Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F78A4AC6187E11ED96E71887F1222468.roa
File: F78A4AC6187E11ED96E71887F1222468.roa (raw, json)
Hash identifier: RcNYZqEyX2YMwePR5Qh4mpOUw+kE/8EaJnHroXS9I4A=
Subject key identifier: 87:10:A9:8B:F6:45:81:91:D9:D9:3A:84:F5:E9:87:E8:45:A8:7B:FD
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0532
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F78A4AC6187E11ED96E71887F1222468.roa
Signing time: Wed 10 Aug 2022 07:35:12 +0000
ROA not before: Wed 10 Aug 2022 07:35:08 +0000
ROA not after: Wed 11 Aug 2032 07:35:08 +0000
asID: 7018
IP address blocks: 192.142.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Sep 2022 06:46:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1330 (0x532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 10 07:35:08 2022 GMT
Not After : Aug 11 07:35:08 2032 GMT
Subject: CN=62f35fb0-9e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:02:1e:fd:84:fc:86:98:57:a7:b8:aa:0c:dd:
b9:23:7e:4b:2e:89:38:a0:6e:df:fb:ad:18:80:2d:
a8:1e:6c:78:d5:2a:9e:70:fd:d3:6f:66:39:67:28:
91:a5:e6:36:ab:12:f0:a7:42:bf:c6:c9:7a:00:8c:
95:11:d2:a3:cf:c4:92:b5:0c:52:67:58:bc:64:9f:
13:27:7a:e8:cc:c6:3a:91:69:b6:99:7d:3f:65:9e:
1a:39:cb:04:33:09:f0:76:a4:2d:d5:fe:91:21:e0:
47:93:3b:e6:84:31:ee:ec:d6:a8:5d:af:85:40:c3:
44:d0:b7:f8:04:10:2e:8c:e3:38:72:a5:ed:b1:ed:
df:74:a1:bb:9f:5d:ec:38:8f:94:c0:10:a4:98:1d:
ae:32:41:d1:e1:97:de:68:a6:b5:88:10:2a:85:0a:
bf:7c:58:93:b7:d8:64:f1:b2:23:62:49:d3:bb:ac:
f7:c2:f9:ab:7a:63:e0:3d:dc:6e:af:0a:ac:e8:4e:
1e:c7:24:45:1b:48:a6:cc:cb:33:6e:2e:c9:c8:c2:
5e:e6:dc:5c:0b:95:5d:38:fe:43:61:3d:93:c0:b5:
f2:11:d2:df:2b:ef:1f:88:a4:ca:6a:a8:2a:9c:d9:
f2:ce:d7:70:e7:90:ca:26:30:a5:98:4c:13:f4:d6:
50:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:10:A9:8B:F6:45:81:91:D9:D9:3A:84:F5:E9:87:E8:45:A8:7B:FD
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F78A4AC6187E11ED96E71887F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.8.0/21
Signature Algorithm: sha256WithRSAEncryption
78:b4:d4:26:b1:8b:d3:c0:8d:98:d6:20:fa:aa:b7:c6:43:ab:
08:bd:0e:b5:cd:ac:2f:32:68:e3:51:fd:ad:35:88:24:6d:30:
3b:8e:53:48:16:94:61:ec:13:54:e5:13:d9:0e:89:a1:d2:42:
4c:3c:1b:65:1f:d7:d8:92:64:5d:6e:e3:1e:e0:c4:45:eb:88:
cc:9c:87:48:29:de:04:cd:11:bc:f9:e3:8c:69:a2:3a:ef:86:
ec:a5:c1:f4:fb:ef:ad:3d:9c:51:d6:8d:37:6f:07:42:bf:ef:
5c:16:06:0d:66:2e:5b:77:d0:6e:b2:75:96:02:2a:41:1c:40:
68:12:41:4a:67:0a:cf:52:4c:d8:e5:af:35:48:a5:1f:3a:99:
52:ff:71:00:db:15:0b:d7:cf:35:62:d6:30:25:90:26:85:f2:
b1:13:56:19:b8:03:6e:45:28:6f:98:b8:e3:3f:44:07:47:61:
a7:35:ae:4c:57:2c:57:a1:b6:56:81:58:a2:83:72:19:ff:13:
79:07:63:2c:22:c5:bc:6b:f4:71:ed:5c:79:0a:16:88:02:b7:
2e:4e:b4:e3:d8:30:83:8a:44:66:c8:11:a4:0f:e7:20:d4:9e:
1f:ab:30:63:21:64:05:5f:1d:9c:cf:08:f8:4e:ec:7c:73:11:
57:8c:6e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org