Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D7EC2AC2D14611EEB2539F70775412E6.roa
File: D7EC2AC2D14611EEB2539F70775412E6.roa (raw, json)
Hash identifier: yiOKYxVqZs0QdD2LGuLmr3iGhiEqvDRsIvUtEZvlMUk=
Subject key identifier: 6A:C0:E5:60:64:0B:6C:EC:20:C3:D0:B7:03:46:0E:C7:97:9A:F8:CF
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 08DA
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D7EC2AC2D14611EEB2539F70775412E6.roa
Signing time: Thu 22 Feb 2024 05:54:30 +0000
ROA not before: Thu 22 Feb 2024 05:54:26 +0000
ROA not after: Wed 15 Feb 2034 05:54:26 +0000
asID: 60707
IP address blocks: 192.142.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 06:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2266 (0x8da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Feb 22 05:54:26 2024 GMT
Not After : Feb 15 05:54:26 2034 GMT
Subject: CN=65d6e195-fbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:89:f4:f4:12:f0:5b:3d:f1:d3:fd:87:f9:54:
80:29:48:42:36:a5:2e:24:6c:86:54:72:f6:01:8d:
8f:c5:8c:ac:4c:8c:ab:c6:6c:84:c0:29:57:81:08:
30:89:0a:ae:8d:6f:04:6e:3c:8c:58:da:de:50:80:
e5:7f:81:5d:18:a2:d3:17:73:88:8b:62:9e:6b:a7:
91:11:f6:c5:d6:4f:ce:8d:0e:38:82:d7:11:ce:47:
ef:f6:4b:f8:4b:9b:38:53:b7:bf:a8:75:b2:cc:b5:
67:55:04:c8:b6:dc:da:06:12:a4:d2:ca:33:22:b2:
66:19:78:00:40:a3:85:9a:f5:4f:c9:d3:73:a6:a1:
fb:9e:dd:0f:99:13:4d:88:13:7b:7b:2b:b4:66:aa:
8b:e1:e2:f5:b2:eb:b4:5c:8e:1a:a6:03:a8:c0:15:
d7:d8:6d:ac:82:b8:71:27:c1:30:e7:48:81:1f:fa:
b8:61:e9:b1:c3:15:32:3f:bb:21:52:e3:ee:75:0a:
bb:b9:ff:b6:2e:2b:6c:20:90:dd:e8:ca:c8:1b:56:
bc:60:d4:c1:29:89:a8:a5:6d:c0:44:c8:35:83:ba:
ba:1f:5f:e2:90:2e:ad:ec:5d:a7:85:1d:3a:c7:ad:
9d:ba:78:3b:87:46:2f:cd:53:09:dc:06:51:a8:da:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C0:E5:60:64:0B:6C:EC:20:C3:D0:B7:03:46:0E:C7:97:9A:F8:CF
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D7EC2AC2D14611EEB2539F70775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.171.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2b:e7:26:ed:79:43:d5:03:e6:c9:1d:89:ca:65:aa:17:a9:
ac:1e:db:73:7e:67:d5:28:b5:56:64:2a:a0:b7:e0:40:b1:fe:
15:bd:4a:4d:4d:46:53:55:db:f3:0a:48:d9:69:e0:06:e3:f7:
6d:58:84:14:b3:cd:ce:96:7d:e1:13:42:c2:13:f8:36:4d:c6:
12:40:bc:05:94:04:a8:cb:8a:d3:2a:a9:9b:c3:03:81:fd:ab:
03:d5:ff:5e:a3:1e:f4:59:1c:78:74:01:69:11:89:d2:19:d1:
1f:78:37:6f:2e:82:3c:78:5a:db:aa:08:af:e8:cb:c5:8f:6d:
b1:87:69:91:d9:62:62:0b:a1:59:46:c2:7b:aa:58:90:1f:38:
3d:2b:d9:29:73:6b:b9:a8:28:7a:43:3c:97:22:aa:24:b5:8b:
35:d8:38:33:ef:94:61:03:60:01:03:e7:06:85:d6:55:a7:f8:
e5:a8:e2:33:a1:e2:ae:4a:c4:a0:5b:ff:14:de:e0:9c:0a:30:
7b:64:c8:af:c1:32:86:6e:18:ca:b9:b0:84:40:c5:82:cd:3e:
66:f5:1f:2b:92:dd:4b:32:d9:f1:78:82:75:67:82:46:a1:95:
c3:dd:b9:43:04:ba:15:b4:39:c7:84:74:a2:a5:8f:c6:af:99:
ba:bc:a8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org