Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BC54E7FC7D3811EE9B6737104AD9E6FC.roa
File: BC54E7FC7D3811EE9B6737104AD9E6FC.roa (raw, json)
Hash identifier: 7GbPjAgkb4eZAVAVxMz1QAWuParXO0mUFr+YxEPBtAA=
Subject key identifier: 35:76:87:8E:05:C4:E2:46:FF:34:06:B1:DA:E7:29:05:13:97:2B:93
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 081C
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BC54E7FC7D3811EE9B6737104AD9E6FC.roa
Signing time: Tue 07 Nov 2023 06:41:53 +0000
ROA not before: Tue 07 Nov 2023 06:41:49 +0000
ROA not after: Wed 09 Nov 2033 06:41:49 +0000
asID: 212219
IP address blocks: 192.142.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 05:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2076 (0x81c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 7 06:41:49 2023 GMT
Not After : Nov 9 06:41:49 2033 GMT
Subject: CN=6549dc31-cfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:84:4c:e4:59:a7:74:6f:5f:d2:e1:6c:f8:f3:
98:8b:16:2f:ff:69:ac:57:58:6c:f8:a0:b3:5b:79:
77:3b:d9:41:47:75:86:36:6e:70:5f:aa:ae:d3:95:
85:7b:d6:81:46:a5:65:3d:52:45:5d:d9:1c:e8:a1:
7c:ba:11:bc:5a:90:79:6d:72:0f:e2:b1:a3:77:67:
d4:f1:1e:2d:36:dc:27:5b:94:48:30:a0:e5:eb:23:
1a:b0:f6:41:a6:9a:3b:8a:95:06:4f:9f:3e:5f:79:
2c:5c:f4:b0:1c:50:79:2f:33:f9:1e:2f:89:17:a3:
af:26:85:0e:e0:86:5e:2e:0e:cd:f4:3f:bf:81:1a:
17:9c:58:d4:42:95:bd:3d:e6:4e:92:79:42:c1:1d:
2c:bb:33:c7:b9:d7:0c:a9:38:f3:9a:5e:83:26:b6:
d1:a3:bf:c5:35:39:9d:38:15:b8:fe:24:e6:f2:b8:
38:01:4c:f3:0a:da:05:e8:b8:b6:4c:fb:53:c8:28:
39:51:5f:a5:2e:b5:9e:fd:86:3b:1b:96:7d:63:08:
94:0f:e7:a2:fc:ad:39:32:c9:0b:0f:b8:11:b4:e0:
36:e6:02:e4:ee:14:3a:9c:9e:a9:88:27:a8:ac:ef:
ea:58:66:02:00:5e:22:2a:db:4a:9c:2d:0c:c0:de:
75:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:76:87:8E:05:C4:E2:46:FF:34:06:B1:DA:E7:29:05:13:97:2B:93
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BC54E7FC7D3811EE9B6737104AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.5.0/24
Signature Algorithm: sha256WithRSAEncryption
98:62:f3:77:42:ea:82:48:1f:88:fa:8a:b7:c9:99:b5:07:f2:
cc:8d:a4:ff:0e:92:a4:23:4f:aa:f5:91:ad:07:31:4b:60:5c:
d3:da:ae:8a:18:ba:5a:35:b7:a6:4c:01:65:42:5d:25:41:13:
f6:d4:14:c8:80:18:9c:9a:7a:8d:b4:a9:e0:b6:f4:2b:17:99:
86:5e:d5:b8:86:ef:e3:c2:9d:45:e3:e9:28:cb:fd:49:a0:a3:
de:5b:9e:d5:ae:37:d4:e2:fe:26:31:f3:dd:8c:18:ae:e4:07:
2b:6c:5e:97:0b:5b:26:5d:88:f8:96:17:9a:80:83:b3:d9:f1:
dd:53:50:ec:35:4b:e4:07:b4:f1:e4:3e:b3:0c:3d:07:b2:5a:
6e:d7:f8:0d:79:e1:a3:17:5f:39:d0:51:bb:42:2e:a2:b5:58:
9e:96:88:f2:8b:22:21:86:2c:12:d8:83:88:3c:46:ae:5b:ac:
0a:b4:75:d0:f4:f2:fa:1d:ce:ec:90:1e:de:b3:4b:77:a9:7e:
6e:6e:d3:45:af:67:24:d4:fc:39:12:8c:7a:03:db:04:6b:da:
f4:cf:b2:b9:b1:77:23:93:66:d1:68:29:79:47:96:28:5f:30:
e1:31:7a:09:55:f8:40:e2:5b:b0:85:22:59:4c:35:98:3e:21:
46:23:a9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org