Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F1DEF7DAED9811EDACDFF17E4AD9E6FC.roa
File: F1DEF7DAED9811EDACDFF17E4AD9E6FC.roa (raw, json)
Hash identifier: OoO94qDA+RINZ7OeJxt7CRpm/umjI2X9YXxWWlih8bg=
Subject key identifier: 97:8F:78:2A:D3:76:5D:23:67:55:95:43:17:2E:CE:F2:8C:B1:EB:DE
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 06CF
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F1DEF7DAED9811EDACDFF17E4AD9E6FC.roa
Signing time: Mon 08 May 2023 12:07:47 +0000
ROA not before: Mon 08 May 2023 12:07:42 +0000
ROA not after: Tue 10 May 2033 12:07:42 +0000
asID: 207459
IP address blocks: 192.142.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Aug 2023 06:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1743 (0x6cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 8 12:07:42 2023 GMT
Not After : May 10 12:07:42 2033 GMT
Subject: CN=6458e613-daa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:7f:d0:c9:77:a4:5d:5c:e5:94:81:f1:61:
47:4e:19:f9:d4:10:51:38:70:d6:4c:91:c5:fc:1a:
70:17:8a:d2:77:0b:7e:71:6b:4d:f8:e3:26:d9:f4:
6f:34:13:50:34:5b:4f:6d:5c:55:c0:b4:b9:a4:b9:
e7:71:b0:98:0c:0d:4e:8b:c9:88:d5:90:ca:59:20:
e0:e9:5a:c3:2c:4c:ea:bb:d8:7f:21:83:f2:8c:f3:
ec:b9:89:76:99:36:7c:8a:78:6f:a7:3b:9b:9f:8b:
cd:32:8e:c2:92:1b:0f:88:23:59:8c:2a:d5:dd:59:
f3:d8:9c:53:d9:f0:e9:b9:08:78:20:87:e7:53:1d:
45:98:88:45:e9:a6:6f:46:cb:68:77:96:6b:5d:9f:
2a:4d:9e:42:78:31:51:f3:2b:41:e7:3c:ca:d8:fa:
2d:7c:fc:33:80:63:95:7f:66:7b:11:8b:1f:1d:8e:
e0:90:dc:39:1a:54:8c:41:79:3b:79:4c:02:32:6e:
f6:2e:62:52:c4:cd:18:a4:84:a3:f7:02:96:f7:6b:
85:b2:01:f8:8b:84:d4:38:b6:ad:72:91:cf:93:93:
ed:e9:8a:22:90:30:8e:ac:24:2d:7f:cf:52:d8:3f:
8a:30:fd:d0:e4:91:78:2e:c2:20:47:9a:40:cb:03:
58:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8F:78:2A:D3:76:5D:23:67:55:95:43:17:2E:CE:F2:8C:B1:EB:DE
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F1DEF7DAED9811EDACDFF17E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.20.0/24
Signature Algorithm: sha256WithRSAEncryption
02:42:ee:5e:86:bb:c1:02:2f:df:2b:e7:e0:1e:76:6b:e7:70:
22:1a:d5:e2:f7:07:43:d1:02:fc:4f:e4:23:18:fa:21:95:be:
9e:ce:7b:34:5f:30:d0:31:79:f7:62:b5:bb:de:db:73:0a:42:
73:69:8f:df:8a:44:6d:5f:29:67:64:ab:d1:30:c3:9a:b9:d8:
a6:42:e7:a3:86:0b:31:7f:94:3a:1e:74:00:0f:ca:ea:fd:f7:
c7:5c:1b:f3:fb:68:d3:55:b8:40:aa:a3:e1:08:ed:0a:8d:7f:
0b:56:6a:71:c5:15:03:88:45:7b:be:ef:81:47:f3:a8:27:e8:
60:11:3d:d9:2b:e9:f5:c1:02:45:03:df:c3:b6:33:ad:8d:41:
7a:43:c3:f4:26:f6:3b:a4:27:bc:bc:e8:6c:1d:2a:e4:cd:f7:
b2:18:69:ac:e4:0c:4d:4f:b1:d6:06:1a:22:a9:1e:7c:0b:6b:
8d:c4:01:4f:47:6b:44:b6:42:33:f9:c4:9c:95:e2:3e:f1:14:
70:4d:7b:1b:56:58:20:7d:80:6d:b4:bd:5b:4d:5c:f1:47:8f:
53:dc:41:b8:ba:8a:3e:0b:d9:02:51:b1:a3:19:26:59:85:99:
ac:9a:f4:b7:33:66:fd:c4:8e:50:b6:5d:65:53:cd:04:b3:74:
e0:8c:df:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org