Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/DEA8DE28792811ECA03435CA5A40D577.roa
File: DEA8DE28792811ECA03435CA5A40D577.roa (raw, json)
Hash identifier: P8DNittozCX135iVmu0NK2y+m6YxjAcxWyNrKU7JyIY=
Subject key identifier: B0:47:9B:4E:F9:CA:57:53:06:EE:92:41:FB:60:2D:B8:E4:54:73:D4
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 041A
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/DEA8DE28792811ECA03435CA5A40D577.roa
Signing time: Wed 19 Jan 2022 13:08:18 +0000
ROA not before: Wed 19 Jan 2022 13:08:15 +0000
ROA not after: Mon 19 Jan 2026 13:08:15 +0000
asID: 133120
IP address blocks: 192.142.138.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 06:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1050 (0x41a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jan 19 13:08:15 2022 GMT
Not After : Jan 19 13:08:15 2026 GMT
Subject: CN=61e80d42-af44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c0:13:79:4f:6a:5a:2b:3b:44:20:05:af:47:
e6:10:57:09:89:d2:fd:7b:2c:f4:bf:98:dd:60:60:
4b:4e:11:32:1d:f0:76:38:e0:41:e8:e4:50:47:ad:
29:21:30:d7:15:44:21:96:55:fd:dd:75:1f:f8:c2:
83:ea:6c:5c:3d:36:5b:83:94:4b:a1:1d:b2:65:4f:
a3:65:7c:71:26:25:d7:c8:1c:e8:1e:7d:8b:ee:20:
83:0f:3b:3a:c9:6f:a5:f5:ff:14:b6:a6:69:2b:15:
a6:ef:5a:2c:69:f8:23:97:e3:0b:4c:82:af:52:8c:
5a:1c:bb:88:11:f2:1e:4b:4c:be:3b:75:f4:89:ff:
1a:44:41:5c:3e:bf:88:07:83:06:53:9f:ba:b7:5e:
53:de:b8:c2:d5:36:46:1c:da:fb:85:97:5c:21:44:
82:4a:1b:14:e5:f2:71:b0:e0:b0:b0:ba:c1:5a:42:
1a:ed:54:7c:47:06:b3:4a:97:2f:8c:44:ec:3b:21:
80:f9:d9:94:28:b0:24:63:d4:d9:35:78:d8:03:c7:
1e:e2:e2:ad:28:7e:a4:1e:cf:bb:fb:49:73:2f:a9:
01:4d:6c:e8:13:ba:df:a2:27:6c:ec:54:ae:c0:2b:
8f:6a:8c:53:88:f5:a8:20:5f:66:d1:c1:c7:b4:44:
33:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:47:9B:4E:F9:CA:57:53:06:EE:92:41:FB:60:2D:B8:E4:54:73:D4
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/DEA8DE28792811ECA03435CA5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.138.0/23
Signature Algorithm: sha256WithRSAEncryption
90:02:09:0b:58:81:16:e8:77:37:ef:2f:3d:89:3a:95:66:b0:
f6:21:e3:48:44:8c:37:87:b7:8f:bf:71:9a:f3:e1:5d:31:f0:
29:b4:f6:8d:22:2c:ba:e6:fe:50:ee:c9:34:a0:91:4c:aa:27:
39:87:40:cc:27:c2:e8:5a:1a:94:86:3c:d3:60:17:bc:fd:c3:
db:46:25:1e:22:f2:de:96:c3:89:07:b6:d4:6d:0c:60:87:9e:
95:88:a1:35:8e:ad:24:65:c4:35:71:70:4b:42:70:b6:12:c8:
07:9e:61:a6:ba:45:aa:68:e1:cc:2e:ed:7b:9a:f4:fc:fc:f2:
a6:57:fb:99:57:9c:60:fb:c6:b5:1b:7e:28:dd:88:10:1f:59:
c5:c0:70:8b:9c:7a:62:c0:43:8d:f8:67:6b:8e:01:5c:0e:b5:
05:55:d2:32:8d:34:03:37:74:8a:ac:07:35:d6:8b:28:c7:b1:
df:45:09:68:83:e4:42:73:35:29:7e:26:a6:88:7b:e3:39:3a:
ad:ad:93:25:82:78:38:81:87:39:69:1d:a6:93:cd:ae:95:92:
ec:8d:35:bf:ed:10:5d:4f:93:3f:1b:1f:ca:fb:f4:83:58:b5:
a5:a1:a8:f6:f0:15:4f:3f:03:ce:e2:c7:c9:b2:60:82:90:34:
84:72:86:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 09:05:00 2024 by rpki-client on console-ams.rpki-client.org