Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F50006A02EE111EDA1F39DC4F1222468.roa
File: F50006A02EE111EDA1F39DC4F1222468.roa (raw, json)
Hash identifier: G8B5aZxMV+TKljm89YrC2MZXPkJ0VwCWL248+xXMcj4=
Subject key identifier: 3F:EC:DD:4A:12:FF:72:5A:33:52:04:17:8B:55:E3:83:DD:FB:9C:B5
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0570
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F50006A02EE111EDA1F39DC4F1222468.roa
Signing time: Wed 07 Sep 2022 19:19:13 +0000
ROA not before: Wed 07 Sep 2022 19:19:10 +0000
ROA not after: Tue 07 Sep 2032 19:19:10 +0000
asID: 7018
IP address blocks: 192.142.24.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 06:55:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1392 (0x570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 7 19:19:10 2022 GMT
Not After : Sep 7 19:19:10 2032 GMT
Subject: CN=6318eeb1-bd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:fe:92:68:49:98:f1:9b:bc:d8:45:73:d3:
60:b7:9c:f3:ba:23:90:fe:ea:76:3f:ad:16:e1:0a:
33:06:04:54:a5:dd:6f:f7:50:0d:ce:59:f0:1c:ec:
d6:cb:31:7e:74:5c:86:22:74:63:c6:ca:ad:11:a3:
64:fd:8c:8f:d8:8a:58:b3:a2:db:94:99:73:a0:a0:
2f:b8:78:9e:7b:0d:fc:24:39:6e:f9:3e:67:80:e8:
35:18:56:5f:8d:e1:74:08:b6:3e:54:46:16:8e:9d:
8a:08:e6:3e:2c:8e:3f:c9:20:8f:6e:be:52:94:5e:
7e:28:81:98:a5:b2:7e:79:67:2e:d8:2c:c6:6e:49:
48:86:69:fb:00:c5:dd:bc:6b:f2:d4:db:1d:aa:21:
80:37:be:b9:73:8d:db:08:d7:6c:3c:26:d2:27:51:
90:ae:ca:93:c8:1f:4c:90:8d:8a:f9:cb:82:64:e0:
c6:0d:02:2d:64:f2:2f:f6:4a:c8:0f:d1:5c:ff:4e:
a3:19:e1:1c:e9:4d:ea:8d:90:ee:24:2a:b3:9a:a1:
8d:bc:49:a6:bc:0d:da:f8:43:00:ea:e0:ee:55:73:
20:5a:c9:1a:28:e1:e9:bf:7d:4c:16:21:d9:8c:1d:
16:30:03:7a:51:47:4f:98:6c:6e:16:aa:89:90:73:
c6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EC:DD:4A:12:FF:72:5A:33:52:04:17:8B:55:E3:83:DD:FB:9C:B5
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F50006A02EE111EDA1F39DC4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.24.0/21
Signature Algorithm: sha256WithRSAEncryption
56:7b:80:a2:36:da:23:7f:f8:fa:e4:d5:bd:79:7d:47:ec:5f:
2c:32:c5:9b:2b:2a:db:bf:0e:e3:82:50:9b:55:52:d3:b8:27:
d9:02:8f:83:f3:ed:fc:99:57:92:c1:1c:e5:6b:dc:0a:7c:a8:
da:c8:4b:06:e1:a8:1a:b4:cd:91:8a:2f:eb:91:4b:8c:14:6d:
b4:7e:bc:6b:79:eb:35:a0:89:8c:ae:d2:92:3a:e2:e8:c1:2d:
45:41:2c:ca:67:5f:96:4b:f3:3e:f7:e9:0f:8f:02:4b:f3:77:
b1:5e:3a:39:1c:03:17:0f:0f:a9:9d:a1:c5:5f:ed:37:03:b9:
41:8e:e1:a0:07:0b:da:38:32:28:d9:f9:2b:f9:ee:4c:c6:bb:
04:fa:c2:99:a9:48:df:b8:bf:86:9f:4a:10:9d:4b:85:e7:88:
76:4d:18:d6:a5:9a:c5:b8:cc:7d:9a:4f:1a:8f:a2:97:27:6a:
e0:6c:3b:23:d2:11:4c:c6:14:ef:60:ef:1b:b1:e4:2e:99:94:
95:14:0b:91:c0:f4:96:4c:b4:fd:83:15:45:91:75:30:db:32:
5c:7e:c7:e4:2d:72:d4:10:ef:19:0a:b6:b9:23:5a:be:f0:81:
ad:cf:e3:46:46:fb:25:0f:05:37:a1:6f:ba:d0:de:28:86:03:
9f:0f:41:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org