Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/808F121A22E511ECA76EFA77D8A014CE.roa
File: 808F121A22E511ECA76EFA77D8A014CE.roa (raw, json)
Hash identifier: d/T9QHMkiEfWCBFKtjqY2Exb8ObuSQREuUt2QGVJ5Mg=
Subject key identifier: 58:AD:20:1B:0C:00:97:D0:9F:67:A8:9B:D7:D2:C7:1B:B9:16:95:E3
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 038E
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/808F121A22E511ECA76EFA77D8A014CE.roa
Signing time: Fri 01 Oct 2021 18:29:24 +0000
ROA not before: Fri 01 Oct 2021 18:29:17 +0000
ROA not after: Wed 08 Oct 2025 18:29:17 +0000
asID: 1239
IP address blocks: 192.142.232.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Jul 2022 06:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Oct 1 18:29:17 2021 GMT
Not After : Oct 8 18:29:17 2025 GMT
Subject: CN=61575384-a751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:11:9e:7c:6b:96:42:fd:d5:6a:e8:28:85:3c:
58:89:a9:dd:05:62:09:7e:7f:12:c9:b3:9d:c7:91:
e2:a2:5e:75:d7:bb:66:8d:d9:b2:06:98:f0:1b:b4:
94:8a:ec:d9:c6:50:cf:ed:d6:0a:d0:12:11:40:44:
c6:26:1a:d6:aa:a2:e1:90:ec:ef:14:6e:bf:cd:b0:
c8:6b:79:95:b6:15:65:5f:2a:b5:32:6d:33:36:ff:
a4:1d:dc:31:63:9e:84:4f:9f:98:b3:70:e6:50:a1:
b1:d0:60:38:28:c4:c4:fd:4f:fd:eb:3a:73:bd:70:
42:b1:7e:5f:32:66:83:2f:81:6e:17:7b:4d:40:40:
79:d3:ae:a4:2d:33:24:bf:f5:98:7d:3a:9a:76:a2:
56:f3:a6:a3:ea:43:dc:f3:6b:21:26:9e:42:67:b8:
8b:56:3b:ce:da:0b:0a:ad:3e:3a:d6:7c:ba:6b:c5:
ef:0b:d7:4f:09:53:19:9a:0b:bf:cd:05:10:3a:57:
77:49:85:99:42:37:97:d0:d7:e9:86:2d:77:56:f9:
0c:ca:b3:38:5f:b9:68:79:e0:b2:9d:b1:9b:d2:75:
cc:d0:a0:28:7b:51:b8:e0:d3:43:b3:3b:7b:9a:b1:
6c:23:a8:59:59:40:3d:49:83:92:8c:ba:46:a3:b5:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AD:20:1B:0C:00:97:D0:9F:67:A8:9B:D7:D2:C7:1B:B9:16:95:E3
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/808F121A22E511ECA76EFA77D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.232.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:4a:3e:86:5e:9e:f9:ff:72:9c:45:a8:eb:f2:24:35:51:df:
b0:2e:38:5f:b6:3d:ce:ed:76:d7:45:a3:7f:54:ae:25:ff:4b:
e7:a8:08:f4:3a:19:4f:b1:3a:d0:d9:fa:de:bc:c2:6f:01:3d:
67:c1:60:7d:e1:ea:84:66:2b:ca:4c:03:44:34:30:ee:c0:7e:
77:93:ac:e6:08:80:ca:d5:39:d9:e9:b3:96:17:54:3f:23:45:
fa:1f:a7:30:14:d3:b1:59:02:be:f5:d1:8c:1a:2b:ea:35:00:
1a:68:41:31:25:91:32:de:c0:a3:b5:37:ea:6f:fa:f9:14:5e:
b1:63:4a:cd:30:86:04:54:81:ba:1c:d9:0c:27:de:e8:22:fc:
c9:64:f5:45:0e:fe:90:6c:51:57:81:05:39:9f:4e:57:a7:e4:
43:ab:69:b3:1e:f8:67:88:ea:1b:49:16:0a:49:ec:0c:3b:dc:
df:dd:9a:9b:2b:7d:d3:20:7a:c9:5f:21:e1:db:c1:28:57:50:
06:9f:3d:32:eb:d1:e6:57:dd:a7:4a:09:6c:ef:aa:b2:46:e5:
b8:d7:2c:ce:1f:7d:c9:b4:31:72:db:0a:0a:51:eb:9f:82:76:
13:a3:66:9c:35:49:97:a1:e1:88:77:7b:01:0e:ff:e2:92:7f:
19:33:4f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org