Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/65624C504D4011EE8DF8D5144AD9E6FC.roa
File: 65624C504D4011EE8DF8D5144AD9E6FC.roa (raw, json)
Hash identifier: NIkt2x9OGDG11RxHn67snfm5XuAqQPhlfjwu+AeVpDo=
Subject key identifier: 0A:B4:76:F9:F7:B5:83:F8:5E:78:3E:F0:80:9B:9A:FA:06:16:3A:8E
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0794
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/65624C504D4011EE8DF8D5144AD9E6FC.roa
Signing time: Thu 07 Sep 2023 05:35:47 +0000
ROA not before: Thu 07 Sep 2023 05:35:43 +0000
ROA not after: Wed 07 Sep 2033 05:35:43 +0000
asID: 208949
IP address blocks: 192.142.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Oct 2023 05:36:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1940 (0x794)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 7 05:35:43 2023 GMT
Not After : Sep 7 05:35:43 2033 GMT
Subject: CN=64f96133-dac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a2:97:71:88:61:80:01:05:15:f1:1f:da:9e:
9e:c3:79:63:f7:ad:5a:d7:cc:13:41:b3:57:af:f0:
0e:d1:b7:ef:ef:4c:23:24:13:75:8a:de:89:17:c5:
f3:8a:87:17:5c:41:31:22:d4:28:ae:d7:3d:a8:64:
cd:79:53:93:de:5b:4b:ae:59:b1:44:0e:e1:ce:dd:
4c:d5:e1:c9:3d:96:2f:bb:0a:48:e3:72:0d:cc:38:
ec:ce:f2:59:4c:7c:df:fb:10:e0:08:9c:dd:0a:1a:
22:0f:a0:3e:66:57:06:e2:6a:8f:32:77:8d:6f:4b:
39:53:39:57:49:b5:92:66:0a:35:12:9c:a4:72:ed:
3e:97:fd:36:8c:12:18:ec:3c:f7:8d:df:88:88:1e:
3d:b6:ba:8e:41:08:0a:09:97:d1:f9:6a:98:7e:23:
48:3a:a6:2b:40:fb:fe:9f:63:2f:36:6d:73:ca:ee:
49:bc:3d:85:a0:76:3f:f9:e3:cb:1a:b4:03:53:b5:
e3:ac:18:4b:f4:fc:be:87:8b:97:71:dc:e6:d0:82:
31:a7:c4:06:0d:57:84:18:ae:a0:24:b0:3d:c5:39:
09:75:40:9a:24:82:19:3c:b8:2e:0a:60:3a:6e:89:
74:67:47:54:8e:a4:21:89:c5:cf:39:f8:e4:a8:0d:
3a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B4:76:F9:F7:B5:83:F8:5E:78:3E:F0:80:9B:9A:FA:06:16:3A:8E
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/65624C504D4011EE8DF8D5144AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.140.0/24
Signature Algorithm: sha256WithRSAEncryption
91:48:60:11:4a:d3:7e:5b:5a:02:7f:07:6c:5c:00:30:75:18:
87:6c:03:50:4e:34:12:06:53:6a:08:42:01:f1:94:b6:13:11:
65:6d:19:0b:b3:a1:8d:07:fb:f1:15:52:5f:42:23:63:5e:63:
cc:bf:c3:b4:5e:8e:65:ab:a5:31:36:66:fb:5b:d5:e2:0d:06:
e8:74:1b:96:81:1b:c9:4d:66:cb:23:32:1e:f0:05:ae:b1:47:
3a:4a:70:34:d9:1b:a9:ef:41:3b:2c:2e:cf:dd:81:31:ad:6f:
d4:3c:74:31:bb:09:40:97:3f:67:67:28:45:75:f9:c8:00:26:
e1:96:23:58:19:66:7c:fe:95:82:56:24:c0:35:d2:a0:4c:d9:
e4:a5:a8:e6:7a:35:65:06:96:9b:d1:c7:5b:57:19:00:c3:02:
1a:4f:2c:80:7f:c0:22:1c:1c:8b:d9:d3:50:65:77:74:69:8f:
c7:1b:6a:6e:1c:b9:ea:49:b3:b7:6d:a4:0d:64:60:3c:a5:d8:
58:87:b0:aa:e0:b5:54:ee:34:7d:e6:e1:f4:c5:c0:28:5b:cd:
c5:fe:e1:2d:66:2d:fc:7d:3e:97:be:71:d0:9b:85:aa:b1:ff:
ee:89:66:18:a5:06:f5:b0:70:27:f3:0f:e7:53:8c:ba:c6:5e:
56:03:62:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org