Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D9F136DA56AF11EE9C09072A4AD9E6FC.roa
File: D9F136DA56AF11EE9C09072A4AD9E6FC.roa (raw, json)
Hash identifier: e9HCN5/fafAjKzItPchGnuA8YsCfZT2d8Oh/7670Myg=
Subject key identifier: 65:6B:7B:F4:FC:74:BD:C2:F0:07:D0:23:41:D7:98:D9:D4:68:A6:D4
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 07C3
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D9F136DA56AF11EE9C09072A4AD9E6FC.roa
Signing time: Tue 19 Sep 2023 05:46:17 +0000
ROA not before: Tue 19 Sep 2023 05:46:13 +0000
ROA not after: Tue 20 Sep 2033 05:46:13 +0000
asID: 5065
IP address blocks: 192.142.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 05:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1987 (0x7c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 19 05:46:13 2023 GMT
Not After : Sep 20 05:46:13 2033 GMT
Subject: CN=650935a9-2b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:28:40:d6:87:0b:55:8a:ba:e8:f2:17:16:32:
8e:a1:a0:c3:29:51:a4:e0:47:2c:c8:c9:99:ad:01:
d2:b5:51:b2:a6:3a:5a:50:1d:e6:63:8f:23:0e:b0:
69:80:e0:8a:9e:6b:17:1d:cd:70:9d:36:45:1b:73:
fc:61:cc:a6:d0:6a:be:d6:9a:89:00:33:7a:e6:e7:
ee:43:b6:de:d0:e4:d0:3f:31:4e:9d:4c:5d:6b:7f:
0f:56:b5:93:02:6c:ea:6b:21:ca:bd:ab:f6:97:ba:
de:ea:7e:46:b2:e6:aa:3b:98:27:23:ff:12:38:cf:
b5:10:b4:28:43:d0:04:fa:e4:b6:7c:86:68:4e:5b:
12:bb:a0:e0:c9:26:dc:f5:8d:75:9a:55:df:a1:62:
fc:81:c9:44:63:3f:47:98:26:4f:54:97:3a:88:4f:
81:54:27:79:57:99:2f:a8:1a:10:15:76:9d:18:93:
ff:3a:72:09:f8:95:23:c4:56:46:6f:ba:6c:58:00:
35:06:b5:39:2b:7e:e7:09:81:69:aa:7c:f2:e8:27:
22:45:f4:8b:d2:36:87:e8:ba:ba:84:21:6f:fa:a6:
90:21:58:73:f6:0c:78:e8:35:c6:b9:12:97:8d:e6:
1c:92:24:78:d0:f4:fa:6b:56:6d:d8:50:56:14:3e:
07:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6B:7B:F4:FC:74:BD:C2:F0:07:D0:23:41:D7:98:D9:D4:68:A6:D4
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D9F136DA56AF11EE9C09072A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.216.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:e2:d4:a2:a1:7e:4e:85:da:61:13:bf:a3:80:9c:bf:fc:da:
c8:f4:28:77:20:91:84:cc:12:df:37:ed:12:de:5c:b6:82:6c:
f9:a9:92:5b:b3:05:b0:07:f9:2f:56:8c:9f:8a:71:22:42:0b:
a7:d8:11:40:e1:7d:be:8f:f9:09:18:9e:7e:2a:cc:5e:cb:ff:
e7:a4:39:b6:08:d0:94:08:28:4b:06:f2:9f:77:cc:8c:10:30:
bc:18:44:b2:23:58:a4:44:c7:84:89:56:45:07:2a:ab:b8:c6:
c0:ec:19:41:48:57:57:f0:d9:81:fc:64:87:8b:4f:81:21:9a:
dc:f4:49:b5:cb:64:df:6e:67:81:cc:6f:74:bc:dc:57:b2:f3:
0d:eb:04:1d:51:57:54:af:6d:85:6f:54:de:69:6c:24:6a:d5:
3d:51:e9:29:d3:b4:98:f8:5b:f7:70:a6:d4:60:42:ed:43:82:
30:bd:e6:f1:cd:8d:b6:0d:0d:fd:05:75:4a:71:2c:ae:ab:3e:
64:d0:3c:83:02:c1:cd:44:b2:88:f6:92:83:c9:d6:24:cd:a9:
9e:2c:5a:54:8c:96:44:93:b6:09:07:75:5b:ec:56:db:f0:0c:
b2:94:cb:01:0a:34:0f:6c:95:f0:95:f2:c7:a5:a1:15:53:1d:
9a:0d:f2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org