Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A73C74D0682411EE8DD3113E4AD9E6FC.roa
File: A73C74D0682411EE8DD3113E4AD9E6FC.roa (raw, json)
Hash identifier: VPvFT7MDewO4D2gXuVI6QvaZ+xTO+B8z5Zo8X+aLMvE=
Subject key identifier: B9:7E:08:D6:61:93:88:C5:C9:C6:63:FD:05:F2:2E:E6:AA:0B:10:AE
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 07EF
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A73C74D0682411EE8DD3113E4AD9E6FC.roa
Signing time: Wed 11 Oct 2023 10:55:13 +0000
ROA not before: Wed 11 Oct 2023 10:55:09 +0000
ROA not after: Tue 11 Oct 2033 10:55:09 +0000
asID: 197555
IP address blocks: 192.142.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 12:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2031 (0x7ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Oct 11 10:55:09 2023 GMT
Not After : Oct 11 10:55:09 2033 GMT
Subject: CN=65267f11-665c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4d:7a:7f:51:f0:50:0e:bd:2b:5e:cd:b4:9d:
c3:1e:57:64:a9:93:8d:11:5c:5d:7e:9a:5f:7a:63:
11:69:56:64:30:18:1e:a3:5d:1d:2c:70:40:19:e2:
0c:e6:e5:ef:73:48:74:b4:bc:26:2e:94:d0:45:c0:
f0:1a:bd:f6:a5:e4:49:78:25:7c:d5:d5:94:84:c6:
a3:44:ec:a5:bd:5b:30:11:87:31:07:51:e2:34:cd:
f5:81:7f:9a:95:7d:8c:f5:8a:bf:79:c5:5a:4f:c8:
71:3a:56:ef:c5:f4:84:18:78:63:1c:4e:50:4a:aa:
88:de:5c:e3:0f:68:ee:d1:f4:32:9d:a3:a5:fb:7e:
73:d4:4a:82:07:9c:47:87:1c:d2:38:e7:87:6b:47:
7a:46:e0:4f:df:02:71:a5:1e:10:61:b3:a3:be:37:
7b:8d:e3:b1:fc:13:27:22:73:12:8e:ed:d8:57:97:
3b:19:bd:bc:8c:b2:f6:59:f1:63:c2:9e:bc:3a:f3:
db:6d:2d:64:61:43:1a:38:02:d5:32:c6:9c:bb:1d:
3b:13:fb:2a:5b:ff:3a:b6:59:f2:c3:29:09:bc:01:
86:17:ec:d8:85:76:7e:f3:9a:fb:46:8c:37:2d:19:
fe:2f:9f:d2:91:74:e7:02:21:62:1e:97:ce:74:58:
29:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7E:08:D6:61:93:88:C5:C9:C6:63:FD:05:F2:2E:E6:AA:0B:10:AE
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A73C74D0682411EE8DD3113E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.105.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ee:42:39:4e:52:96:57:6b:79:44:c7:23:8a:6e:a7:47:42:
dd:60:72:37:6d:a3:a8:19:51:fe:17:97:89:21:2b:ce:d8:e2:
c0:22:05:61:62:88:23:0b:40:1b:3c:88:4a:76:7e:ea:13:bf:
dd:f7:72:f6:9c:52:84:da:c2:de:cb:d0:87:d1:51:c5:27:d1:
ba:f3:df:a3:fd:0c:05:ec:15:e0:5a:a2:58:1f:c1:eb:07:ba:
a8:58:fc:65:e5:3b:40:10:a6:ec:93:97:b9:96:0c:7b:09:08:
e8:bc:ef:aa:85:2f:95:af:e4:ea:ed:40:eb:34:fb:97:39:c1:
ee:fd:09:3b:36:14:05:a7:e9:c0:99:30:1e:fe:18:39:82:d0:
56:5f:b5:25:49:78:04:f2:0d:e2:3f:68:7c:d0:f1:8f:01:2e:
22:8f:f5:8b:c0:d1:49:ee:de:70:16:f4:0c:09:6d:68:93:98:
59:ba:a2:f8:d9:5e:0e:f3:cf:63:80:b9:3e:1a:f4:ee:c7:a1:
81:fc:7f:4a:7a:23:9e:3c:2e:a7:c0:0e:fc:29:4e:b5:4f:55:
d4:3e:d8:f8:e9:89:3d:a4:27:1b:84:19:57:51:9e:23:a7:c7:
0d:e6:0c:0f:1b:2d:0a:77:88:b5:5e:61:6d:6c:72:82:71:fd:
c2:75:c6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org