Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C6A64CBA2EE111EDA4BB10C4F1222468.roa
File: C6A64CBA2EE111EDA4BB10C4F1222468.roa (raw, json)
Hash identifier: mXDi3mCMokOCnqAd/PTr00R61DJpCFMM8qYbw16MCsc=
Subject key identifier: FC:0C:CA:A3:A2:A3:37:FF:8D:69:BA:EA:8F:B5:1D:1E:77:B1:05:25
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 056E
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C6A64CBA2EE111EDA4BB10C4F1222468.roa
Signing time: Wed 07 Sep 2022 19:17:55 +0000
ROA not before: Wed 07 Sep 2022 19:17:50 +0000
ROA not after: Tue 07 Sep 2032 19:17:50 +0000
asID: 7018
IP address blocks: 192.142.248.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jan 2023 05:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1390 (0x56e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 7 19:17:50 2022 GMT
Not After : Sep 7 19:17:50 2032 GMT
Subject: CN=6318ee63-40bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:d7:d3:b8:36:9d:51:90:c5:f4:3c:bf:2c:
3b:a4:8f:34:f9:93:0c:89:6e:3e:89:04:2b:2d:c8:
1e:6a:02:94:c6:dd:8e:19:3a:68:c7:1a:7a:75:d3:
3a:55:16:84:08:e2:ca:23:ec:a2:de:c1:95:cd:f5:
56:45:57:18:ff:0e:02:7f:c6:cf:bc:43:ec:b5:90:
a7:98:64:9b:19:2d:80:c2:4b:a4:77:19:0b:ad:70:
82:9d:d0:11:c4:5f:c0:92:d8:c6:42:94:55:84:50:
45:46:e5:fd:af:5f:ca:6b:62:32:0a:b8:91:36:cd:
24:a7:84:ac:aa:52:ec:de:5f:50:96:16:87:ee:99:
24:df:cf:9e:9b:27:ff:8b:13:ab:c5:30:80:32:a4:
b6:a9:1a:f5:3e:7f:fc:ee:42:9b:d9:0c:82:59:d6:
d2:b5:89:1a:45:5b:b5:c8:6e:44:63:73:c1:8d:f5:
4b:60:99:91:13:4d:e2:f3:4f:88:47:79:11:fa:1b:
44:0d:29:d6:96:dd:04:ce:67:fb:2a:fa:f5:fb:48:
5a:7d:20:71:b3:c4:88:3b:00:c3:0e:4c:84:6e:72:
f9:b8:73:a6:01:15:ad:e6:c1:b2:4b:7e:7f:f0:92:
87:b5:12:91:9d:57:69:2c:d9:2b:a3:cc:2c:99:b0:
ba:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0C:CA:A3:A2:A3:37:FF:8D:69:BA:EA:8F:B5:1D:1E:77:B1:05:25
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C6A64CBA2EE111EDA4BB10C4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.248.0/21
Signature Algorithm: sha256WithRSAEncryption
84:10:e0:d3:f1:da:29:45:04:92:4d:d8:ff:5f:1e:6d:98:c6:
e1:bb:5d:28:c7:3e:23:32:48:fa:93:29:1c:fe:0a:99:bf:cd:
ae:3d:df:73:4e:6d:f5:f2:50:f8:40:81:9d:75:31:3e:0a:01:
81:b9:35:ba:38:e3:62:d6:81:ce:46:6c:9e:07:af:11:5a:4c:
40:c6:e4:20:c7:1b:69:47:ac:fc:a1:3e:96:c5:ea:c3:b9:c1:
3b:7a:c2:9f:07:f6:58:47:ab:67:83:e1:02:b6:e1:86:aa:28:
e4:a3:3a:75:f0:9e:eb:59:55:53:2b:bc:dd:6b:1b:9d:10:91:
fd:fe:e9:5c:6c:cb:36:ce:fd:84:74:4b:dd:ce:0d:0a:d8:a8:
be:4f:c5:d4:74:18:b0:a3:28:8a:00:4a:f6:c4:95:8c:4c:cc:
d1:46:ad:45:e2:38:cd:2a:60:8e:61:dd:3a:cf:89:c6:e2:1a:
ae:39:a3:3d:cb:53:ed:8d:90:77:65:44:ff:3d:8a:d3:97:e1:
10:2c:ee:ad:99:33:1f:88:8d:35:97:26:2a:d1:49:ea:db:6f:
05:f8:c2:13:74:85:58:6b:94:eb:d1:24:94:2f:ca:11:a2:dc:
f5:03:de:72:68:91:1b:41:5b:69:f9:e3:29:f4:b4:87:1c:c8:
84:f5:ce:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org