Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A5692EF40F2E11EEB4CF21124AD9E6FC.roa
File: A5692EF40F2E11EEB4CF21124AD9E6FC.roa (raw, json)
Hash identifier: EfMt6NXul99vKNzwkbvPK9wqOGAYP+cqGaXQlHuu/+0=
Subject key identifier: 4C:AA:50:3B:00:57:9C:87:96:8C:5D:50:10:AF:1D:7C:ED:3F:55:CC
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 072B
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A5692EF40F2E11EEB4CF21124AD9E6FC.roa
Signing time: Tue 20 Jun 2023 05:52:31 +0000
ROA not before: Tue 20 Jun 2023 05:52:26 +0000
ROA not after: Wed 15 Jun 2033 05:52:26 +0000
asID: 7018
IP address blocks: 192.142.0.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Aug 2023 05:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1835 (0x72b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jun 20 05:52:26 2023 GMT
Not After : Jun 15 05:52:26 2033 GMT
Subject: CN=64913e9f-10c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:4b:0c:79:3c:6f:bb:f4:e3:b5:3c:73:51:
d7:f5:00:e0:b6:b7:24:0a:05:f6:7c:2a:77:18:27:
62:69:49:81:59:a4:87:35:7c:08:27:12:ae:30:a8:
b7:cd:74:ff:6f:ef:ee:2d:fa:6f:0a:a0:c0:b4:ab:
b0:52:05:60:cf:34:21:3a:db:91:9b:55:46:d6:ab:
3e:72:e0:5c:7c:d7:99:be:28:79:e6:1e:b6:a7:20:
b3:cc:ca:4d:64:16:14:5f:89:5d:f0:2d:bf:48:cb:
e7:51:7e:2e:c5:32:6f:f5:af:86:4c:9f:2d:14:2a:
64:31:66:6c:53:15:7d:79:98:ca:be:a8:17:13:1c:
b2:8d:03:d8:1f:ad:d8:d2:26:11:68:04:03:43:f3:
f1:e3:0c:8d:83:02:e8:fb:2d:60:e3:3c:8b:9b:17:
32:d7:d4:45:c2:b5:67:65:5d:5a:13:cf:82:15:ed:
0f:98:7e:09:0d:4e:0b:ba:82:20:2a:6f:cb:32:ca:
97:c8:a9:7f:99:04:79:3a:2e:ad:6f:9c:62:23:44:
d5:07:96:92:3c:3e:94:d5:4b:e2:6a:9a:d8:7c:31:
28:77:35:02:f8:13:2c:05:30:64:10:0b:35:28:67:
00:ec:d8:1d:e0:ff:bb:66:3b:d2:df:e8:ce:1d:54:
6f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AA:50:3B:00:57:9C:87:96:8C:5D:50:10:AF:1D:7C:ED:3F:55:CC
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A5692EF40F2E11EEB4CF21124AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.0.0/22
Signature Algorithm: sha256WithRSAEncryption
04:53:b5:e7:1c:c3:99:e2:cc:4f:ff:04:a3:2a:86:fd:d6:b3:
84:44:28:df:c4:b3:ae:8c:4a:22:bd:a3:60:0b:ca:75:12:71:
33:38:c8:ab:7c:9b:d3:5b:4f:7e:f2:1f:cf:ac:6e:69:f8:3b:
00:b5:56:ca:61:f3:8b:28:f6:a4:8d:d6:7f:7c:ba:24:64:a2:
2e:ae:5f:d3:29:ad:49:ea:76:49:72:70:bc:dd:15:11:1e:dc:
f2:d6:10:c2:ea:51:7c:38:e2:9f:1f:a0:2e:57:46:c3:90:32:
a3:4c:cd:50:c7:5f:db:da:b0:95:7d:38:14:6a:c3:f8:84:29:
d5:ef:ed:31:c8:47:15:fc:cd:a3:f1:0e:2a:58:6e:79:7f:1f:
d0:be:e7:3f:56:90:80:16:62:e6:43:28:41:f8:8f:33:49:67:
c7:0a:61:96:5d:65:09:d9:0d:cf:97:76:ca:0e:01:8c:cd:d6:
a1:1e:80:71:ff:4a:fe:c6:81:c7:92:95:57:dc:ff:7e:f9:87:
49:bb:44:06:ca:20:ac:f2:2b:ba:df:70:2c:89:2d:d5:3e:91:
6e:80:59:ef:ce:dc:1e:c3:82:80:9f:41:3b:fc:6f:27:bb:a3:
93:b6:9d:c8:67:89:7f:87:ae:67:4d:c4:14:0b:47:b5:d1:ca:
bb:10:50:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org