Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D636636E81E611EE8327610F4AD9E6FC.roa
File: D636636E81E611EE8327610F4AD9E6FC.roa (raw, json)
Hash identifier: xcSavQ9v0Tg8em7KisFyknTQPjqyaIiwBFMLByRvipQ=
Subject key identifier: 31:95:6C:5A:CF:71:C0:13:B1:51:62:B4:DF:4F:3D:51:CF:69:F6:83
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 082C
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D636636E81E611EE8327610F4AD9E6FC.roa
Signing time: Mon 13 Nov 2023 05:38:13 +0000
ROA not before: Mon 13 Nov 2023 05:38:10 +0000
ROA not after: Wed 16 Nov 2033 05:38:10 +0000
asID: 209181
IP address blocks: 192.142.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 05:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2092 (0x82c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 13 05:38:10 2023 GMT
Not After : Nov 16 05:38:10 2033 GMT
Subject: CN=6551b645-8c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1e:b8:93:28:2a:66:d3:a5:32:ce:85:96:6c:
09:5d:4e:65:4f:9a:25:a5:75:9f:db:fc:e5:13:c3:
92:e7:10:db:db:0f:4a:bf:f0:f0:b4:0e:9f:2c:86:
e1:44:12:2e:dd:1e:f9:f9:77:1c:c5:ea:0b:bd:0b:
5e:f1:7a:63:39:75:ed:85:b9:6c:18:6e:21:73:77:
b1:98:60:88:19:1a:56:9d:b8:b9:3a:16:e1:7f:20:
fe:ae:dd:7a:5a:21:af:3e:0f:56:87:9c:f1:a9:02:
34:a0:91:a2:a8:af:34:f1:01:50:32:17:da:24:5c:
47:61:06:1b:73:c7:52:2c:8d:d9:bd:af:fb:dd:c9:
58:35:c2:05:db:e7:bb:90:d2:de:44:8e:1b:4d:5d:
bc:45:37:52:18:dd:c0:2c:a5:6f:ed:cb:c0:59:23:
a2:fd:aa:67:37:b6:13:92:c2:d4:d1:8e:aa:1b:3a:
17:45:ed:b0:74:1e:ae:e3:6c:d8:1c:30:b6:03:da:
ba:f2:ea:71:3b:93:da:9e:00:57:2f:f0:a0:54:31:
fb:9c:4c:bd:4e:6e:81:16:35:62:0f:3d:99:c8:1b:
08:45:78:19:6e:4d:42:d6:c2:a2:33:c9:09:f2:e7:
23:ab:82:da:26:08:2e:5a:28:02:1b:4d:5c:77:f8:
05:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:95:6C:5A:CF:71:C0:13:B1:51:62:B4:DF:4F:3D:51:CF:69:F6:83
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D636636E81E611EE8327610F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.6.0/24
Signature Algorithm: sha256WithRSAEncryption
19:0f:6a:a9:06:6f:5a:66:a9:36:0f:ff:5d:80:6f:77:20:de:
04:b1:43:0f:c1:a8:68:f1:d8:b3:fa:3f:43:ee:b7:b7:5c:98:
99:f5:96:de:f4:33:c6:14:70:78:5e:4d:ef:52:35:cb:c0:8c:
23:8b:a9:76:54:8f:ed:fa:91:7a:ea:cc:b4:7d:f7:15:8a:60:
d1:e6:58:b0:99:46:f2:f8:ff:2b:cd:bd:9c:1d:0e:e3:57:d7:
be:ce:98:66:85:90:81:d8:fb:ff:00:56:7d:3b:6b:46:c3:74:
e9:0a:bf:9b:fd:2d:9d:4d:64:82:5f:e3:50:31:b4:bf:63:8e:
42:6f:21:e3:af:54:71:9d:e3:1b:dd:69:d5:2a:ae:3d:49:97:
ff:7b:9b:d0:b1:ac:01:ce:4a:c1:87:fe:b5:02:76:a2:87:6b:
f7:d1:0c:ae:0e:04:77:9f:2b:d3:e7:bf:88:62:74:f7:35:6f:
d9:48:d7:2b:fa:39:b4:68:9d:ff:f8:31:bd:de:01:95:9f:fb:
6e:61:54:ce:ce:21:ce:27:a5:24:10:c0:cd:0d:04:59:3d:77:
fc:22:ef:1f:8c:1f:01:2e:cf:ec:da:9b:b3:ca:30:00:b4:bc:
2c:67:ad:76:76:1d:cc:b0:14:37:1d:8d:99:e3:d4:c8:bf:c6:
61:56:0c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org