Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/748F4F28788A11EEA295DD1D4AD9E6FC.roa
File: 748F4F28788A11EEA295DD1D4AD9E6FC.roa (raw, json)
Hash identifier: i0DHhXTFE13XaYlXKtN1vbgZVjHOFICoTHaCAqWO/aE=
Subject key identifier: 58:42:28:4D:19:C0:0A:C5:12:63:D5:65:AA:7E:04:0B:E2:7E:6D:C8
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0810
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/748F4F28788A11EEA295DD1D4AD9E6FC.roa
Signing time: Wed 01 Nov 2023 07:44:15 +0000
ROA not before: Wed 01 Nov 2023 07:44:11 +0000
ROA not after: Tue 01 Nov 2033 07:44:11 +0000
asID: 21769
IP address blocks: 192.142.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 07:05:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2064 (0x810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 1 07:44:11 2023 GMT
Not After : Nov 1 07:44:11 2033 GMT
Subject: CN=654201cf-b55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:8c:ca:0f:55:2c:13:6e:48:b9:2c:33:52:
3b:60:ab:ce:c6:06:1a:f3:10:57:65:9c:0f:73:01:
3b:e3:91:71:38:99:ed:43:56:73:17:67:23:99:74:
4e:bb:c6:ba:a4:a4:ff:4e:48:3f:a0:24:4d:9d:9f:
6b:23:35:87:03:53:5a:f7:d3:48:75:92:30:6d:0f:
32:40:01:67:21:91:ae:a2:aa:1c:de:87:6c:23:81:
9c:e9:00:23:62:13:d6:28:4e:a9:f6:79:c4:ba:d1:
a9:5d:be:e8:e4:0c:e0:2e:09:07:ca:d4:34:6c:95:
d7:0a:9c:7d:4a:3c:69:84:5a:90:ac:c9:95:07:90:
56:05:70:73:3a:2a:fb:3b:18:1a:6a:1b:b4:fd:09:
49:a5:73:7d:b3:b2:11:b0:a3:61:2c:f5:1e:23:f9:
9a:dc:2e:31:f9:fd:b2:d3:8e:cf:3e:bb:e6:2d:22:
86:99:a7:d6:d3:da:6e:bd:92:6c:b3:ac:67:e5:e7:
32:7b:c7:6f:53:9a:c0:86:5d:27:05:32:ac:7c:49:
92:30:70:f8:8d:32:3f:d3:96:68:49:86:48:3c:fa:
49:74:4a:84:5d:ba:fc:ae:1a:69:10:22:90:16:b9:
98:01:55:e4:ba:f4:f7:a7:70:83:3c:c1:16:87:0b:
66:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:42:28:4D:19:C0:0A:C5:12:63:D5:65:AA:7E:04:0B:E2:7E:6D:C8
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/748F4F28788A11EEA295DD1D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.136.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:95:24:fd:c1:de:c7:34:d5:f0:86:52:bc:2d:4b:a3:74:4a:
ca:83:a4:62:b1:77:3e:19:d5:fb:bf:47:b2:19:6c:54:61:f4:
4e:c3:ae:1d:e5:60:a1:53:d9:9e:d5:9c:37:61:de:45:a1:7d:
96:b7:6e:85:cb:63:b2:e0:9e:eb:db:7c:16:58:9a:05:d7:d7:
5d:11:cc:12:53:78:91:d6:55:41:cf:d3:dc:c8:71:9b:88:d9:
61:1a:1f:5a:5a:fe:69:d4:e8:50:61:10:18:38:9b:ba:fb:6c:
36:bf:1e:46:e6:8c:5d:ca:2d:70:82:84:fd:66:4d:16:0d:28:
98:2f:0f:3d:03:fd:e7:45:9f:c4:df:21:7a:5e:a5:d3:d1:e4:
f3:8a:bf:e4:58:ea:d5:2b:60:f3:c0:23:56:83:16:50:dd:d3:
34:d5:de:13:0e:8b:fa:62:80:8f:e0:8d:c1:a1:83:6b:09:27:
3a:f6:41:cb:4d:70:fa:8f:64:10:80:8a:68:99:18:8f:a1:71:
bb:7f:e8:f3:01:12:06:3d:d8:7e:26:37:62:0e:e7:94:74:89:
ba:84:ce:a3:5a:7b:fe:e5:23:7e:c5:9a:08:43:8c:3f:6c:3b:
64:ef:ff:6a:f1:f6:bf:fb:7e:9d:9b:ca:ba:bd:bd:34:0d:08:
8c:51:75:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org