Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/873761C2D39111ED80F608A7F1222468.roa
File: 873761C2D39111ED80F608A7F1222468.roa (raw, json)
Hash identifier: mBSxh1QTu2HKdvYMyOR0sob8WDdV8r0EksLK5FWWh8U=
Subject key identifier: 85:48:F5:D0:5E:F9:F4:6A:2B:16:8A:B6:DE:06:68:05:8C:04:BC:8C
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0694
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/873761C2D39111ED80F608A7F1222468.roa
Signing time: Wed 05 Apr 2023 09:09:11 +0000
ROA not before: Wed 05 Apr 2023 09:09:05 +0000
ROA not after: Wed 13 Apr 2033 09:09:05 +0000
asID: 140902
IP address blocks: 192.142.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 06:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1684 (0x694)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Apr 5 09:09:05 2023 GMT
Not After : Apr 13 09:09:05 2033 GMT
Subject: CN=642d3ab7-4454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:18:29:15:19:b5:52:c8:1b:20:bc:a6:89:bf:
35:2e:92:30:b5:8f:e4:b4:f1:60:b7:f6:9c:80:24:
b1:bc:48:30:26:e4:0b:25:84:41:e8:5c:a2:c7:5a:
19:c9:8a:e2:bc:73:d0:e8:d1:c5:3c:f3:a1:f5:17:
b7:09:df:72:4e:13:bb:c4:ff:62:80:02:d3:6c:ea:
8c:43:41:53:cb:5e:74:06:6f:c2:8d:c3:ed:0e:20:
e1:11:75:d3:00:20:12:f0:d5:95:3b:0c:e3:3d:31:
86:39:28:30:ef:b5:54:7a:e1:cf:31:94:ab:be:18:
5f:be:af:49:d5:f0:bb:39:5a:b2:cf:28:de:2d:14:
65:d4:b4:1c:fd:93:50:c5:40:85:34:bb:1e:09:8d:
0c:40:8f:b9:c7:4d:62:23:70:50:0d:64:31:07:14:
fa:25:ae:cc:2c:fc:b3:4d:6f:61:c2:69:59:44:2b:
7f:4b:fe:c3:69:9b:8e:cb:59:48:3a:25:53:0d:3a:
7d:da:4f:df:32:21:8c:15:be:a0:b5:79:00:a9:37:
c8:93:b2:17:da:8e:24:ba:ac:2c:8a:c3:f0:73:4e:
be:50:6d:a6:22:81:1a:08:02:3e:ab:26:e7:8a:82:
b5:18:2a:d2:9d:f3:73:67:ab:4e:b6:88:55:73:d8:
bd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:48:F5:D0:5E:F9:F4:6A:2B:16:8A:B6:DE:06:68:05:8C:04:BC:8C
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/873761C2D39111ED80F608A7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.28.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a9:3a:8f:e2:df:7c:2e:b0:ba:92:af:ed:65:f3:74:5d:1c:
f5:b8:d2:2b:98:94:fa:90:25:bc:05:6a:aa:ba:62:24:1d:98:
44:68:fc:22:02:7e:18:b9:2f:66:e2:ee:0e:86:28:bc:0b:95:
15:fd:c3:9d:1d:37:b8:c4:5d:bb:eb:8e:9e:0d:da:81:f9:f8:
bd:cf:7b:55:ef:a2:4f:1e:cb:d5:cf:c4:d0:e3:2d:9a:c2:3d:
2b:2c:a7:5d:8d:7c:fc:fc:3e:bc:7a:e8:c7:6d:ae:a5:a4:03:
d1:e5:bc:12:0d:32:c2:69:38:0f:0f:26:a5:c3:2a:b9:9c:4f:
65:f6:7e:f6:b1:ea:f5:9c:66:40:4f:de:7a:67:84:82:8f:a5:
a0:db:3d:47:f3:14:7f:7a:8f:a9:18:1f:aa:76:fd:22:31:b3:
a9:ae:81:75:f6:d3:a2:62:75:f8:49:0d:78:7e:f8:6e:59:0a:
0c:11:be:cf:c2:29:e0:38:e3:1a:65:d2:db:1d:fd:86:12:5c:
22:99:68:64:82:f0:b5:c1:30:6d:24:ae:6d:a3:74:5c:fa:ad:
da:32:88:c5:25:87:42:54:2e:51:5e:c3:1f:02:ac:97:8d:39:
45:9d:7e:63:e0:45:51:3b:91:8e:41:dc:79:b1:46:c7:5e:6c:
37:d2:5c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org