Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/87E1551E7D3811EE915AB10F4AD9E6FC.roa
File: 87E1551E7D3811EE915AB10F4AD9E6FC.roa (raw, json)
Hash identifier: y7J2rSfoBJWCr5MqyR26gtZA7J4i7bPUebi7gmIfbRc=
Subject key identifier: FA:4B:88:B8:74:DD:4C:98:5A:5A:01:98:0D:C2:B3:E3:E6:E7:D2:86
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0818
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/87E1551E7D3811EE915AB10F4AD9E6FC.roa
Signing time: Tue 07 Nov 2023 06:40:25 +0000
ROA not before: Tue 07 Nov 2023 06:40:21 +0000
ROA not after: Wed 09 Nov 2033 06:40:21 +0000
asID: 212219
IP address blocks: 192.142.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 05:59:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2072 (0x818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 7 06:40:21 2023 GMT
Not After : Nov 9 06:40:21 2033 GMT
Subject: CN=6549dbd9-9c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:e9:af:5f:15:27:ae:36:ff:e7:58:3a:8d:
92:df:b1:ac:4d:d7:88:e3:7a:35:9c:62:17:b9:2a:
ae:10:bd:fe:dd:0d:8d:fc:9e:2d:b4:05:ef:5a:55:
56:9b:a6:3f:a5:19:61:f4:f5:ba:63:6d:a8:84:02:
da:4d:5e:f5:79:66:e3:a4:ac:e0:6d:42:bc:07:a7:
fd:df:aa:70:37:a0:a6:12:b7:40:df:0a:08:a3:c4:
40:1c:43:7d:8d:f0:ba:4d:ec:4c:0a:10:b5:e9:ae:
e6:8c:a9:48:c6:06:cc:18:08:1e:2d:e6:c9:31:6a:
da:4a:3b:bc:48:46:f5:05:cc:34:18:d2:c5:63:d1:
6c:d3:ab:bf:80:5c:30:51:a4:f7:fb:46:c6:d7:c1:
07:9e:74:a5:7f:68:3c:db:4c:d7:07:c2:79:65:b8:
02:86:0f:5a:b7:f9:99:72:26:5e:03:71:c2:e8:bb:
0e:ac:15:ec:64:f0:1c:d9:e1:43:7f:7b:d3:ee:3f:
92:85:bc:d5:07:11:0d:00:4a:58:29:d5:7e:43:cc:
95:76:e4:ee:fc:82:81:4e:b6:4a:bc:ff:c1:e4:c9:
90:e2:60:4e:e0:ca:38:24:14:dd:53:70:9d:da:7b:
6d:d8:32:cb:bd:62:99:f4:21:b3:02:8e:dd:64:a2:
57:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4B:88:B8:74:DD:4C:98:5A:5A:01:98:0D:C2:B3:E3:E6:E7:D2:86
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/87E1551E7D3811EE915AB10F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.132.0/24
Signature Algorithm: sha256WithRSAEncryption
be:b8:73:97:5f:66:75:6f:47:09:07:20:9f:85:44:59:75:0e:
49:aa:b8:8f:9f:77:f6:77:c5:9e:29:8e:a1:8c:05:7a:b7:78:
b1:ec:52:c4:0c:40:6d:b3:9f:62:b2:e3:8b:5e:ec:e2:47:02:
d1:a4:f6:a1:c0:87:8b:cc:59:75:58:0f:1e:a7:65:7b:3a:b5:
20:9c:2a:15:e3:5c:53:21:79:bd:2c:d0:c5:d6:f0:94:45:f0:
f6:0d:af:bb:7c:43:cd:b0:50:21:64:76:ab:9c:dc:50:fa:1d:
db:3c:3a:c0:5c:26:6c:42:25:52:1f:3c:46:a9:ba:58:18:2e:
45:11:63:68:e8:1b:f7:45:b3:cb:f9:a1:18:c6:28:47:b6:0d:
4c:e8:c0:c2:e3:a0:56:9e:69:7f:af:23:48:8b:73:c4:40:56:
75:8d:1b:e7:9f:82:c5:b7:5a:fc:99:4d:5a:54:4a:8c:60:73:
f8:37:79:7b:15:8b:78:f2:bc:ba:bf:ed:f3:fa:87:a5:b4:27:
55:20:1a:9c:c2:f8:39:71:b4:10:99:fc:cb:34:98:69:90:e8:
6d:31:64:c2:92:fe:fc:f1:30:0c:2b:c2:19:a5:83:3c:44:6c:
41:e9:1f:0d:63:fa:11:90:e3:99:38:7e:fd:9a:b0:8b:95:9c:
61:20:72:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org