Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BB673B5E199D11EFAA4C5A2F017001B1.roa
File: BB673B5E199D11EFAA4C5A2F017001B1.roa (raw, json)
Hash identifier: OBoQne2ZLKnejeHAPm0k0kCU1AqJpgUeDfgLvCkeGc0=
Subject key identifier: D4:72:CD:B3:8C:23:53:5D:39:BC:15:1C:C6:B9:65:96:AA:1E:DE:75
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0971
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BB673B5E199D11EFAA4C5A2F017001B1.roa
Signing time: Fri 24 May 2024 07:17:52 +0000
ROA not before: Fri 24 May 2024 07:17:48 +0000
ROA not after: Wed 17 May 2034 07:17:48 +0000
asID: 7018
IP address blocks: 192.142.184.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:13:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2417 (0x971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 24 07:17:48 2024 GMT
Not After : May 17 07:17:48 2034 GMT
Subject: CN=66503f20-25e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:ed:f8:22:b2:4d:64:60:03:0f:ac:82:b5:
a1:0c:7b:f4:fd:ce:81:61:64:37:1a:8e:b6:75:78:
bb:29:5a:58:8f:c1:fa:06:53:a5:9c:d8:73:8f:2f:
43:91:34:b2:7c:86:cb:fa:5e:85:1a:25:b4:04:b2:
1f:6f:ac:da:62:56:06:7b:31:09:4a:1c:d0:98:98:
29:c3:be:92:f5:f7:da:ee:35:89:27:f3:99:60:1b:
96:2a:8a:43:dd:ad:cc:75:df:ce:5d:a6:c7:cf:93:
39:1f:05:9a:38:f6:34:37:b3:3e:3b:fe:84:17:6f:
5e:92:ff:ef:9e:ce:b6:2f:26:df:d9:ce:62:a1:f4:
e2:8b:35:40:fe:1b:01:af:23:ac:fc:20:98:a2:71:
40:b3:18:9d:38:40:8d:8c:d9:4d:57:55:3c:62:70:
94:24:4f:9b:43:4e:40:8b:25:cf:a8:8a:d5:13:61:
cf:2e:9e:20:3c:f3:d0:78:1d:9e:a9:8b:ca:c3:f2:
e8:a5:0b:c4:29:d4:db:05:8d:a7:40:7e:01:a8:b9:
08:0f:e6:18:49:fc:8a:ee:51:f5:bd:4c:78:48:5d:
14:6e:61:bf:63:ca:40:01:6f:e3:5e:5d:64:59:65:
f0:7a:2e:7a:d6:2d:19:c0:71:a6:02:65:9b:a0:89:
2b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:72:CD:B3:8C:23:53:5D:39:BC:15:1C:C6:B9:65:96:AA:1E:DE:75
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BB673B5E199D11EFAA4C5A2F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.184.0/21
Signature Algorithm: sha256WithRSAEncryption
67:3c:54:f5:99:a2:ed:90:68:7a:be:02:67:58:b9:f6:e9:b2:
a6:34:0e:11:d5:12:0b:a1:f3:62:f4:f6:9a:f6:a1:6b:21:7d:
b9:71:e5:08:55:cd:0f:b6:5f:c2:3b:3b:c4:4b:13:83:58:a9:
de:f6:0a:9e:02:05:9d:47:ce:39:67:8e:09:d3:14:82:9d:17:
c0:2f:cc:86:c2:60:d1:75:87:7f:07:16:73:f6:57:64:c5:63:
19:17:8a:10:05:fc:49:25:a7:cf:40:0e:05:57:bf:7e:97:6d:
fc:c9:45:f4:25:fa:53:f1:83:53:20:93:b2:d5:7c:d8:11:aa:
fc:77:74:45:91:50:e0:c1:79:bb:cd:0a:40:d9:07:6b:16:00:
20:f9:e4:2e:36:7d:fb:b7:36:db:c3:11:7c:47:2c:dc:9f:b4:
db:b7:ac:fc:71:b0:c3:88:3e:e7:ef:83:09:da:d5:f1:fa:39:
0f:9f:cc:3f:09:86:23:f5:da:d6:8c:f3:e8:09:61:55:db:90:
69:60:96:60:76:ed:6f:c2:4a:c5:66:0d:df:cb:07:0b:5b:d3:
9c:7e:55:c7:34:7a:14:38:e5:11:c7:51:f7:b0:d6:ce:c9:ce:
88:c4:75:9a:0f:03:bd:98:89:30:2f:3e:5a:25:f1:fa:98:d4:
f3:10:52:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 13:22:29 2024 by rpki-client on console-ams.rpki-client.org