Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A57D4EE89BDA11ECA8A978975A40D577.roa
File: A57D4EE89BDA11ECA8A978975A40D577.roa (raw, json)
Hash identifier: fvqtoLqdiS/FKT96vFO4/s/yw0GZZ17GnzXrnW8O37w=
Subject key identifier: E4:B3:47:4B:0D:51:24:55:22:32:C5:5C:A4:69:2E:0B:2C:4C:68:CC
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 045D
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A57D4EE89BDA11ECA8A978975A40D577.roa
Signing time: Fri 04 Mar 2022 16:46:32 +0000
ROA not before: Fri 04 Mar 2022 16:46:29 +0000
ROA not after: Tue 14 Mar 2028 16:46:29 +0000
asID: 3223
IP address blocks: 192.142.20.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Oct 2022 06:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117 (0x45d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Mar 4 16:46:29 2022 GMT
Not After : Mar 14 16:46:29 2028 GMT
Subject: CN=62224268-3b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3c:69:4f:d5:d4:42:17:87:01:80:da:1b:62:
1b:dd:9c:1e:67:d6:9e:8b:ce:0f:83:27:71:24:5b:
d8:42:15:6f:62:5b:e1:a9:22:f1:df:25:1a:95:f2:
35:96:09:1c:fa:f1:e9:b4:98:c4:d0:8b:de:e4:2e:
73:83:80:28:5d:26:58:35:92:27:9b:57:a9:15:31:
0f:91:a4:be:2e:fa:e4:14:18:d6:38:38:d5:53:5f:
5d:b3:12:33:ea:b9:4f:56:1f:b0:bf:9e:4f:61:cf:
54:68:c7:b5:e3:bb:73:13:fa:2c:09:e0:34:6b:cd:
11:7c:58:bd:4a:8d:84:14:e8:38:d2:5a:df:08:e5:
b2:6b:40:73:f7:f8:f7:a7:77:74:0b:7a:84:45:60:
94:9b:5f:a4:8d:63:f9:97:9c:6f:7f:b4:24:dc:a6:
d0:8a:b6:88:98:35:a8:66:6f:34:61:ac:8d:29:1e:
ed:5a:ba:e7:30:cf:08:a2:48:ad:02:53:a1:0f:24:
ec:95:a5:ad:0a:62:0e:a3:3a:84:13:07:a4:3f:87:
85:d6:fb:29:e3:65:b5:f8:ef:24:9f:b1:d4:29:f7:
8b:67:3a:6a:3c:61:70:08:29:f3:23:08:6a:17:87:
c6:12:a7:04:1f:a3:37:0e:84:8b:6a:99:ec:c4:45:
99:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B3:47:4B:0D:51:24:55:22:32:C5:5C:A4:69:2E:0B:2C:4C:68:CC
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A57D4EE89BDA11ECA8A978975A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.20.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:41:22:73:8c:df:e5:34:43:7f:c8:0b:be:29:ac:b3:be:ec:
90:b9:48:94:07:2a:41:0f:ee:36:a0:82:71:6b:3d:81:b1:3d:
7c:23:c1:8f:92:aa:53:e3:b5:4d:57:6c:97:05:26:64:76:1f:
b8:0c:a9:37:5c:f1:c9:c4:51:97:cf:ed:ec:9f:39:99:80:bb:
be:7c:04:c5:18:fc:dd:a0:13:f0:ff:74:59:df:74:49:47:1a:
bd:c1:cc:72:ff:22:fd:8f:d5:7c:0b:34:2c:61:b3:4b:c6:7e:
80:91:f7:e1:c8:ca:28:a0:7c:6a:4c:f9:d7:65:ce:90:81:b6:
3c:50:cf:81:d0:52:d9:7d:38:86:03:2a:b3:4f:0e:8b:a9:67:
33:99:da:a9:a1:e4:0e:2f:fc:3e:b1:eb:ce:25:56:ce:f7:14:
9a:9c:b7:55:94:69:72:d8:01:c0:56:6a:a2:44:d8:8c:bc:43:
fd:52:97:2e:93:68:51:56:dc:8b:e0:e3:2f:c6:f3:7f:1c:a6:
ac:22:5d:21:d7:93:dc:0c:87:b7:a9:1e:8c:4b:bc:60:23:b1:
a4:ce:53:5a:ac:af:ea:58:61:08:48:eb:a2:18:4a:2b:20:03:
0b:44:c5:5f:aa:f5:8b:df:08:12:5d:68:03:e2:6d:69:b4:39:
45:97:70:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org