Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D99C2B429C7211ED840C4F8FF1222468.roa
File: D99C2B429C7211ED840C4F8FF1222468.roa (raw, json)
Hash identifier: v8RgihayXiBgqdSzt6/VPE5T+fNh2YBP5dOASxaCdZk=
Subject key identifier: F2:F2:79:D1:AE:5B:F0:38:3A:F5:B7:EF:B6:6C:E1:36:41:A7:98:66
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 062E
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D99C2B429C7211ED840C4F8FF1222468.roa
Signing time: Wed 25 Jan 2023 05:41:01 +0000
ROA not before: Wed 25 Jan 2023 05:40:55 +0000
ROA not after: Wed 19 Jan 2033 05:40:55 +0000
asID: 3320
IP address blocks: 192.142.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Sep 2023 05:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1582 (0x62e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jan 25 05:40:55 2023 GMT
Not After : Jan 19 05:40:55 2033 GMT
Subject: CN=63d0c0ed-40bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:11:98:7f:a6:f8:65:33:66:ec:52:8c:9f:76:
92:43:22:37:87:b6:61:7f:3e:cd:5c:68:1e:44:d9:
cf:aa:cb:14:e4:bb:3f:15:8e:b0:fb:17:94:bb:f1:
4d:56:c3:0b:84:e2:74:51:dd:25:d5:e4:d0:3b:f3:
bb:26:fd:d3:35:14:23:f7:e7:fc:c5:58:ec:ed:5c:
ed:86:70:7b:e0:c0:73:2a:be:e8:2d:c0:84:ad:81:
ef:36:b9:cc:ea:5b:03:8e:f2:39:c5:5a:a7:02:52:
57:f4:e1:7b:3a:41:a9:87:79:38:8f:58:a0:b6:ce:
f4:30:28:de:f7:78:92:84:bd:10:a2:26:bf:f8:40:
23:fd:54:6e:8f:42:56:32:d9:63:90:73:03:ee:ae:
1d:d8:a6:bf:23:36:5a:17:3b:8e:c5:6f:f6:ed:cf:
2f:50:65:65:54:ee:c2:92:f1:54:ed:65:4d:2b:fa:
a1:30:ac:e9:52:dd:69:ad:0c:a5:8e:d1:09:91:bc:
6a:1d:bc:34:c1:db:27:8d:20:e5:e4:61:c7:83:6e:
1d:25:78:a6:d7:12:7b:83:77:e2:d0:80:bc:fe:d0:
21:15:b2:60:7c:80:81:6a:17:73:38:7c:59:fe:3c:
4e:3a:0a:59:ba:c1:e1:d9:ab:e7:f9:5d:ac:05:8e:
47:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F2:79:D1:AE:5B:F0:38:3A:F5:B7:EF:B6:6C:E1:36:41:A7:98:66
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D99C2B429C7211ED840C4F8FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.248.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:1a:bc:b4:73:07:b0:f3:98:5f:1e:5a:9f:c4:db:ce:e8:31:
90:4a:74:35:70:d9:a1:94:ae:be:eb:85:56:fa:da:3a:b9:be:
65:ac:85:f7:62:8c:51:64:7e:55:9c:98:26:bc:05:19:c9:7c:
11:16:0f:94:47:02:63:67:b1:9f:1e:6f:9c:06:0c:ba:e8:f8:
1e:8b:d5:cb:a1:26:9b:94:5f:f5:56:00:3c:d5:d0:bb:c0:af:
8a:1e:57:43:a4:35:f8:81:39:03:2b:69:e1:89:c4:32:03:28:
21:2e:d9:74:3b:1a:93:d5:ab:f2:7e:b5:62:f6:31:4a:24:6e:
2b:24:c6:29:81:0e:52:c5:d3:2b:6f:8d:6c:28:df:89:a9:d8:
a6:e1:d7:e2:ba:d3:f9:c9:22:e1:93:35:5e:f0:50:c0:cf:7a:
dc:f1:9a:c1:70:a4:1b:a5:f2:e2:77:40:a8:da:0a:1e:22:57:
98:05:9f:2d:1f:f3:55:d6:99:26:40:a9:37:63:e3:83:06:eb:
f9:49:a7:ca:41:32:41:e6:32:3a:7a:b2:7d:69:25:07:8b:53:
5c:14:0e:13:0d:31:41:59:4d:0f:85:02:fc:88:c2:36:18:e0:
c6:8d:66:2a:df:e8:35:34:4f:a3:9a:53:20:2a:0f:e0:d6:dd:
d4:fc:f1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org