Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BB11A31C56AF11EEAB04AB294AD9E6FC.roa
File: BB11A31C56AF11EEAB04AB294AD9E6FC.roa (raw, json)
Hash identifier: SBFkID5WYDD4GxDG/v2ua2g7YXg5j69teCm3cCQddcI=
Subject key identifier: 13:C2:3C:F9:3D:65:F9:66:20:DD:9F:0F:5A:94:2D:0F:A5:4C:51:C5
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 07C1
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BB11A31C56AF11EEAB04AB294AD9E6FC.roa
Signing time: Tue 19 Sep 2023 05:45:25 +0000
ROA not before: Tue 19 Sep 2023 05:45:21 +0000
ROA not after: Tue 20 Sep 2033 05:45:21 +0000
asID: 5065
IP address blocks: 192.142.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 05:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1985 (0x7c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 19 05:45:21 2023 GMT
Not After : Sep 20 05:45:21 2033 GMT
Subject: CN=65093575-77c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:be:ea:ba:cb:f6:dc:a8:c0:54:05:97:55:
98:38:55:62:4e:c3:dc:49:2f:26:c2:64:9d:b0:49:
12:10:e0:7f:f7:1f:f4:9e:48:8f:ea:22:36:e8:38:
da:b8:48:75:fd:0a:e0:cf:c8:2b:43:d7:04:f0:5d:
a0:3d:54:96:f9:01:a0:76:67:dd:25:2a:04:df:a3:
dd:d0:70:09:ae:53:76:65:5f:45:2b:a7:e0:05:b5:
9e:e8:cc:7e:91:67:51:b2:e8:09:45:c1:8a:8b:a2:
16:b2:13:68:11:e9:b3:fe:6e:ed:18:64:b1:a2:b3:
95:b2:ff:4c:9d:b5:d9:df:24:8b:12:b7:99:0e:a8:
7c:89:a4:7f:b8:29:39:80:c1:fc:db:29:a5:8a:b7:
b6:ef:ec:d7:f3:27:15:f1:be:f8:64:1b:68:52:1a:
2c:88:c6:ce:50:6d:04:8e:e6:78:15:42:e9:62:5e:
fa:ff:ba:28:9a:f3:6b:d2:5d:09:54:36:2f:a0:79:
ab:9f:bf:db:25:9a:6b:9c:08:0f:a7:7a:46:b7:2f:
bb:ec:8b:32:2b:12:54:d7:71:5c:a1:80:2c:57:c8:
aa:e1:ea:bf:63:c8:b8:10:76:24:8e:e2:26:c9:ba:
92:f3:f9:f3:c2:70:14:2c:89:c8:8d:b6:8a:d3:54:
fe:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C2:3C:F9:3D:65:F9:66:20:DD:9F:0F:5A:94:2D:0F:A5:4C:51:C5
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BB11A31C56AF11EEAB04AB294AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.208.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:bd:a5:a0:da:a8:90:e1:41:8e:5b:fc:92:38:17:2c:a4:1f:
ee:b4:6e:6a:cb:e6:e3:46:02:fb:25:d4:4d:ac:5f:d2:6d:d3:
53:7e:3d:4d:05:d2:1d:9d:13:26:e6:47:1e:7e:72:0e:a8:2b:
3b:4c:ca:40:a6:d6:fc:68:0e:ad:02:86:f9:72:60:b6:58:fd:
ab:f0:4a:7f:18:ed:47:2f:a9:f7:5e:d9:72:05:62:db:d5:c9:
13:c5:69:c9:c2:8b:da:6c:ee:9a:39:96:6e:ef:a1:3e:bc:02:
cf:c2:78:d6:d4:69:60:af:0a:26:33:62:2f:2d:ed:bb:73:c1:
f7:e6:72:c7:06:f7:80:ee:3b:8f:c9:19:6d:12:fe:ab:9f:ee:
48:5f:e5:2f:5a:d7:a1:b1:bc:78:f6:81:e3:54:71:d0:a7:67:
26:49:91:eb:59:c3:1b:7a:4d:06:bf:77:00:3e:8b:51:67:9c:
f2:23:dc:e6:01:fa:03:22:96:92:51:7d:77:9d:6b:0e:7d:25:
46:77:48:05:00:0c:39:00:f8:e3:c4:97:36:23:14:a0:cc:82:
e2:15:e2:f3:e4:f8:8c:f3:06:b0:93:20:be:20:84:34:30:67:
79:c1:6f:bf:35:56:f0:76:25:07:5d:b1:49:57:d4:e8:5f:c9:
50:35:70:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org