Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/884D4F5A81E611EE83DB050E4AD9E6FC.roa
File: 884D4F5A81E611EE83DB050E4AD9E6FC.roa (raw, json)
Hash identifier: npFv0QF2UGv6bcFQ6P2x1oXGmxNZV1PTvdosjtLJi1k=
Subject key identifier: BC:25:70:D3:EB:1C:C3:BD:38:02:B0:6F:72:8F:40:50:CF:FC:7E:FB
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0828
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/884D4F5A81E611EE83DB050E4AD9E6FC.roa
Signing time: Mon 13 Nov 2023 05:36:02 +0000
ROA not before: Mon 13 Nov 2023 05:35:59 +0000
ROA not after: Wed 16 Nov 2033 05:35:59 +0000
asID: 16509
IP address blocks: 192.142.102.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jan 2024 08:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2088 (0x828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 13 05:35:59 2023 GMT
Not After : Nov 16 05:35:59 2033 GMT
Subject: CN=6551b5c2-9e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:87:e2:3c:88:dc:33:7b:57:e5:f9:67:34:19:
54:b8:80:6f:96:0a:da:ff:68:1c:a2:e0:76:41:bb:
97:a5:fe:d6:7e:a7:b4:7d:b6:5a:a7:56:a6:73:53:
df:1e:3a:55:ec:e4:46:7a:1e:79:81:5f:fc:ee:4d:
d2:14:8e:55:25:a6:50:c3:d3:b3:79:96:f4:bd:52:
c7:80:99:d9:8c:52:5b:93:cf:d1:a9:a4:d9:61:1e:
c1:30:c7:5a:cc:30:a6:4c:80:ab:68:eb:c3:1b:9f:
5f:1d:c8:1d:cd:02:3f:72:be:dc:85:05:31:66:9b:
e9:de:06:c2:bb:d2:b9:32:ad:ba:18:2b:90:2a:71:
ba:59:98:65:9e:3b:03:8c:dc:2e:e7:5c:42:be:0f:
fd:fb:20:30:e8:4b:34:c7:7a:26:02:10:88:ea:ea:
47:cb:ea:b1:94:25:3b:97:64:21:ad:7e:04:c7:a4:
90:b9:05:ba:5a:96:c2:04:a3:8b:98:aa:ad:d4:4b:
e0:3f:bb:ff:25:05:fb:1e:7c:f9:53:3c:e5:64:34:
05:1e:ae:ec:b7:4b:ad:f3:98:c6:38:10:0e:66:fb:
17:c7:75:15:02:48:bf:58:e8:69:14:11:02:12:79:
4a:10:3d:be:a8:15:86:4e:31:0d:52:85:56:41:63:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:25:70:D3:EB:1C:C3:BD:38:02:B0:6F:72:8F:40:50:CF:FC:7E:FB
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/884D4F5A81E611EE83DB050E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.102.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:ee:33:ea:06:8d:f6:3f:66:cd:17:4b:66:bf:57:af:73:0d:
12:4d:2e:77:d9:90:a8:b4:f1:4e:03:10:fa:f5:8a:f9:db:ce:
28:3b:dc:86:a4:30:c3:f4:26:70:99:17:90:66:f8:c9:b4:7d:
87:b3:14:52:db:c6:ec:a9:3e:78:90:e4:36:2e:e7:a1:74:7a:
81:28:63:cc:b2:5f:92:67:29:67:6a:08:7d:22:00:86:f1:4a:
52:da:2d:60:f6:d3:e6:d2:18:a8:da:00:9d:53:a8:0c:dc:f0:
9a:69:7f:11:77:da:c2:11:fa:af:c7:02:46:2a:df:41:10:2c:
06:51:d9:ae:fe:7e:4e:42:a3:e3:b9:68:8c:f3:e9:e6:17:e8:
0b:97:4e:a4:5e:42:22:50:cf:b6:4e:a0:9f:b1:a4:d7:67:2e:
b8:22:6b:b1:67:1d:3e:c6:f5:68:cc:48:b4:d3:bb:ef:e5:05:
f7:d1:db:cd:ec:e8:45:a3:e8:4e:c5:1d:c1:76:ac:f7:9e:e7:
09:e9:71:d5:5c:31:13:24:6c:d1:82:56:ef:84:e8:6a:7b:5a:
1d:25:e1:da:67:36:31:2e:d9:49:69:6e:26:0e:03:db:92:ea:
d2:bb:04:cb:49:26:ad:ad:bb:b7:12:19:9f:3d:fc:38:d2:2f:
e9:33:2a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org