Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/8D6ABCF625F811EEA8FBFD254AD9E6FC.roa
File: 8D6ABCF625F811EEA8FBFD254AD9E6FC.roa (raw, json)
Hash identifier: aQQTR1CbbBdSsSx1+ouBeCa55uwfmqJ7Ruv5tAINjGE=
Subject key identifier: EF:DF:01:F7:0E:9F:C3:C1:4E:FF:D4:53:65:79:B6:A4:5F:F2:A6:8C
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0750
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/8D6ABCF625F811EEA8FBFD254AD9E6FC.roa
Signing time: Wed 19 Jul 2023 05:53:15 +0000
ROA not before: Wed 19 Jul 2023 05:53:10 +0000
ROA not after: Wed 13 Jul 2033 05:53:10 +0000
asID: 206371
IP address blocks: 192.142.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 10:41:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1872 (0x750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jul 19 05:53:10 2023 GMT
Not After : Jul 13 05:53:10 2033 GMT
Subject: CN=64b77a4b-2262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:7b:81:95:01:a9:82:80:59:9c:42:c3:a7:
fd:a9:37:dd:40:36:fb:63:79:50:eb:01:cd:12:78:
0a:cd:25:3e:df:0d:eb:a3:51:d8:58:df:cc:c4:f7:
46:f4:1f:da:e4:d7:0a:41:51:f9:ed:9d:48:16:48:
c0:ce:b1:31:f3:45:95:f6:97:db:23:95:00:bf:fc:
b8:c8:f8:a8:cc:10:b0:46:ac:39:55:5e:27:ab:e5:
3d:e4:f1:de:ca:8d:22:45:1e:b4:cc:13:17:b6:c8:
3f:9b:36:e3:9c:b2:ef:e6:31:17:6f:1b:43:11:39:
8a:52:36:06:1f:70:98:3b:18:f7:1b:3e:b6:3d:b4:
af:5c:76:47:b8:b4:2b:74:f6:ad:a7:2c:ee:52:e5:
1c:13:07:4c:3e:6c:e4:57:e0:6e:4b:26:d5:34:0a:
d6:0a:f3:8e:e1:3e:64:19:fc:5f:67:e0:e1:65:ac:
9b:c4:5a:f3:f7:46:8d:34:61:b1:3a:a5:e4:a4:bc:
22:dd:f7:cc:81:31:e9:a2:61:cb:f2:e2:96:71:44:
8f:c7:c4:3e:88:52:d8:4e:66:c4:86:ba:8e:16:d4:
e1:1f:f2:1f:01:f9:d8:f3:23:d6:65:8d:ec:4b:bb:
3f:97:6a:53:63:cd:a9:3c:ac:45:b4:2a:d9:cb:3e:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DF:01:F7:0E:9F:C3:C1:4E:FF:D4:53:65:79:B6:A4:5F:F2:A6:8C
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/8D6ABCF625F811EEA8FBFD254AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.140.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:8a:10:ff:29:6d:38:89:26:83:7b:c0:43:5f:e7:1c:bb:94:
6d:23:4f:ff:8b:d9:94:b0:be:0c:ab:63:83:81:96:35:8f:47:
4a:8d:fd:42:2a:0e:41:8d:23:6a:38:db:f5:f7:72:de:e6:1e:
44:bc:3a:09:35:83:2a:bc:78:1a:d6:7e:09:56:cb:43:13:18:
2e:22:21:43:e7:2b:a2:96:cf:a1:26:2d:00:81:ce:45:3c:f8:
bd:94:9d:1a:23:17:84:5b:da:e6:51:31:47:7d:3e:b9:7a:6a:
d5:0c:bb:a4:de:94:c2:6e:29:b6:cc:4e:c2:2c:31:2b:ac:b5:
8e:72:b0:b3:25:36:dd:9b:73:19:d1:e3:20:68:27:a8:64:4b:
d4:c5:27:67:2c:86:15:cb:bc:9b:6a:48:36:5c:2d:51:f6:83:
5d:7c:54:54:98:d9:9a:12:2a:77:8a:9e:58:de:c1:75:83:ca:
20:80:6a:e4:a5:0d:95:28:2f:06:3a:84:bd:b1:a2:cb:17:a6:
33:19:39:a2:0c:69:73:cc:7c:2e:c0:ea:47:12:03:9b:a2:9d:
11:73:52:76:33:ec:f4:66:99:3d:f0:84:96:88:95:8e:bc:55:
d7:f3:0f:84:88:b8:b3:bd:0f:e9:2d:32:0a:2d:83:48:32:76:
14:3f:48:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org