Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/827EF67CDCE211ED9699E511306D8C1D.roa
File: 827EF67CDCE211ED9699E511306D8C1D.roa (raw, json)
Hash identifier: jlRKMcgdghHpsPmGVzktDB9eiqlvudNpVfoHcilzdio=
Subject key identifier: 97:3D:C6:26:3A:1A:3B:CB:F7:80:3C:44:22:5E:DF:C9:FF:9F:87:F9
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 06A7
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/827EF67CDCE211ED9699E511306D8C1D.roa
Signing time: Mon 17 Apr 2023 05:41:33 +0000
ROA not before: Mon 17 Apr 2023 05:41:29 +0000
ROA not after: Wed 13 Apr 2033 05:41:29 +0000
asID: 207429
IP address blocks: 192.142.24.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 06:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1703 (0x6a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Apr 17 05:41:29 2023 GMT
Not After : Apr 13 05:41:29 2033 GMT
Subject: CN=643cdc0d-5f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3c:29:c6:1b:d0:4d:d2:ea:99:58:2f:3d:e6:
59:ae:18:02:b2:bf:41:b9:48:02:52:b0:21:00:55:
d4:fc:f6:1f:2f:39:0a:d4:ba:cb:1e:a1:4c:55:41:
0e:1c:3e:98:58:0d:f1:2b:0c:ad:b7:a7:7e:ec:2e:
91:97:26:8a:cb:fc:30:fb:66:1d:21:c2:a3:d2:a4:
16:20:65:1a:a7:10:c2:1a:0a:66:82:5c:1b:45:d0:
bb:13:7a:3e:68:c8:3a:00:ac:da:2c:da:40:b2:c2:
41:6d:a4:44:4d:91:f7:17:e9:71:76:bd:cf:2e:78:
2b:61:ea:e5:64:4a:31:a4:c7:7b:f8:1b:bd:78:e2:
85:92:36:b8:81:94:e4:85:29:44:06:dc:57:99:ce:
4a:ac:37:f3:fd:b1:04:eb:55:dd:7d:bc:e8:93:e6:
47:08:78:f2:51:05:0d:91:82:ad:36:17:e9:45:ea:
6a:bb:e0:2c:cb:0e:3a:41:4d:6f:1c:70:1f:e3:db:
b2:11:f7:54:bc:2c:cf:4c:99:66:0a:a8:31:aa:62:
6d:05:52:e8:bf:70:74:66:30:5c:1d:c6:1c:8f:d4:
16:dc:45:14:8f:a2:58:79:7e:2c:72:e2:8e:85:a4:
b1:d7:18:49:77:6a:0b:60:6a:b3:57:cc:ff:c8:7e:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3D:C6:26:3A:1A:3B:CB:F7:80:3C:44:22:5E:DF:C9:FF:9F:87:F9
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/827EF67CDCE211ED9699E511306D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.24.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:e6:0e:f3:eb:f6:7e:48:9a:2e:cd:5f:d0:80:15:22:fe:6a:
b9:c1:4c:4e:78:8d:07:8d:06:8b:ee:b8:7c:5b:7d:2f:da:1f:
3e:f7:41:f9:3f:7d:03:0e:33:05:42:60:62:74:9c:d7:42:39:
fd:80:32:30:0d:a8:1c:cc:c7:0e:22:b3:db:63:2f:30:70:69:
98:eb:a8:b5:f5:03:da:f3:e1:f4:65:0d:80:57:16:ed:12:09:
c8:60:44:e0:7d:50:e1:39:98:e6:d6:32:f0:c9:d3:84:bd:5e:
17:fb:99:6e:68:46:5f:eb:95:2f:63:c8:bf:59:9b:23:4d:62:
31:8d:99:cb:5d:a8:52:b4:61:a5:80:73:fb:98:fb:66:a6:1f:
89:45:39:45:a0:80:3e:fd:1b:20:bc:a6:5d:9b:46:60:a5:a3:
71:b4:63:69:49:cf:b9:34:b9:59:fe:a2:bb:d6:9b:c8:84:29:
13:6e:c2:20:64:f9:b0:4b:92:0b:34:d2:36:e1:b5:fc:09:7e:
a5:fd:54:79:6c:2c:e5:2e:9f:f1:a8:56:07:21:d7:10:a4:d0:
46:17:52:ff:0a:40:59:a0:18:14:31:76:62:ec:85:1b:48:f4:
51:a0:ed:ec:b0:fe:8e:eb:38:f0:97:33:07:f3:2b:6b:34:e5:
91:45:1f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org