Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/EC253BC0054311EE9C3A32164AD9E6FC.roa
File: EC253BC0054311EE9C3A32164AD9E6FC.roa (raw, json)
Hash identifier: 392Yc/RK2wmZlaJc6C2GGGVVAp3Yiz9Zau6hNMilLAM=
Subject key identifier: DE:C9:E7:BC:06:5E:CD:27:85:B5:D0:64:A9:41:2E:81:7E:38:6A:A5
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0707
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/EC253BC0054311EE9C3A32164AD9E6FC.roa
Signing time: Wed 07 Jun 2023 14:59:38 +0000
ROA not before: Wed 07 Jun 2023 14:59:32 +0000
ROA not after: Wed 08 Jun 2033 14:59:32 +0000
asID: 199458
IP address blocks: 192.142.78.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1799 (0x707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jun 7 14:59:32 2023 GMT
Not After : Jun 8 14:59:32 2033 GMT
Subject: CN=64809b5a-ef88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:09:53:77:a6:a2:d3:69:e3:48:ba:ec:df:
cc:5d:9f:13:6b:36:4c:63:c0:3f:27:82:48:aa:ab:
7a:fb:37:96:07:ae:cb:c6:83:4f:f6:00:c8:b3:7b:
d4:98:e7:fe:c2:4e:6a:3a:2d:d0:d8:4e:6b:47:32:
1c:f8:60:a2:58:61:6b:30:1d:3d:cc:f3:e8:68:9f:
10:f9:9b:63:6b:a7:6a:df:e2:82:65:6a:ab:a4:c8:
c8:8d:9b:35:9b:60:6a:cc:35:8a:87:7a:b3:dd:fd:
db:1a:ef:14:66:b1:28:f8:b3:25:c0:09:1d:8a:7c:
6f:6b:a4:1c:f9:5d:4f:33:ad:45:97:fa:15:c1:aa:
6a:24:e4:f5:67:ce:4c:aa:2f:41:1c:b9:70:6a:3e:
e5:d0:5a:ea:bc:a3:0f:9f:40:bf:c2:66:8c:54:17:
b5:dd:fe:fe:94:59:53:29:4f:5e:0f:06:a5:f4:8d:
ba:03:17:ff:8e:8c:0e:e9:3a:a7:75:8f:c2:2f:18:
08:f0:ba:9c:4a:38:85:a8:dc:49:aa:d4:c4:48:85:
72:f8:08:9b:c5:7f:e7:d6:72:3a:f6:d3:b4:8c:30:
ff:2a:d1:e8:49:52:82:05:86:92:38:e1:fb:58:ea:
76:c5:88:91:3d:39:26:fa:e9:dc:35:5c:22:96:1c:
ae:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C9:E7:BC:06:5E:CD:27:85:B5:D0:64:A9:41:2E:81:7E:38:6A:A5
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/EC253BC0054311EE9C3A32164AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.78.0/23
Signature Algorithm: sha256WithRSAEncryption
be:41:62:a7:2f:7a:41:cd:47:88:6d:ce:62:58:e0:60:52:4e:
2d:be:ed:e4:42:4e:a2:29:48:25:47:2d:5f:b8:ab:9d:cb:57:
38:25:67:95:98:f4:0a:28:b7:1b:c1:91:aa:a0:aa:0a:e8:5c:
bc:a2:b6:7e:67:c3:e5:ad:1f:9c:ba:8a:02:cd:26:2f:ac:30:
55:a0:d9:05:26:cf:1e:7b:1b:0a:5b:50:68:67:0b:0b:37:21:
13:a7:fd:3d:6e:5a:a4:e6:7c:55:87:30:17:54:97:ce:a2:c2:
9d:c0:37:0b:69:93:9b:af:b5:02:aa:a0:c1:88:6b:f7:f5:85:
c2:51:e9:fc:fa:50:57:e5:1d:2a:6e:78:1b:35:68:4d:06:c6:
73:b7:ef:10:91:78:5c:f5:04:db:52:a2:f0:dd:13:c1:2a:70:
3e:d3:6c:a8:f7:eb:36:8d:93:c7:4e:95:cf:45:9e:53:3c:9a:
81:47:57:22:67:ec:fa:8d:a1:a2:d4:35:f2:39:7f:0d:96:46:
30:9e:14:54:da:8e:e9:1f:a7:88:d0:6a:3c:b6:1d:61:12:6e:
5d:19:c3:2f:9b:7f:3c:a3:ec:2a:e5:2a:e9:85:67:0a:0c:fb:
66:f7:b1:5d:e7:12:1c:fd:02:cf:e0:86:6f:b7:63:8d:50:91:
71:6f:08:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 12:52:16 2024 by rpki-client on console-fra.rpki-client.org