Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BE1A27F6187F11EDA5A56F89F1222468.roa
File: BE1A27F6187F11EDA5A56F89F1222468.roa (raw, json)
Hash identifier: WIEKBphW3JrwDe3hcVC0y1uZ+Ol0rWds5anGr0APOzg=
Subject key identifier: 8E:B6:02:34:A4:33:70:A9:B3:D7:2C:C3:C7:3F:57:03:0F:C0:7D:80
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 053A
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BE1A27F6187F11EDA5A56F89F1222468.roa
Signing time: Wed 10 Aug 2022 07:40:45 +0000
ROA not before: Wed 10 Aug 2022 07:40:41 +0000
ROA not after: Wed 11 Aug 2032 07:40:41 +0000
asID: 7018
IP address blocks: 192.142.240.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Sep 2022 06:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1338 (0x53a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 10 07:40:41 2022 GMT
Not After : Aug 11 07:40:41 2032 GMT
Subject: CN=62f360fd-0c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ad:7c:9b:02:59:a6:89:98:39:cc:de:0b:c1:
f7:c5:cc:04:fa:a5:56:8c:ad:93:78:6a:b7:85:19:
6a:a3:b5:d8:c0:c3:ac:75:bd:f5:0e:6c:07:85:7c:
a1:15:74:d8:70:17:3a:93:ab:41:df:6f:97:39:f1:
fd:bc:35:5b:21:52:e7:b4:f9:ae:21:3c:ac:81:ed:
56:b1:f7:48:f2:b2:35:61:a4:7c:97:1b:b4:f8:a9:
2a:ce:06:d5:ac:ce:bf:81:b5:0e:63:7d:3d:e3:c8:
cb:e6:43:61:8f:2f:43:24:02:0d:26:04:38:9f:a3:
65:24:b4:c8:0b:b7:0d:5a:e2:4f:4f:bf:e5:05:79:
42:07:a4:3b:d0:5a:c8:68:bc:f8:d8:35:e5:78:4c:
be:9d:09:8f:69:4c:86:a4:34:3e:e5:07:2c:0a:ce:
fb:4a:46:19:6b:a9:b2:e4:e8:8c:83:0d:52:2b:6d:
f0:53:af:f7:80:f9:5e:48:26:1e:43:ed:68:e1:f4:
ed:09:53:55:bc:d3:f1:ef:67:cd:81:2c:1b:54:bf:
c7:83:a6:0e:ac:44:57:fc:90:72:b4:3e:ae:27:c6:
be:d8:0b:ea:ba:d5:45:73:be:b8:87:1b:6c:30:c1:
be:14:d1:3e:d4:e6:4e:74:a7:b7:74:15:cc:d4:1e:
99:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B6:02:34:A4:33:70:A9:B3:D7:2C:C3:C7:3F:57:03:0F:C0:7D:80
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BE1A27F6187F11EDA5A56F89F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.240.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:c8:79:f2:14:42:17:30:d3:0f:36:98:46:bb:e6:79:3c:1d:
e4:80:4b:54:cb:6d:93:dc:ac:ce:41:9f:cb:57:2d:3a:59:cb:
1d:cd:69:cf:66:fb:4d:ff:49:90:a2:53:61:35:40:8e:cd:5c:
24:de:54:72:fb:17:5f:3a:43:04:bf:2d:61:f2:80:45:15:ea:
e6:b8:4b:36:b2:c0:c7:d7:41:93:96:1e:e5:8f:2a:0f:b4:3d:
00:e7:db:36:fb:50:01:d5:1e:8a:b2:a7:06:3a:e4:2c:a0:e6:
b4:83:0b:3d:01:b8:53:22:fb:a9:8c:17:19:28:0d:3e:06:cf:
d0:84:62:64:d3:e2:f7:3f:48:9f:0d:c5:74:41:22:fa:cb:a7:
3e:72:68:a9:f4:8a:2b:01:92:e7:98:75:92:5d:c1:63:02:61:
3e:5c:02:67:47:cd:95:01:fc:da:7f:8a:24:6d:eb:62:8e:15:
77:10:36:5d:67:f2:c5:0a:f1:92:7f:b2:e6:de:db:3e:3e:83:
94:20:0f:a2:66:c6:2f:ce:39:5e:9a:68:7f:b0:c2:c7:a2:68:
eb:6f:fb:62:03:c1:57:cd:5a:97:87:b8:a9:90:c1:b8:d8:11:
6a:e1:88:05:57:51:d2:fb:dc:ff:19:98:ae:b7:8a:df:27:e1:
8a:0d:09:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org