Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B337EAE0D14611EEBE237B70775412E6.roa
File: B337EAE0D14611EEBE237B70775412E6.roa (raw, json)
Hash identifier: /nt76Zx0Zv3tpejxlQMppCcPqKdCxsvgtB9t+DUghrc=
Subject key identifier: 70:C0:43:9A:7A:37:20:19:8E:2F:29:69:BF:35:F5:8E:A0:85:A2:03
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 08D8
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B337EAE0D14611EEBE237B70775412E6.roa
Signing time: Thu 22 Feb 2024 05:53:28 +0000
ROA not before: Thu 22 Feb 2024 05:53:25 +0000
ROA not after: Wed 15 Feb 2034 05:53:25 +0000
asID: 60707
IP address blocks: 192.142.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 06:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2264 (0x8d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Feb 22 05:53:25 2024 GMT
Not After : Feb 15 05:53:25 2034 GMT
Subject: CN=65d6e158-09d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:9a:0b:18:15:f5:e4:e4:a8:1f:58:50:33:
df:cb:01:18:b9:1f:66:89:34:21:3f:12:42:c8:af:
2d:c4:7d:f6:f1:1e:44:0d:b5:0d:ac:2a:80:e2:7a:
58:4d:03:5e:4e:42:9d:a1:93:98:8f:5b:ef:bf:32:
a2:df:fb:1e:26:0f:f8:b2:f2:79:25:22:72:b5:ce:
d2:a4:b3:98:1c:23:ea:94:22:d1:63:99:a9:43:30:
b5:59:4f:55:44:36:a6:aa:d0:65:22:95:98:e8:50:
bf:d3:b3:6c:41:e0:1b:af:e1:92:4a:7a:4f:85:fe:
86:6f:ef:93:e5:4d:9b:a3:43:33:3d:21:c7:b1:a5:
1b:28:f9:0e:cb:1f:fe:b5:7a:9e:7e:a2:e0:b6:cf:
68:22:4c:12:91:82:ca:08:2e:5e:69:5f:07:f1:f4:
1a:ee:bc:98:d9:b6:9a:d7:3c:cf:27:0f:81:4b:38:
16:40:97:66:ce:02:fe:39:72:71:6d:27:db:35:d9:
ce:33:07:90:9a:ff:02:7a:cf:1b:bc:1e:01:48:eb:
5d:f5:44:f7:e8:46:9a:6f:26:b7:c1:71:c0:23:e0:
62:c9:30:66:e4:73:b4:bc:d4:a5:a2:49:4f:e8:d0:
e4:0e:7e:71:b3:a5:e4:17:ba:27:e6:6b:72:6c:6f:
43:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C0:43:9A:7A:37:20:19:8E:2F:29:69:BF:35:F5:8E:A0:85:A2:03
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B337EAE0D14611EEBE237B70775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.180.0/22
Signature Algorithm: sha256WithRSAEncryption
44:44:48:51:a5:1d:fe:ed:b9:ec:2e:50:ba:48:d8:1d:fd:c5:
2e:7d:83:60:59:7c:0d:cc:88:20:00:60:f2:70:9c:53:e4:c5:
6d:0b:4b:e8:07:2d:74:41:40:f2:a9:58:e5:b0:60:b7:3e:3e:
bc:45:77:e1:4f:d9:28:2d:21:a0:77:23:eb:04:31:b6:b4:59:
91:0d:ab:90:02:53:8b:49:22:b7:53:9b:b8:98:1a:cc:b1:45:
7f:1d:1a:42:10:ef:70:99:ec:ab:56:22:d0:06:bd:45:03:c6:
0c:47:67:19:23:9f:da:98:d6:c3:92:ab:53:54:d2:8b:db:8b:
29:22:f9:54:97:94:48:2c:11:46:ed:0e:a8:e0:58:42:75:62:
ef:f3:04:b2:24:4d:86:8e:a3:c3:75:c7:60:1c:d2:33:0c:f5:
a8:0c:00:27:04:6c:e5:f7:ad:f0:d6:81:21:52:8a:9e:39:b4:
ed:3c:47:90:3e:86:55:7f:29:a2:ac:64:a6:98:af:2f:b2:15:
f2:6d:30:8e:d7:d4:90:cc:6b:64:4c:b9:ae:d4:73:b9:d5:38:
4e:ab:10:c9:5d:ef:f2:98:26:40:9b:dc:1d:89:0f:b8:56:34:
55:da:27:22:71:ca:d8:0b:05:68:e3:d9:b2:31:fc:c3:46:a8:
90:34:e3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org