Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/7DC4F15A71DF11ECAB9A93E75A40D577.roa
File: 7DC4F15A71DF11ECAB9A93E75A40D577.roa (raw, json)
Hash identifier: cAyc04BS9BobzCFGJOiqna+r7ULLPMrT/cb/RuNStBc=
Subject key identifier: 35:20:C3:8B:6D:88:A1:00:8E:99:F1:03:7C:82:A0:67:4E:1F:71:81
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 040C
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/7DC4F15A71DF11ECAB9A93E75A40D577.roa
Signing time: Mon 10 Jan 2022 06:35:24 +0000
ROA not before: Mon 10 Jan 2022 06:35:20 +0000
ROA not after: Tue 13 Jan 2026 06:35:20 +0000
asID: 3223
IP address blocks: 192.142.240.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Aug 2022 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1036 (0x40c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jan 10 06:35:20 2022 GMT
Not After : Jan 13 06:35:20 2026 GMT
Subject: CN=61dbd3ac-af5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1c:73:ae:a3:2c:d8:d9:9a:ce:04:85:30:d1:
56:a5:2c:2d:e9:72:ca:d8:78:08:e2:ba:47:5e:73:
c2:31:c1:27:74:d0:76:1f:39:62:8a:95:55:a3:e9:
0f:21:78:52:de:18:a0:99:a6:5e:21:a0:dc:e3:60:
4b:aa:4a:85:ed:d6:14:81:df:e3:da:dc:d6:71:6e:
6c:fb:4d:dc:91:2b:71:81:23:0e:2a:3d:c5:ee:2c:
37:a1:52:8b:7a:3c:78:85:79:7d:af:90:b5:be:8a:
14:b1:c7:a7:44:a7:00:bc:34:1b:3c:35:c5:7c:39:
5c:0c:65:bd:03:04:44:d4:d9:a0:0a:ec:c9:3d:08:
ca:a2:43:54:37:35:29:33:11:64:35:54:c9:0c:b7:
b2:03:a6:bd:fc:f2:39:a2:7a:c3:bc:70:3f:96:8e:
e9:5a:f5:b3:f5:0d:5b:62:5b:96:29:2b:40:14:25:
24:90:be:d4:64:d5:5c:47:1a:a0:b9:ce:17:9c:40:
94:e4:05:6d:b0:c9:e5:82:a5:d1:8b:f9:3c:6e:88:
2b:22:89:ac:e3:85:0e:bb:01:d3:43:b1:a2:83:b1:
5b:b7:d6:cb:cb:56:00:b7:d9:82:c5:ff:38:fd:55:
59:00:4b:f0:a8:bb:2c:8f:24:73:6b:be:ca:c6:13:
47:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:20:C3:8B:6D:88:A1:00:8E:99:F1:03:7C:82:A0:67:4E:1F:71:81
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/7DC4F15A71DF11ECAB9A93E75A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.240.0/22
Signature Algorithm: sha256WithRSAEncryption
91:2b:34:3c:1d:36:47:fa:86:bf:b4:06:a4:52:07:17:15:2a:
10:8b:73:4a:57:9a:58:43:ee:f0:82:26:81:06:0d:31:97:c5:
31:1b:93:f2:1d:a6:4b:85:34:ab:00:bc:21:c9:d7:37:f8:62:
89:6a:d9:fe:5f:c5:52:6c:fc:12:26:09:91:ae:41:14:da:71:
00:04:53:b1:91:ae:c7:66:44:4c:d8:25:d1:90:24:44:57:51:
56:30:14:62:9a:2e:f8:3b:09:c5:9a:ab:76:f5:b4:f4:8e:6a:
55:0c:33:80:26:60:f6:a9:fa:14:49:e9:f7:a2:d9:33:69:21:
34:28:87:34:c4:48:97:5b:73:6e:05:27:a1:f4:da:80:82:f4:
bb:11:cc:f6:46:54:ef:2e:73:78:f6:ff:35:d3:e3:26:f9:22:
16:6b:80:be:37:a6:c6:e8:d4:7b:14:88:5b:c2:f4:4f:1d:b2:
c7:c1:10:5b:4f:3c:28:a8:cc:43:47:8e:84:23:a5:e6:3f:48:
90:db:c5:eb:4f:7e:8c:9d:0f:ce:a1:01:3d:b5:1b:ac:76:f7:
83:56:22:b5:06:f9:b6:a0:93:2b:b9:6b:10:40:55:c1:db:a5:
6b:2f:a6:8b:41:c5:0c:e0:ba:27:f7:31:3a:1e:2d:e7:8b:fc:
4e:cb:f2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org