Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B226C0905C2F11EE8DC1C7334AD9E6FC.roa
File: B226C0905C2F11EE8DC1C7334AD9E6FC.roa (raw, json)
Hash identifier: isxA6BctKcx/ppKBr4xP79l1rkZ0+hh5cwPi5Kpgmag=
Subject key identifier: 5C:AE:15:A7:E4:47:74:4B:9B:17:6F:9F:6F:C9:9E:9D:61:31:D8:72
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 07D2
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B226C0905C2F11EE8DC1C7334AD9E6FC.roa
Signing time: Tue 26 Sep 2023 05:44:02 +0000
ROA not before: Tue 26 Sep 2023 05:43:58 +0000
ROA not after: Mon 26 Sep 2033 05:43:58 +0000
asID: 197555
IP address blocks: 192.142.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Sep 2023 04:59:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2002 (0x7d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 26 05:43:58 2023 GMT
Not After : Sep 26 05:43:58 2033 GMT
Subject: CN=65126fa2-4f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:a7:83:c9:0f:70:32:8d:b3:8b:b3:a1:f0:
83:51:ff:95:93:1c:ee:c5:53:29:45:8f:fe:fa:1f:
04:e0:01:06:12:b7:8f:c7:9c:fc:ab:7d:88:e4:7f:
5a:1f:a7:82:3a:b0:5b:ae:a7:1d:1c:31:17:82:b6:
90:34:cd:52:51:9c:74:39:c6:b9:a0:1a:40:d9:1c:
9a:11:0c:44:33:6f:20:a5:5a:85:0c:89:eb:3b:e3:
a7:fa:b6:9c:7e:83:f4:4f:1f:64:c4:84:9d:0a:43:
92:5f:36:10:de:8a:ed:7e:6f:d0:dc:ef:32:6c:a7:
a7:50:46:93:4f:3a:6f:67:4a:51:b5:a8:d6:5b:1d:
5a:a9:4b:07:32:96:4f:63:27:7b:2f:e0:fc:a3:73:
7c:b6:64:5a:32:02:8b:d6:47:de:bd:b9:d7:b6:5f:
52:c5:68:e8:bc:54:d9:b9:c7:f0:4b:51:df:0c:37:
52:fd:dd:2a:81:a3:de:ac:02:d1:bd:80:e1:87:95:
6b:2f:a7:5c:35:b3:9e:0d:33:fc:3e:21:c5:cd:12:
45:ca:0a:b2:47:ca:6e:00:ab:a4:5e:e0:9e:35:3b:
fe:fe:4a:b4:6d:c0:90:fc:ec:26:c8:d9:03:9d:98:
15:d6:25:23:21:9f:24:1c:a6:c5:1a:73:31:38:bb:
26:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AE:15:A7:E4:47:74:4B:9B:17:6F:9F:6F:C9:9E:9D:61:31:D8:72
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B226C0905C2F11EE8DC1C7334AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.20.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:3c:6b:c6:2c:d7:e6:5f:4a:11:da:85:b6:a6:f9:f8:5b:5d:
54:84:54:d6:78:1c:47:68:a8:4e:07:97:c3:57:7a:f9:4c:e0:
aa:9c:d3:bd:5a:bd:a4:5d:0b:0b:c7:3d:85:57:d1:b8:96:df:
33:40:6f:8d:9a:55:0b:37:52:33:04:a2:ad:da:3c:43:94:7d:
1c:88:2b:42:71:a2:0e:f1:8e:3e:04:dc:a8:74:e1:14:4d:88:
aa:fc:c0:8b:a1:40:c0:5d:d2:40:84:d8:b6:e8:79:2b:a3:17:
28:ae:56:6c:54:e7:bf:42:21:f8:c6:11:9b:76:a0:5e:d6:e9:
71:7a:a3:c7:ad:30:a2:53:78:bc:5c:54:32:7d:af:74:ca:7c:
93:d9:3d:24:b5:17:3c:94:53:5f:74:86:bf:65:36:20:9a:de:
5a:51:bd:e4:57:f0:ae:54:d7:6c:12:53:40:7c:a5:21:68:56:
48:45:d6:1a:4e:f2:3f:6d:58:01:3a:59:8e:1b:88:6d:22:e8:
b4:2e:dc:79:b6:59:1b:85:1e:93:e3:d9:eb:b1:b7:33:20:3a:
c0:5c:16:4d:f6:07:a3:db:8b:49:35:88:65:91:bd:ba:60:78:
62:31:5e:14:b5:ed:27:cc:1d:03:75:34:0e:fd:e8:35:ab:56:
7b:5e:cc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org