Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/E4B69EE8DEC311ED9C54F7CF2F6D8C1D.roa
File: E4B69EE8DEC311ED9C54F7CF2F6D8C1D.roa (raw, json)
Hash identifier: 5kwq5ZxhNRNUsFi1B+GlzznPIbRQPr9jzyduKWiDUcQ=
Subject key identifier: 96:12:29:EE:97:51:EC:F7:26:54:16:58:D3:FF:C4:C3:21:B1:96:D7
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 06AE
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/E4B69EE8DEC311ED9C54F7CF2F6D8C1D.roa
Signing time: Wed 19 Apr 2023 15:07:26 +0000
ROA not before: Wed 19 Apr 2023 15:07:21 +0000
ROA not after: Wed 13 Apr 2033 15:07:21 +0000
asID: 60707
IP address blocks: 192.142.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 06:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1710 (0x6ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Apr 19 15:07:21 2023 GMT
Not After : Apr 13 15:07:21 2033 GMT
Subject: CN=644003ad-849d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:27:ce:e1:64:2a:12:2c:a0:19:d7:f5:53:26:
6a:b4:1f:fc:61:29:a6:21:b7:e8:c6:67:fd:ed:ae:
04:3c:7c:f6:ab:ae:e5:81:a9:eb:03:c5:c8:41:52:
4d:ae:e4:f2:32:b4:1b:dc:b4:74:82:76:95:b1:c3:
f4:cd:cd:ab:d5:2f:b5:dd:b9:13:6c:59:2b:d9:a4:
8f:82:d9:a4:22:e0:04:e5:81:fe:a3:71:8d:d3:1b:
ac:ca:0c:98:21:dc:cf:f7:d7:29:a8:97:db:7d:10:
74:0a:e4:66:b1:eb:4f:24:ae:35:bd:ee:f0:b7:30:
86:25:50:0f:f0:7a:37:53:5c:84:fd:dc:d2:d7:21:
e1:bb:f2:ca:9d:85:48:7f:30:1a:ea:5b:d0:44:56:
ba:d7:56:b7:24:bd:0a:72:e4:4c:b8:ff:a3:8a:78:
33:f9:11:d2:4b:cc:b3:cd:a8:aa:22:f9:62:b8:f5:
50:3d:f3:62:39:6d:52:87:44:d0:5e:a2:41:12:34:
71:7c:94:49:9d:4c:b3:31:68:ed:45:d7:b8:06:21:
1f:4a:61:cb:da:39:98:31:b0:97:1f:6b:d8:05:1a:
14:61:80:0f:59:b1:90:63:8f:a7:10:87:6a:c2:b2:
6a:a7:b4:df:61:23:c0:82:01:53:3c:49:10:2f:b4:
8d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:12:29:EE:97:51:EC:F7:26:54:16:58:D3:FF:C4:C3:21:B1:96:D7
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/E4B69EE8DEC311ED9C54F7CF2F6D8C1D.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.8.0/21
Signature Algorithm: sha256WithRSAEncryption
88:6b:e3:0a:f6:24:b1:06:d7:8f:1c:52:61:2f:78:6c:33:10:
50:69:a9:7f:3b:db:38:36:72:5c:59:c6:97:82:62:b9:68:bd:
c3:24:e6:31:d9:23:1c:d8:d5:d5:c8:81:4c:f4:70:aa:96:4f:
69:10:e6:63:47:48:a7:d7:d2:47:74:af:a0:de:60:af:70:f0:
0e:3a:1d:08:97:52:17:6b:ff:4e:0e:0e:3d:f1:f4:f4:c6:a4:
d1:4c:69:36:21:7c:57:1e:f5:a5:9e:3f:28:99:59:4d:30:6b:
88:72:fa:45:ad:a4:86:48:01:2b:5a:a8:c4:e0:db:78:6f:9f:
bf:38:54:94:07:5c:d8:22:e3:b7:83:a2:2c:3d:13:cf:e0:71:
7b:34:3f:91:2f:8c:3f:e6:dd:91:a9:4d:68:67:ac:86:2e:76:
fb:8c:24:79:a0:87:a4:22:f1:03:b5:28:89:0c:41:6f:9a:c7:
e6:27:16:68:8a:a1:f4:a4:db:c1:43:30:c0:2e:3a:6c:eb:d1:
80:2e:dc:27:e8:74:b4:1a:43:12:20:82:3d:ba:8b:8d:2f:76:
66:91:d5:23:61:21:60:af:47:4c:97:22:fc:d2:50:73:95:e1:
0f:bb:fc:9f:34:1a:de:31:90:66:f5:9f:aa:61:78:f3:2a:73:
99:40:e0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org