Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B7DBCCDE1D5511ED86F7D4DFF1222468.roa
File: B7DBCCDE1D5511ED86F7D4DFF1222468.roa (raw, json)
Hash identifier: A2kDPEpafp4+gcNwIzzFe/AJtX4Q12YQyMuAqP8mCT4=
Subject key identifier: 58:5A:1D:B9:E6:CF:2A:EB:B8:89:B4:91:9F:74:01:27:07:31:48:76
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 054C
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B7DBCCDE1D5511ED86F7D4DFF1222468.roa
Signing time: Tue 16 Aug 2022 11:22:31 +0000
ROA not before: Tue 16 Aug 2022 11:22:27 +0000
ROA not after: Wed 11 Aug 2032 11:22:27 +0000
asID: 19437
IP address blocks: 192.142.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Nov 2022 16:10:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356 (0x54c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 16 11:22:27 2022 GMT
Not After : Aug 11 11:22:27 2032 GMT
Subject: CN=62fb7df7-af97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:94:fd:6b:8e:18:b3:07:d8:81:60:ea:2b:
2c:4e:cb:71:1e:b3:55:da:90:b6:3f:4f:f8:93:c2:
3d:2c:8e:52:f9:a6:c5:fc:82:ce:45:8b:89:72:bf:
a8:ec:fa:63:76:f8:9a:0a:2e:54:32:de:f6:96:df:
3c:0b:03:10:69:70:39:7b:54:9c:d6:93:29:93:4c:
be:18:cf:6e:25:3c:eb:d3:90:c7:ef:ee:3a:16:c8:
ea:6c:30:4e:02:c8:75:d4:3f:e5:f0:08:36:37:89:
f8:62:04:e5:36:33:6b:33:26:64:68:ee:4d:b6:c7:
93:09:de:74:af:03:0f:d5:b5:ae:97:88:2e:a5:1e:
7b:cf:30:71:64:3b:a7:bd:e1:e8:e5:e5:c0:95:58:
f5:54:7c:fc:fe:33:4d:0e:bb:ba:75:6a:81:87:b7:
0a:25:d8:89:24:db:00:22:6d:c7:d8:3e:50:89:87:
77:c8:88:31:99:d8:42:fa:e1:d4:8d:65:81:d6:fd:
a0:4f:84:3d:9e:bf:c0:3d:a5:1d:51:a2:78:ca:b5:
ea:30:b9:67:28:aa:80:ac:7b:51:ae:ea:f9:bb:e0:
c4:f6:1f:e6:20:ce:9d:5d:84:54:20:76:64:87:11:
5a:b3:d3:2f:55:f2:b2:7d:63:fc:66:e5:78:37:1c:
f9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5A:1D:B9:E6:CF:2A:EB:B8:89:B4:91:9F:74:01:27:07:31:48:76
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B7DBCCDE1D5511ED86F7D4DFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.106.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:a2:a6:3f:10:ff:be:71:3b:33:43:93:af:b7:51:1b:27:59:
87:b2:b7:95:89:36:32:6d:d3:3d:c0:15:5c:ce:ee:0c:32:8d:
74:bf:db:7e:22:32:2b:53:fe:e5:a6:22:f7:53:09:8d:40:3f:
5d:c7:44:56:8a:a8:30:07:5d:d1:2b:1d:4e:22:55:10:fa:c1:
e9:bc:9a:18:e1:23:aa:14:ca:88:39:5a:67:8c:c6:c9:bd:4f:
e9:d0:15:d3:02:73:7f:39:9d:13:0b:19:3a:db:f5:fd:4b:ac:
26:6b:70:12:43:e2:17:ad:31:f5:3b:a3:d8:42:cb:2e:e2:5c:
28:5f:80:6a:e6:27:0c:f5:fd:7f:de:31:df:1c:b6:8f:e4:5f:
2e:7a:83:c5:81:7e:04:cb:a4:1b:1a:c9:20:6d:71:5b:7a:00:
f7:33:2a:fb:e7:8f:21:4e:0f:94:56:1d:fa:01:00:b1:6e:74:
36:b0:97:81:9c:3a:e5:64:db:0b:58:73:4e:1d:2d:d7:62:d0:
0d:29:ca:2c:75:5c:01:1c:a9:9f:47:3f:e9:de:10:d7:c4:bd:
13:2f:ae:5b:37:90:65:79:5f:26:cb:d6:a3:18:0d:af:92:cc:
21:d2:33:b0:f7:49:63:ae:f7:ab:c1:73:e1:62:5a:58:b4:cf:
49:82:04:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org