Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/AF463C3A6F9F11ECAC96B1CD5A40D577.roa
File: AF463C3A6F9F11ECAC96B1CD5A40D577.roa (raw, json)
Hash identifier: eu3XRfdU+0CdMTy37jQ3VTneNv+x7OQ/NiovIwfX/o0=
Subject key identifier: F2:35:A0:47:E2:AC:4F:C1:D4:DC:3F:60:C2:6C:D0:E6:50:27:91:2D
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0407
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/AF463C3A6F9F11ECAC96B1CD5A40D577.roa
Signing time: Fri 07 Jan 2022 09:53:37 +0000
ROA not before: Fri 07 Jan 2022 09:53:33 +0000
ROA not after: Wed 14 Jan 2026 09:53:33 +0000
asID: 3223
IP address blocks: 192.142.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 May 2022 16:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1031 (0x407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jan 7 09:53:33 2022 GMT
Not After : Jan 14 09:53:33 2026 GMT
Subject: CN=61d80da1-10c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:47:3b:15:f0:57:20:34:62:3c:83:47:42:1c:
87:79:0f:40:a7:52:58:e5:e5:49:93:56:b5:bc:7e:
d7:8b:08:47:8c:50:de:29:5f:41:99:39:32:88:b3:
06:07:fa:78:3c:74:44:12:9b:f5:46:a3:3f:d8:c9:
07:2d:5a:be:3b:04:86:ee:e8:0d:ae:37:26:36:a0:
b6:4a:51:a8:8b:6c:a8:83:bc:ae:67:28:fd:fe:e0:
b4:a9:86:92:17:f7:44:60:82:16:3e:8f:7c:2e:e3:
14:26:89:a2:c6:a9:ea:e9:34:5d:b4:d9:7e:51:ee:
a8:30:cc:39:0e:3d:e8:bb:a7:75:0b:23:5e:33:37:
6b:b9:a5:e1:6c:06:21:f3:4a:b4:f4:21:3a:31:0c:
2e:06:51:e7:20:3b:35:98:ad:7d:ff:7c:c2:7a:a8:
d6:0b:ed:a4:af:de:60:6d:e0:c3:ad:2a:e0:2e:9d:
a1:20:76:41:ed:4b:5c:54:e3:97:96:c5:ac:ed:56:
8e:27:ee:d4:92:c7:e2:04:b4:a0:6f:62:6c:e8:0b:
d4:52:a1:ba:2a:88:ce:52:aa:ee:42:c4:b6:94:95:
09:c7:c1:0e:06:56:01:0b:c6:6f:40:18:de:26:e5:
23:7a:32:7a:9e:c4:ce:f2:23:7d:cf:ca:5f:14:71:
e4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:35:A0:47:E2:AC:4F:C1:D4:DC:3F:60:C2:6C:D0:E6:50:27:91:2D
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/AF463C3A6F9F11ECAC96B1CD5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.184.0/22
Signature Algorithm: sha256WithRSAEncryption
48:37:f2:9a:83:6f:eb:d7:a7:1a:9c:7c:05:ee:1b:b3:b0:3a:
fa:f2:74:f9:4b:55:72:55:14:bd:9b:aa:78:7d:c9:c8:34:d0:
00:2f:66:f3:54:c6:9a:5b:26:3c:ff:51:77:33:49:5f:f6:ef:
a7:11:01:69:9d:7e:63:27:b0:c4:3b:64:9e:d4:fe:9a:37:2a:
3c:33:fa:3e:14:4f:c6:a1:34:89:fb:15:0e:8a:4d:ae:ac:11:
8b:e7:a8:e8:c4:f7:13:54:f7:9e:5e:d1:89:cf:8f:30:8c:a7:
81:b0:cc:8f:66:f4:2f:de:f5:c7:c1:42:a3:ff:4d:fb:d5:07:
68:bc:22:42:c1:8d:63:85:cb:85:83:07:24:32:44:85:ce:b4:
12:62:99:6a:86:5e:e1:14:5f:da:53:5f:1b:2a:bd:fd:05:22:
7b:af:b4:41:9a:1f:de:19:15:b6:46:60:d4:c2:41:b7:e6:8d:
8a:70:ab:65:4f:53:35:40:08:ee:64:31:ce:84:ee:28:a2:20:
16:b0:16:be:ca:14:a4:c2:1c:b7:99:02:a2:4e:33:40:a7:3c:
85:8a:12:17:70:b1:88:78:ad:ef:a9:46:85:c3:a8:45:e9:df:
50:9d:fb:84:d7:76:ce:ca:49:88:f3:48:9e:7c:50:cc:4a:9f:
81:52:56:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org