Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D2C85AE8187E11EDBFB2A786F1222468.roa
File: D2C85AE8187E11EDBFB2A786F1222468.roa (raw, json)
Hash identifier: 7FO9oDwe6VGtIInwytYemyDbw4tVU9On4IdG+S3IDKY=
Subject key identifier: F3:38:B1:5D:58:C2:A6:E0:E5:83:82:20:8E:8D:83:0E:79:92:B9:98
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0530
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D2C85AE8187E11EDBFB2A786F1222468.roa
Signing time: Wed 10 Aug 2022 07:34:10 +0000
ROA not before: Wed 10 Aug 2022 07:34:06 +0000
ROA not after: Wed 11 Aug 2032 07:34:06 +0000
asID: 19347
IP address blocks: 192.142.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Aug 2022 11:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1328 (0x530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 10 07:34:06 2022 GMT
Not After : Aug 11 07:34:06 2032 GMT
Subject: CN=62f35f72-4c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:6e:02:54:75:3b:39:4d:b0:89:4b:45:ba:
c9:ba:ff:8e:9c:d7:e3:33:b8:20:59:4c:2c:8f:e2:
66:4c:ff:96:18:c5:15:98:10:d7:9a:d8:d6:68:66:
a8:2d:49:15:25:eb:54:cd:75:f3:62:7f:1b:df:28:
bc:20:f5:50:64:bc:69:f3:b3:1c:89:a5:45:6b:a5:
e8:c1:71:25:e0:fc:42:59:86:b3:a0:cd:2f:6e:3b:
d7:22:21:71:be:e2:03:8f:d3:4e:76:24:e1:94:7b:
99:55:aa:ff:7f:04:ad:11:3e:9d:87:12:97:38:4e:
ed:f5:a1:2d:1c:52:fc:0e:d0:13:c3:67:11:24:55:
b8:ea:bc:f2:f7:a8:56:94:46:ce:b8:96:a4:95:6b:
6b:9e:fd:c8:12:f4:cf:35:54:d6:c9:a5:5a:01:a7:
c1:cb:de:2e:b3:37:43:f7:c9:f6:cb:49:48:27:e5:
2e:ff:15:80:3f:27:33:20:bb:95:c4:5e:14:2e:49:
80:92:dc:83:e4:79:cf:ba:05:38:8f:e5:8b:18:fc:
5c:b2:da:70:52:94:44:12:0d:8e:82:8e:50:6e:e6:
c1:e3:00:d9:2f:20:02:df:c6:43:43:d1:2f:21:58:
48:03:43:ff:1c:5e:59:25:3a:2e:4a:fe:eb:c9:a0:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:38:B1:5D:58:C2:A6:E0:E5:83:82:20:8E:8D:83:0E:79:92:B9:98
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D2C85AE8187E11EDBFB2A786F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.106.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:2d:42:0b:e0:00:db:c5:7a:c5:e4:94:ac:ef:0c:37:35:9a:
2e:cd:dd:7d:00:70:70:27:29:ea:46:9b:23:32:c0:89:0d:b2:
89:56:cb:e7:a1:fa:1a:38:af:8e:2e:3c:34:60:90:10:e6:9f:
8c:e8:ff:87:62:bf:95:e9:d6:a6:8a:c8:13:03:de:3b:f6:5d:
50:73:39:6e:77:2d:84:47:34:4f:8a:15:a1:a1:f3:b5:57:a6:
1c:d7:a8:74:00:93:8a:6c:d7:30:8e:d8:5a:c5:d4:66:dc:f8:
58:4c:02:85:f1:f7:20:7b:31:65:ac:dc:47:b7:4b:eb:3c:8d:
ee:a3:ff:c0:43:94:9d:31:1d:7f:65:52:d5:78:0c:d6:ac:f1:
fc:15:e8:e5:4a:5a:4d:ce:75:9f:7b:33:07:63:e6:bf:ee:20:
88:fe:40:90:fc:b4:0d:85:40:8a:ee:39:4c:a3:33:e3:0b:8e:
5f:2d:7c:86:f2:e4:49:08:f3:21:a3:2c:cf:c8:cc:43:3a:97:
63:1e:fb:e0:e3:0d:a0:2b:85:30:72:f4:d2:2f:13:55:f6:c2:
a7:c5:55:2b:b6:1d:2b:43:b3:30:05:62:14:35:40:7a:c0:1b:
7d:05:c9:4a:88:74:52:fd:da:e5:a7:17:ca:76:2f:d3:3e:61:
fa:02:64:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org