Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/EB6DEF8213EA11EEBBA7B76C4AD9E6FC.roa
File: EB6DEF8213EA11EEBBA7B76C4AD9E6FC.roa (raw, json)
Hash identifier: 1+DdC8rwz5VGNbOhCyC6sl6yF8/8+ziAq27NaHUqes0=
Subject key identifier: 70:B3:D4:AD:6C:3D:F9:C8:59:86:EC:F4:57:C1:E2:AB:F5:78:1B:7C
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0733
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/EB6DEF8213EA11EEBBA7B76C4AD9E6FC.roa
Signing time: Mon 26 Jun 2023 06:30:19 +0000
ROA not before: Mon 26 Jun 2023 06:30:14 +0000
ROA not after: Wed 22 Jun 2033 06:30:14 +0000
asID: 46573
IP address blocks: 192.142.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 06:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1843 (0x733)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jun 26 06:30:14 2023 GMT
Not After : Jun 22 06:30:14 2033 GMT
Subject: CN=6499307b-1737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:8b:85:c0:b7:c4:64:b5:d3:96:05:4f:e9:
a6:ad:d7:0e:f1:fc:6f:d3:20:b7:45:88:60:20:32:
28:a9:75:7f:4d:6f:75:df:ea:88:88:66:32:09:88:
ce:74:7e:f0:2b:1d:49:f3:4f:72:55:f9:49:22:32:
8a:36:9e:d6:01:b6:58:22:50:8a:11:5b:b1:12:7e:
6c:05:f0:23:b8:d4:c4:bd:17:e4:2e:85:27:4d:74:
b1:79:c7:f0:b3:e7:73:53:b6:f6:80:87:9a:3f:d8:
a3:b0:14:3c:cc:cb:9d:86:45:c0:6e:39:83:74:fc:
ef:69:67:63:fb:02:5f:63:1a:36:6f:62:c0:00:53:
66:43:7c:d7:ec:64:13:ba:6e:d5:a8:4d:50:06:69:
84:ad:6a:d1:14:12:eb:8c:e2:ab:b1:30:9c:68:3f:
7c:25:e6:b8:52:75:a9:0d:81:8e:c7:85:72:30:94:
28:aa:26:34:db:ad:35:2a:e8:7d:e8:54:d0:3f:a7:
98:fa:80:89:b9:42:a1:42:ef:69:91:02:77:95:ce:
98:ee:69:50:30:6c:09:fc:4a:a1:4f:80:e4:ce:31:
b9:02:2e:45:4e:80:c1:f9:42:27:e1:1e:b2:65:42:
40:cc:24:2b:ec:8c:29:6b:a5:80:d9:5d:a9:bd:d3:
7c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B3:D4:AD:6C:3D:F9:C8:59:86:EC:F4:57:C1:E2:AB:F5:78:1B:7C
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/EB6DEF8213EA11EEBBA7B76C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.171.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:cd:af:da:01:28:3e:c4:f8:69:11:94:e7:d2:06:5e:0d:78:
30:49:5e:f1:5c:0a:fe:9e:45:a8:9d:e8:c9:b6:32:38:ae:8e:
5d:3f:6d:fa:8e:f0:96:1e:fa:24:25:22:3c:fd:56:bb:e2:4d:
18:2d:3c:ea:bd:a0:bf:17:0e:91:83:48:0c:eb:aa:92:4b:91:
e8:b2:cb:cb:49:06:73:ae:7b:b1:15:82:bf:c7:4d:f7:49:c4:
ff:4c:f0:22:c2:96:0d:0c:f7:e7:ab:d0:01:4c:cd:fe:d1:8a:
3b:b3:7b:f9:fe:4b:30:d3:d9:38:ec:26:e2:c2:a0:56:44:39:
f4:4e:d9:6c:bd:de:47:87:43:63:3c:91:0b:da:63:93:af:2b:
de:54:0d:ad:60:c9:d9:96:1a:b2:be:ed:3a:ab:6d:fb:fa:cb:
44:6b:4a:27:42:3a:b1:11:53:8e:43:d4:4c:6b:fd:e1:7f:c0:
b5:e7:1c:40:89:2b:45:18:75:53:67:1f:50:a8:05:24:3f:c1:
e4:b1:b3:77:c3:25:ea:53:af:85:52:2a:26:cd:f5:db:3c:b7:
b6:0a:bf:57:fd:69:42:3a:13:04:b1:46:2a:70:62:f6:11:00:
31:07:73:5a:c2:c3:cd:43:e2:e7:40:1f:75:d6:f2:3e:f0:1d:
ab:d8:6e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org