Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/77F5D37CECD311EEA0CF34BB775412E6.roa
File: 77F5D37CECD311EEA0CF34BB775412E6.roa (raw, json)
Hash identifier: K2ZraurbNBY6BzqmClxiQw6a3HrTAycKSNKQ7fSQrYw=
Subject key identifier: 25:0A:6F:A8:99:64:AB:56:69:8A:89:98:9C:C7:76:59:D5:AF:4B:EB
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0917
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/77F5D37CECD311EEA0CF34BB775412E6.roa
Signing time: Thu 28 Mar 2024 07:19:09 +0000
ROA not before: Thu 28 Mar 2024 07:19:05 +0000
ROA not after: Wed 15 Mar 2034 07:19:05 +0000
asID: 212150
IP address blocks: 192.142.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 17:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2327 (0x917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Mar 28 07:19:05 2024 GMT
Not After : Mar 15 07:19:05 2034 GMT
Subject: CN=660519ed-69c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:06:3b:40:7d:1c:3b:6f:87:a8:bc:70:1e:
1a:bc:1a:74:bc:81:0a:08:1c:51:47:4f:1d:44:b2:
4c:c5:70:23:67:e6:9f:d6:3b:89:a7:59:87:e6:14:
7b:ec:73:d6:fa:db:ac:cf:36:dc:a6:71:35:40:b9:
3a:07:43:87:6f:fd:8e:ea:f6:e6:cc:5e:ae:07:73:
f3:1b:ff:8f:22:a8:1c:f7:10:a6:af:ad:01:b5:fc:
25:44:83:6f:78:42:75:dd:5a:5b:51:0c:16:f4:5f:
8f:56:ba:9f:c2:0d:94:21:b9:a4:d8:bb:e8:fc:cd:
78:6d:bf:e8:c5:7c:25:6a:ec:4c:0a:54:47:d2:d1:
12:50:a9:d7:6a:3a:cd:fa:a9:b5:9f:96:db:de:58:
1b:a8:5f:3b:6d:dd:0c:3d:aa:8e:0a:d5:1e:d4:50:
f8:ad:d4:88:da:02:36:6a:52:da:5f:75:9f:53:91:
32:33:dc:6a:39:e8:9a:58:f1:5a:b8:83:53:33:db:
c4:7a:46:88:b4:82:5d:47:41:8a:9e:6d:7c:40:06:
f5:4b:56:36:ed:63:b1:88:23:19:3c:1e:8f:f5:14:
2b:de:b0:2f:a3:07:34:c4:88:7f:ed:85:1b:cd:e2:
d5:a9:24:0f:a6:34:e9:9b:21:77:f7:b3:19:fd:d6:
62:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0A:6F:A8:99:64:AB:56:69:8A:89:98:9C:C7:76:59:D5:AF:4B:EB
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/77F5D37CECD311EEA0CF34BB775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.106.0/24
Signature Algorithm: sha256WithRSAEncryption
47:53:3c:c2:7c:56:34:64:58:04:bd:71:8b:57:9b:b2:97:29:
97:ab:49:34:4b:6e:6b:23:2e:80:4c:00:ad:30:9e:66:8e:b2:
95:21:a7:05:d2:de:3a:3a:cb:77:38:de:d1:59:7b:1a:a7:d7:
c3:18:4c:25:ba:5e:db:e8:e5:1a:27:8c:e2:1b:62:27:a6:98:
5f:9c:b9:66:57:55:3a:90:dc:b9:ac:11:64:69:eb:41:80:2a:
c2:ae:f8:11:19:c0:9f:3e:b1:31:1b:02:d8:5f:8d:e5:87:dc:
30:60:11:c4:be:e7:ae:4f:99:26:26:80:84:a6:94:4d:99:74:
25:1d:c3:32:59:98:ae:39:01:d6:62:6e:8a:22:80:db:34:31:
6c:58:bc:54:35:a3:43:06:91:bc:8c:be:33:23:88:e8:82:88:
41:bd:ae:0b:59:5b:cb:eb:4c:37:1c:27:7f:c1:36:0a:5e:fa:
96:b0:6f:8c:43:16:e1:21:6c:2b:5f:f9:87:50:8d:13:7a:1b:
09:03:01:b7:14:17:3d:13:77:11:c5:8c:2e:ee:55:d6:9d:50:
b2:e9:38:a7:6e:d3:00:0d:da:77:31:e0:42:a3:a2:ac:0f:13:
9b:e1:29:66:8a:f4:ae:ab:65:00:86:42:a2:09:f4:a8:86:dd:
13:30:b9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org