Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9A11443EDCE211EDAEE85812306D8C1D.roa
File: 9A11443EDCE211EDAEE85812306D8C1D.roa (raw, json)
Hash identifier: EHVXGxAGEwUMpf/FH04ShQgb/jftqqoXrot49anin3c=
Subject key identifier: 6E:68:31:E2:BB:C4:54:A6:00:72:DF:F1:06:69:46:E6:EE:AC:24:F2
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 06A9
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9A11443EDCE211EDAEE85812306D8C1D.roa
Signing time: Mon 17 Apr 2023 05:42:12 +0000
ROA not before: Mon 17 Apr 2023 05:42:09 +0000
ROA not after: Wed 13 Apr 2033 05:42:09 +0000
asID: 42831
IP address blocks: 192.142.100.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 10:39:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1705 (0x6a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Apr 17 05:42:09 2023 GMT
Not After : Apr 13 05:42:09 2033 GMT
Subject: CN=643cdc34-44f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:5f:6d:85:13:dc:6b:69:5f:03:00:a0:74:
24:2d:4d:0e:ee:6d:0a:71:1e:cb:7d:67:8d:17:66:
a1:06:fa:2f:44:37:b8:95:a1:fe:92:78:e7:4b:97:
80:fb:ef:d5:7d:c3:8b:7c:24:5c:22:b5:12:5b:bc:
d6:f0:6b:d6:47:53:0e:1a:8e:60:93:d2:43:c9:a6:
4f:5a:19:00:9f:17:fe:09:45:f6:7c:d8:4a:9c:d2:
b4:77:82:ee:fa:59:6f:d2:61:49:ba:8c:9e:02:e5:
ae:af:e2:83:18:98:b4:22:9a:89:3e:ae:a6:91:9e:
c4:2e:ed:ab:ef:96:5d:6b:af:67:7a:0a:77:2b:d3:
77:05:69:95:86:e7:1d:e2:fd:c5:ea:e9:93:5e:4f:
88:25:5e:74:37:86:2d:33:32:82:7c:3d:fc:ef:6d:
9f:6f:a5:15:48:5d:f8:c2:fb:3f:43:81:54:a8:0f:
fb:d8:0d:cb:41:88:2c:a1:14:6b:15:97:f1:03:05:
7e:fa:44:9c:7e:78:44:2a:f6:ee:09:4a:7d:29:60:
53:9b:2d:87:8f:19:40:eb:a9:55:ad:e5:87:fb:85:
e6:f3:3c:5b:f5:ca:d1:7d:3b:c4:10:5c:01:0e:74:
73:bb:68:2e:c4:94:46:6a:f8:df:1d:6a:44:64:15:
da:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:68:31:E2:BB:C4:54:A6:00:72:DF:F1:06:69:46:E6:EE:AC:24:F2
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9A11443EDCE211EDAEE85812306D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.100.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:3e:c3:8f:8e:90:4e:9a:f6:d1:d1:e1:1d:8e:a4:a3:f0:0e:
fb:b3:c1:81:d4:50:c4:77:76:c5:61:b5:37:6d:85:a9:52:6a:
fd:ef:f7:7b:45:f5:78:44:0e:0a:7e:c6:07:70:22:23:76:2e:
c8:36:92:87:09:d3:92:f6:d6:42:e9:dc:fe:77:1d:39:de:9f:
42:78:6b:50:42:cb:cb:fd:56:3b:60:26:97:b8:7f:9a:fb:e0:
be:7f:d4:f9:30:04:f2:df:f2:a1:6e:bd:5a:0a:30:af:a0:b0:
94:98:f7:a3:05:91:fd:92:09:f4:f2:78:d6:86:2e:bd:fd:0c:
d1:56:32:b8:28:f6:5d:84:a8:c0:0d:af:c8:67:68:03:90:4b:
2d:60:41:3d:8f:33:f8:48:01:4e:9a:21:a9:5e:6e:70:91:f9:
37:13:38:3c:b2:c5:56:36:11:bd:9a:71:43:d8:a1:b4:b4:44:
54:a4:05:de:05:4b:50:7c:df:7e:97:48:3c:f6:2d:06:f1:68:
b4:ca:0f:9c:6a:1d:c7:26:94:9d:b4:44:f1:cf:d6:46:af:f8:
66:fc:3c:0b:f1:79:2a:ba:5e:cc:58:80:a8:04:2f:5d:bf:86:
65:ec:70:1e:65:af:da:26:e0:a5:0e:be:b8:9a:e7:4b:b2:95:
b0:f4:3f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:24 2024 by rpki-client on console-fra.rpki-client.org