Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C705127AB73211EDB11F59A0F1222468.roa
File: C705127AB73211EDB11F59A0F1222468.roa (raw, json)
Hash identifier: LeJESANPd8JD9ZCCpmtwugVuchntHzlmTDpWi3ENex4=
Subject key identifier: 58:B8:BC:51:7A:F5:77:F0:42:BB:9F:C0:F7:DE:C4:78:02:9B:46:43
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 065B
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C705127AB73211EDB11F59A0F1222468.roa
Signing time: Tue 28 Feb 2023 06:40:23 +0000
ROA not before: Tue 28 Feb 2023 06:40:19 +0000
ROA not after: Wed 16 Feb 2033 06:40:19 +0000
asID: 64286
IP address blocks: 192.142.108.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 06:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1627 (0x65b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Feb 28 06:40:19 2023 GMT
Not After : Feb 16 06:40:19 2033 GMT
Subject: CN=63fda1d7-f469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a8:9c:02:f0:5c:96:28:a2:db:07:a4:fe:c5:
69:9c:80:2f:c7:0c:da:8f:a3:73:5f:bf:b4:40:67:
3d:24:f8:b5:b7:cd:5a:ab:d4:35:47:41:e6:b2:37:
6a:d6:33:bc:3d:8b:7e:e0:c1:4e:9d:cc:10:c3:e6:
bb:a1:a3:85:fc:95:fd:c0:70:1c:ca:11:94:80:af:
42:33:54:9b:fb:f3:0b:04:cc:b7:ea:1e:05:e4:10:
bb:1f:6d:04:66:c3:78:2c:04:84:83:03:6a:68:a5:
c3:83:d9:54:6b:83:34:eb:aa:2c:a0:bf:22:8d:92:
ca:bc:5b:ed:ba:dd:a2:db:c1:67:bd:e2:c9:2e:5b:
ef:4d:cd:3f:96:a7:36:74:85:5d:e8:1e:83:32:d3:
81:c0:f6:aa:47:88:bc:c1:10:01:54:5b:36:0b:f7:
26:39:66:a7:66:1d:6b:1f:4e:2b:fa:3d:b4:3d:ee:
48:e9:c6:c1:dd:b5:26:13:59:6e:8d:e1:b0:c9:df:
a0:a2:ef:24:d7:b0:a4:07:ec:f9:e9:21:e4:f7:39:
57:09:27:b7:2f:6b:94:87:e5:6c:6f:81:3e:24:63:
5e:5e:a2:98:9a:a3:c6:14:64:d5:bf:2d:62:f1:1e:
db:54:ff:9b:99:bc:d5:1c:12:a9:95:3c:f5:de:d5:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B8:BC:51:7A:F5:77:F0:42:BB:9F:C0:F7:DE:C4:78:02:9B:46:43
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C705127AB73211EDB11F59A0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.108.0/22
Signature Algorithm: sha256WithRSAEncryption
73:07:e9:f0:a4:c4:bf:f9:ee:79:5e:31:40:cf:30:2c:36:da:
70:30:4c:13:71:eb:e2:cb:35:3f:a9:28:1f:ce:8a:dd:88:9b:
0a:f2:2f:96:45:6f:11:67:2f:d4:60:9b:cc:ec:91:ef:30:aa:
0e:69:43:92:6f:2f:a5:ea:ed:53:5d:9f:50:1c:c3:76:61:76:
fa:e4:8d:2d:6f:8a:60:4a:cf:dc:36:1d:d0:29:31:ce:be:4e:
68:63:32:56:4d:92:9d:65:27:03:d4:ef:e5:30:6c:f3:5f:14:
b0:70:a1:a0:fb:ab:27:85:3f:78:03:3d:7f:19:49:ca:a8:8a:
41:e1:2d:ef:dd:0f:ba:e8:cf:4f:48:af:26:5f:ff:46:a9:78:
72:36:3f:a7:17:82:e5:cb:01:c4:83:d0:84:97:85:14:5f:6b:
26:f7:aa:24:59:98:6c:bc:6e:fb:5f:e2:f4:04:38:14:c9:99:
97:8a:7b:cd:e6:01:a3:ee:b6:0f:d1:f0:b3:9b:a6:51:5f:a4:
1f:40:f9:87:7a:1b:57:8a:f1:27:ce:24:15:57:b9:6f:25:45:
cf:bd:c5:7f:d3:f0:2f:26:0a:17:9a:ef:1f:2f:1f:63:92:45:
f5:ca:83:c7:4f:50:61:f4:99:9d:69:48:ab:68:be:b2:2d:ed:
d1:c3:4a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org