Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BF914BC0512F11EEB6880B1E4AD9E6FC.roa
File: BF914BC0512F11EEB6880B1E4AD9E6FC.roa (raw, json)
Hash identifier: sNYb44TLrvLzw7EfWDK06XynN2faj/eJIr99mlgwvQE=
Subject key identifier: DE:B8:31:BE:9C:E5:0D:4C:49:5B:0E:61:62:F7:A2:2C:9F:68:78:B9
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 07A4
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BF914BC0512F11EEB6880B1E4AD9E6FC.roa
Signing time: Tue 12 Sep 2023 05:46:41 +0000
ROA not before: Tue 12 Sep 2023 05:46:38 +0000
ROA not after: Wed 14 Sep 2033 05:46:38 +0000
asID: 212219
IP address blocks: 192.142.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 11:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1956 (0x7a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 12 05:46:38 2023 GMT
Not After : Sep 14 05:46:38 2033 GMT
Subject: CN=64fffb41-94d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:83:69:4a:0c:64:15:e1:b2:8f:bf:e6:79:
e5:3e:f4:99:e8:f3:21:e7:13:e1:f3:7b:50:dc:40:
d9:a3:17:59:c7:c9:e1:73:42:7f:51:6c:df:b7:7f:
5d:6a:1c:82:85:50:da:e7:15:4d:e9:1a:e3:0b:17:
1f:9b:1e:6c:b3:ae:0d:49:fc:57:7d:fc:f7:2e:5e:
17:16:28:81:87:e9:9a:63:aa:a3:81:51:d9:ef:d6:
be:88:15:7c:6c:1e:7e:f8:d8:e1:31:20:7c:cd:47:
0c:54:13:92:ff:16:23:cc:8b:a1:18:45:ff:bc:a9:
16:a5:8c:f4:a1:a8:56:56:42:86:5c:77:13:79:f6:
4c:7d:29:78:14:a4:61:41:38:84:23:49:d1:5d:d4:
dd:4e:31:8c:c4:eb:ba:c0:ea:87:f4:50:40:09:3c:
38:d8:02:ab:b5:e1:89:14:8e:a0:b1:af:37:84:b6:
04:df:4c:c1:52:7e:de:4c:6f:9d:7c:6c:ff:04:40:
7d:d2:33:50:67:fb:d6:ef:5c:bf:a4:81:f4:e3:f7:
17:f1:2c:fb:13:cd:37:b8:76:be:42:8f:a7:18:8b:
f0:ce:cd:1f:40:66:6e:40:a3:87:e7:fa:6b:15:fa:
e2:bf:27:4b:7d:1d:e8:2a:5d:16:94:a0:08:33:e6:
00:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B8:31:BE:9C:E5:0D:4C:49:5B:0E:61:62:F7:A2:2C:9F:68:78:B9
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BF914BC0512F11EEB6880B1E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.106.0/24
Signature Algorithm: sha256WithRSAEncryption
70:15:9b:30:46:52:25:ed:07:57:15:60:95:c9:97:f0:31:cd:
f2:a9:8b:7a:07:68:87:89:59:13:38:46:a6:21:33:0f:d0:90:
01:97:6c:3f:75:3c:fb:fd:07:3d:2c:0f:64:23:84:76:62:d9:
f6:94:02:05:b6:e8:e3:d7:53:2c:7f:02:f7:e2:e2:a2:83:23:
fa:ab:e0:86:63:d7:26:98:46:91:3b:ec:7d:06:42:20:f3:29:
33:64:34:cc:85:11:99:f7:d4:e7:9a:a1:2a:39:59:8e:e6:99:
99:3e:ea:b3:17:8e:83:3a:be:73:32:a4:78:d5:3a:3a:4e:66:
a3:3d:14:2a:a3:8d:b9:ee:ec:e9:ce:1b:30:91:87:0b:e0:9d:
88:64:e0:eb:19:d8:51:b0:67:ed:7e:ce:6c:c9:0f:86:a4:51:
40:2d:c9:25:13:27:91:1d:85:9b:7d:67:0d:50:fe:4e:07:f6:
6b:bb:95:19:79:8e:f9:7b:01:9e:26:68:ee:7c:87:b1:22:cb:
d3:f5:4e:25:72:01:e6:4c:35:a7:ef:ab:29:f2:46:d6:39:82:
a0:d3:1d:f5:4d:f2:b8:c3:33:ea:47:04:0c:db:fd:81:63:c5:
b5:1e:db:b5:59:6f:ca:4e:53:44:6d:e3:0f:e1:59:da:6b:c1:
cc:0e:f0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org