Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/69CD565C986211ECAE5E616B5A40D577.roa
File: 69CD565C986211ECAE5E616B5A40D577.roa (raw, json)
Hash identifier: 8Dj+gUMxAsMuB1X7p/kUgS/t+Lsk5z8eVjBbrOwuUvk=
Subject key identifier: 53:4C:C1:CA:CD:29:19:1B:5D:A8:DF:29:21:5A:44:C3:AF:56:03:D0
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 044B
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/69CD565C986211ECAE5E616B5A40D577.roa
Signing time: Mon 28 Feb 2022 06:48:19 +0000
ROA not before: Mon 28 Feb 2022 06:48:15 +0000
ROA not after: Mon 21 Feb 2028 06:48:15 +0000
asID: 43233
IP address blocks: 192.142.0.0/19 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Mar 2022 06:10:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1099 (0x44b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Feb 28 06:48:15 2022 GMT
Not After : Feb 21 06:48:15 2028 GMT
Subject: CN=621c7033-bee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:c2:dc:ed:08:31:7a:48:dd:13:1a:fc:46:
c4:10:e5:3d:ed:26:ac:e7:29:df:79:0c:bb:03:e6:
35:fc:3f:73:8a:e4:63:cf:15:be:8b:4a:ce:99:dd:
4e:fc:c9:20:50:a9:c1:b2:bf:d9:23:3b:00:56:95:
4a:bc:9f:02:ac:67:4e:0a:f3:d6:fb:1f:40:3f:5b:
fe:bf:61:2f:02:80:2b:74:87:1f:1c:0b:4c:47:c5:
e7:d1:39:3f:2c:67:bc:e9:f5:c9:f6:b9:17:a7:48:
2e:8b:7c:7a:55:a5:28:d2:c1:97:15:ed:7a:6c:06:
21:0b:08:d8:b4:0e:a1:48:a5:9d:56:4e:3b:9d:94:
3e:33:cc:a2:f1:f2:f2:43:40:bd:86:3b:ac:7e:d2:
0b:4d:a8:44:ce:d6:93:00:9e:b0:ab:df:78:be:9e:
21:77:66:0b:9c:bf:98:fe:09:86:b6:82:7d:d4:c4:
8e:11:b2:a2:b5:fd:03:9d:82:36:0c:24:7d:c8:0b:
6e:c3:e7:29:71:c4:82:84:71:91:46:eb:64:c2:14:
53:c0:bd:ee:ed:0c:41:a4:30:59:2f:7e:e3:a0:75:
08:b9:41:5e:1a:6d:83:bc:ad:80:6e:f0:27:d4:d8:
04:9f:c3:cc:14:d8:de:51:14:25:7c:8b:68:73:77:
85:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4C:C1:CA:CD:29:19:1B:5D:A8:DF:29:21:5A:44:C3:AF:56:03:D0
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/69CD565C986211ECAE5E616B5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.0.0/19
Signature Algorithm: sha256WithRSAEncryption
aa:91:28:b8:32:47:7f:19:b7:e4:49:9f:4a:7b:4b:d8:6a:d3:
b0:d8:00:ed:a4:9c:c2:93:35:96:3f:05:87:23:a4:d1:8a:7f:
45:18:ef:32:05:f1:bf:68:52:24:e0:73:6a:02:26:3f:61:0f:
34:18:89:9a:07:ce:12:d6:e0:f3:90:88:2d:62:5e:8f:55:e1:
eb:1a:ef:c9:cd:b8:1f:c8:17:54:5e:03:2d:c3:0c:af:f6:71:
d6:a7:10:07:9f:b6:d2:9e:bf:a4:5f:a2:d6:4f:6c:cd:10:46:
18:7c:fb:4e:af:61:cd:f7:74:54:52:ec:cc:a5:26:ac:64:3f:
f9:94:aa:75:5e:51:5e:3b:48:87:28:44:fc:29:1e:0f:1f:65:
50:98:eb:25:0a:d2:a0:e7:a2:f1:db:8a:1c:fd:65:cd:c6:fb:
20:95:35:21:92:7e:7a:7a:e4:2d:d0:1b:08:4a:08:47:7b:0e:
26:21:69:33:72:f0:9c:b5:22:75:99:ab:48:16:db:e7:d7:d3:
f2:67:f7:ae:dd:58:36:da:db:9c:a0:00:6f:97:80:18:33:bc:
bc:7a:ce:e8:1f:18:0d:54:78:9f:99:d1:a5:21:a0:01:28:08:
e6:2b:12:9c:cd:a7:b4:a1:ce:c8:07:a7:d2:4a:44:b1:81:6d:
22:de:64:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org