Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BB833B9CD14511EEA8AFB76E775412E6.roa
File: BB833B9CD14511EEA8AFB76E775412E6.roa (raw, json)
Hash identifier: I2cTLrYLvmoa9I4hSdrpyWl1/WqmnZErtAUG1HDlLEw=
Subject key identifier: 7E:8F:26:9F:59:3F:A1:A0:D8:5C:0B:DE:AE:2E:31:2E:85:0C:69:CC
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 08D4
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BB833B9CD14511EEA8AFB76E775412E6.roa
Signing time: Thu 22 Feb 2024 05:46:32 +0000
ROA not before: Thu 22 Feb 2024 05:46:29 +0000
ROA not after: Wed 15 Feb 2034 05:46:29 +0000
asID: 60707
IP address blocks: 192.142.132.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 05:59:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2260 (0x8d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Feb 22 05:46:29 2024 GMT
Not After : Feb 15 05:46:29 2034 GMT
Subject: CN=65d6dfb8-0bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:35:54:bf:69:c0:42:77:3f:33:6e:76:0f:05:
d3:f5:72:e8:16:35:6b:32:ee:70:7e:d6:f0:cf:60:
a0:cb:57:d9:01:e7:12:64:46:e3:e2:c4:8e:b4:da:
18:01:2a:a7:04:00:91:b3:85:6e:fa:6b:9d:a6:b7:
af:3c:32:10:50:25:8d:06:7a:fd:e1:f5:d6:d1:67:
21:66:2a:a4:04:a0:7e:e3:90:b8:96:60:15:ea:88:
6e:2b:88:e3:40:f8:fb:34:ec:a0:94:bf:cb:71:b8:
cb:b7:25:c6:b5:7a:78:b2:a7:18:f2:fa:63:0e:d5:
15:b1:60:de:34:98:1b:3a:54:02:ac:b1:8b:6e:87:
04:2f:b9:b7:c1:0a:9e:b0:ce:51:59:17:60:ce:28:
5b:c9:21:50:33:36:bd:0b:0c:5e:9f:a1:2f:6c:fb:
ab:03:f1:57:21:f3:1e:8e:87:77:ec:80:bb:04:9d:
32:66:3c:d8:a1:9a:19:70:f2:d5:9c:12:9f:82:20:
f1:be:26:07:ad:9d:2f:ba:51:94:3e:59:69:76:b9:
33:5a:e2:96:2b:74:dc:5f:37:86:a4:1b:ad:f1:1f:
2a:cd:c4:a8:6a:9a:64:9a:9d:48:ea:a0:e6:2e:10:
71:07:20:b1:1f:1e:0f:e0:92:6b:8e:2a:37:0d:0f:
33:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8F:26:9F:59:3F:A1:A0:D8:5C:0B:DE:AE:2E:31:2E:85:0C:69:CC
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BB833B9CD14511EEA8AFB76E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.132.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:94:d5:e9:2f:e4:7a:c1:cc:31:d7:82:a8:89:69:25:d6:88:
1a:24:0e:a7:14:e2:dc:18:ce:c2:bd:9d:6a:a3:03:77:c7:82:
00:2f:46:26:63:cb:5f:03:de:39:9d:72:f7:02:77:18:68:04:
44:1c:ea:2a:a5:0c:79:c9:82:e4:f5:7e:60:78:42:eb:80:87:
3c:a2:62:16:bb:b6:11:68:cd:b6:18:35:bc:e4:c2:28:2d:ce:
e4:86:cd:15:bf:4e:50:77:8d:13:ab:d2:60:4f:2a:8c:28:74:
9d:c0:e4:2a:b4:a0:3c:91:bb:17:62:21:41:ba:36:63:f1:5e:
2a:31:d9:4f:13:d7:be:1d:67:07:34:ad:e6:57:da:a2:1b:37:
4f:85:a4:94:9c:c2:03:0b:bc:03:95:8e:fa:90:c7:09:2d:60:
79:98:fe:ec:95:d5:84:5e:1d:9d:84:99:f3:3a:88:72:70:6f:
e4:94:5d:d4:79:4c:39:6b:c5:18:ee:86:b2:a6:cf:2d:27:c5:
61:fa:86:01:0a:37:ab:26:2d:72:88:86:6c:c7:6a:fd:2d:f9:
10:a6:3b:4d:5f:22:9e:70:51:9c:11:cb:4e:dc:0a:da:3e:0a:
75:2c:5b:77:a2:41:55:b0:68:4c:85:36:d8:a0:b3:f9:84:df:
58:37:72:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org