35:99:6a:01:29:0c:55:11:d0:5d:01:01:1e:3b:b2:ca:b9:
52:91:86:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org