Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FBF544D00F9C11EC93C5CB32D8A014CE.roa
File: FBF544D00F9C11EC93C5CB32D8A014CE.roa (raw, json)
Hash identifier: MMcjcOcTahPgJB4/HAnKn9WbnbnxUNPN5xOk3doNysA=
Subject key identifier: 29:9E:77:9D:31:1F:5C:C6:E3:B6:59:2A:6F:F0:5C:12:B8:51:39:9A
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 036E
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FBF544D00F9C11EC93C5CB32D8A014CE.roa
Signing time: Tue 07 Sep 2021 05:32:26 +0000
ROA not before: Tue 07 Sep 2021 05:32:21 +0000
ROA not after: Wed 10 Sep 2025 05:32:21 +0000
asID: 64286
IP address blocks: 192.142.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Aug 2023 06:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 878 (0x36e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 7 05:32:21 2021 GMT
Not After : Sep 10 05:32:21 2025 GMT
Subject: CN=6136f96a-367e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:0a:01:c9:a7:f7:7a:f9:42:b9:9a:9f:07:
da:f1:cc:b3:ab:bc:48:64:0e:7d:0b:be:b2:e0:c3:
cd:0b:f4:53:e3:45:0d:b9:f0:f4:da:eb:30:2f:07:
06:72:ee:3b:2b:5e:a1:f2:75:6b:9a:e4:e7:f2:7a:
d1:a6:23:42:20:e0:da:62:cc:03:69:f2:87:0a:9c:
3a:a1:4d:36:db:1a:0f:c1:59:0e:dc:16:2d:d7:14:
18:40:86:0a:55:b0:b7:d9:85:7e:ee:aa:93:e2:e9:
59:f8:37:d0:17:3e:d4:d1:8e:b6:ca:27:cf:db:fe:
06:03:d6:f8:93:8d:fa:48:36:91:fa:c8:4c:fa:f7:
9d:be:2f:2d:40:bb:35:72:6b:52:19:5f:b1:8a:87:
6b:eb:67:c6:fd:6e:49:43:a3:89:d9:1e:29:c9:f0:
be:e7:a6:be:d6:97:af:63:46:cb:f4:cf:76:44:65:
74:f6:d8:d3:e6:fb:0f:3c:76:db:cf:80:90:5b:3d:
cf:e1:65:d2:2d:f5:f1:6c:a9:cc:94:d3:37:0b:a9:
45:e4:a9:dc:5d:a3:f4:76:ec:50:79:8b:cb:08:1e:
e0:59:a8:a5:75:86:1e:0b:26:51:da:1f:c9:da:77:
d3:55:da:46:a0:ed:c6:c7:c4:d6:3c:a9:e3:9f:0f:
ee:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9E:77:9D:31:1F:5C:C6:E3:B6:59:2A:6F:F0:5C:12:B8:51:39:9A
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FBF544D00F9C11EC93C5CB32D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.129.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e3:7d:c7:02:ba:0c:22:a7:36:c1:c8:0a:16:24:ea:36:58:
f2:f0:84:f7:69:76:cf:11:21:90:72:5d:45:fe:4d:8d:6e:95:
05:dc:e6:02:bc:93:21:3b:bb:5c:53:ca:1c:38:c3:2a:79:cd:
d1:dc:20:b9:82:92:d3:b2:5b:38:42:52:be:cd:9c:88:55:62:
64:b6:95:68:13:38:9b:1f:5e:4d:ee:6d:65:09:69:9f:d3:8d:
b2:99:ae:49:16:74:64:e5:63:0c:46:84:2d:49:46:af:dc:25:
ba:02:0b:09:35:2b:9f:be:2e:f3:ba:86:62:3d:03:49:58:a1:
dd:1e:7c:30:4c:fa:d5:91:53:8a:00:70:91:09:c3:84:d9:dc:
41:89:b8:80:a5:ad:a9:20:c2:a6:43:c2:09:1d:94:5f:03:96:
b9:10:e0:ba:21:e5:e8:ea:d5:d1:9a:b3:32:c3:04:16:2e:a2:
aa:c6:62:d1:97:8f:26:f0:81:de:44:4d:2c:0a:50:6e:93:be:
e1:7d:d4:89:0b:d7:52:1a:0b:4f:bd:fe:9a:69:cc:85:6b:59:
97:4f:1d:1f:c4:e7:67:f3:78:22:35:31:82:e4:6d:15:b2:36:
16:09:28:e4:fe:49:e3:12:7f:b1:12:fb:94:3f:5d:4f:e8:f2:
37:5c:40:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org