Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/CC704818EB0A11ED9F3D513F4AD9E6FC.roa
File: CC704818EB0A11ED9F3D513F4AD9E6FC.roa (raw, json)
Hash identifier: MNR6niGnspJxekWLddw0hQKo33o6G0PitjwNaCSTEfg=
Subject key identifier: 49:51:AC:21:C7:6E:42:15:8D:F6:38:FA:B8:6F:28:91:65:A9:6F:82
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 06C8
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/CC704818EB0A11ED9F3D513F4AD9E6FC.roa
Signing time: Fri 05 May 2023 06:05:13 +0000
ROA not before: Fri 05 May 2023 06:05:08 +0000
ROA not after: Wed 04 May 2033 06:05:08 +0000
asID: 49999
IP address blocks: 192.142.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 05:42:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1736 (0x6c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 5 06:05:08 2023 GMT
Not After : May 4 06:05:08 2033 GMT
Subject: CN=64549c99-9ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c2:a4:7d:d8:a0:e9:a4:0a:d1:dd:ee:9b:97:
52:99:cf:55:c0:7c:00:2e:8d:fe:75:05:a1:bf:c7:
6e:02:de:7e:15:69:bf:83:be:28:0d:5c:10:67:08:
e5:11:5e:44:2b:2d:8c:60:92:7c:84:54:65:da:d6:
79:a6:82:1d:4c:a8:ca:60:79:ab:7d:d1:9a:c8:2f:
9d:70:8d:e4:96:ed:68:c3:f5:c8:3d:94:bb:3c:18:
25:62:47:62:dd:0d:09:3c:7d:9a:b2:e9:dc:98:74:
33:f1:81:3f:88:8f:24:ea:94:9d:60:53:90:02:74:
e7:5d:e0:07:20:ca:5f:83:17:83:f7:4c:07:55:de:
c6:66:37:d0:e8:e7:b4:a7:e2:c3:75:71:76:34:17:
3b:f4:c0:fc:36:71:c6:f4:e2:c6:ea:0e:a8:02:f9:
34:88:75:7a:a5:ac:29:d7:37:6e:41:82:d2:53:d4:
5b:8f:8d:29:1e:33:bb:56:fe:3d:89:12:5e:36:f2:
54:3e:df:b2:08:f4:2a:df:ed:23:39:e8:e0:3f:eb:
3a:e2:84:85:7a:6a:49:c0:b2:0b:3b:47:d1:6c:e2:
7f:b3:02:57:39:31:c1:3e:43:7e:a3:7f:92:9e:a3:
7d:48:a3:5f:a0:d9:d9:6d:a5:6e:4f:5b:51:b3:39:
d9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:51:AC:21:C7:6E:42:15:8D:F6:38:FA:B8:6F:28:91:65:A9:6F:82
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/CC704818EB0A11ED9F3D513F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.72.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:bb:82:a1:3d:f8:da:fb:63:0b:92:c8:8b:64:aa:ec:b6:7a:
ad:06:22:26:09:41:e5:48:66:a3:a5:8e:58:6c:0f:2e:c6:0d:
0a:a4:cc:08:35:76:15:88:11:cf:a4:62:8a:24:2b:e1:14:78:
30:5f:04:3c:d3:8d:52:a9:3b:bd:5c:9b:0d:1d:df:90:28:b2:
af:f8:46:3d:d2:e8:55:98:e6:ed:ad:4c:9a:89:71:4c:46:8c:
a0:c4:82:b8:e1:69:64:dd:e6:0e:71:d9:ea:bf:03:de:17:77:
90:61:fa:f2:56:5b:e6:77:2b:71:d0:31:bd:18:e5:99:c6:90:
42:6c:e9:0f:c3:3b:40:86:d7:dd:aa:e7:f4:6d:02:7b:bd:ed:
d9:8c:95:d6:23:5a:2a:97:6b:23:55:ab:c6:b7:37:52:b8:a9:
bf:91:26:be:2d:9f:80:7c:9d:d6:05:3c:d1:61:bc:50:21:0d:
9e:bd:e2:ab:e8:e6:d2:6a:77:50:80:0a:3e:5b:21:28:37:a3:
57:c6:1c:f7:c0:5f:a6:73:5a:b5:a5:19:60:ba:02:e4:d3:68:
01:18:72:57:06:84:9b:64:7b:44:88:ec:c2:09:50:0e:0e:d2:
25:3a:c4:94:97:b4:00:ff:5d:5d:b0:8c:4a:3f:5e:32:da:f9:
c0:f8:df:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org