Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/687F023C506711EE8598461E4AD9E6FC.roa
File: 687F023C506711EE8598461E4AD9E6FC.roa (raw, json)
Hash identifier: EygA0xKVIm/5upbJr85QFJesB+kpgt0/aT7D5eAfZKE=
Subject key identifier: CD:14:D3:10:4E:D7:E8:17:2D:98:F2:48:4B:7B:B0:05:77:70:B4:D6
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 07A0
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/687F023C506711EE8598461E4AD9E6FC.roa
Signing time: Mon 11 Sep 2023 05:52:36 +0000
ROA not before: Mon 11 Sep 2023 05:52:33 +0000
ROA not after: Tue 13 Sep 2033 05:52:33 +0000
asID: 197555
IP address blocks: 192.142.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Dec 2023 06:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1952 (0x7a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 11 05:52:33 2023 GMT
Not After : Sep 13 05:52:33 2033 GMT
Subject: CN=64feab24-f878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:df:cb:da:bf:94:2e:3b:ef:3d:61:dc:f7:2c:
c7:2b:1c:3a:9a:42:e2:56:c7:ce:7c:79:0f:fd:2a:
15:c7:6e:76:7f:57:07:f4:d7:9c:bd:85:03:ce:f5:
83:6d:38:36:ba:5a:ea:c6:20:f9:4d:91:95:4a:88:
84:08:db:b0:d3:c2:40:4f:a1:ab:6d:04:37:2f:29:
c4:2b:98:cc:5e:da:e8:8e:86:23:26:3d:4d:a3:fc:
dc:3b:77:47:0e:f1:7d:dc:63:f7:ce:84:4d:da:f4:
c8:85:04:bc:cd:66:5c:99:7f:7b:17:4d:8b:7f:c7:
85:68:00:0d:81:12:05:1d:fe:8b:b7:56:0a:9a:f0:
91:f5:3c:f3:ac:ef:60:a1:f9:6d:90:f2:cb:26:2e:
97:e4:bc:07:01:bc:6a:83:b3:c1:55:cb:1c:4a:45:
96:cc:d8:d7:8b:ce:b3:3e:ed:86:3d:05:c9:78:5e:
ff:62:38:3b:e9:a6:8a:5d:63:a9:38:da:46:76:46:
99:64:21:8a:61:30:f2:06:19:dc:7f:40:ee:c5:3c:
38:a3:bf:a7:d2:0f:a1:fd:5b:ab:af:0e:1d:c5:4e:
e3:1d:e2:6f:b5:fa:d8:44:03:d8:44:5c:63:0c:be:
0f:a4:14:6b:84:ad:7b:97:e9:ff:fc:d2:4e:d3:61:
e1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:14:D3:10:4E:D7:E8:17:2D:98:F2:48:4B:7B:B0:05:77:70:B4:D6
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/687F023C506711EE8598461E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.28.0/24
Signature Algorithm: sha256WithRSAEncryption
72:47:cb:19:81:44:d4:f1:72:1c:1d:74:7c:b2:f5:30:f9:a1:
42:b4:f4:77:a7:71:90:68:16:17:76:d0:5f:c1:38:01:3a:8c:
9b:62:9c:73:6a:5b:60:01:6f:a5:a3:23:59:3e:3c:65:6e:ba:
aa:f1:d1:36:0c:2a:66:0d:9d:43:b2:b8:73:61:4e:2e:71:8d:
59:e2:7c:88:b8:d2:f4:93:9d:21:15:db:a1:fd:be:69:2d:9d:
21:4f:1d:53:ad:c5:b0:71:cc:13:39:f0:d9:e8:a0:23:87:c0:
e9:72:f8:d2:e1:5a:cf:41:a7:b6:71:68:2b:e0:26:ea:85:92:
18:16:e8:00:02:02:d7:54:6f:51:6b:7b:d6:de:5e:cc:5c:a0:
ff:c1:e3:5e:ba:e7:0b:33:5d:22:ed:97:43:2f:4d:f4:f9:bf:
97:34:a8:a9:3c:a4:4e:29:7c:c8:8a:fc:cc:c9:4e:e4:f5:c3:
0d:b1:2a:32:f2:53:35:44:fb:fd:e6:85:d2:6f:cf:35:f2:76:
11:43:60:14:94:7c:3d:45:55:74:4f:27:2a:c1:7f:32:17:3b:
f3:05:a9:d9:72:14:b5:4e:7d:5c:84:2e:8d:24:7d:e4:cd:fd:
2b:ac:fb:82:3f:b6:87:fd:3f:8a:45:74:34:b8:69:54:18:60:
9b:62:6b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org