Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FD1B67FC0E3A11ED9860B5E1F1222468.roa
File: FD1B67FC0E3A11ED9860B5E1F1222468.roa (raw, json)
Hash identifier: QIQgXrYKtxTtL3NKteoS8E5ZJBgCkyOh4i3VEsc1rRU=
Subject key identifier: 98:10:D4:CF:89:7B:50:62:7D:5D:AB:B8:DD:AA:35:99:17:EE:0F:1D
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0515
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FD1B67FC0E3A11ED9860B5E1F1222468.roa
Signing time: Thu 28 Jul 2022 06:03:24 +0000
ROA not before: Thu 28 Jul 2022 06:03:20 +0000
ROA not after: Wed 07 Jul 2032 06:03:20 +0000
asID: 398465
IP address blocks: 192.142.240.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Aug 2022 13:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1301 (0x515)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jul 28 06:03:20 2022 GMT
Not After : Jul 7 06:03:20 2032 GMT
Subject: CN=62e226ab-cd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:52:b1:ad:58:94:f6:16:73:75:7f:33:d8:
26:99:f9:1a:4a:b7:5c:0a:69:51:38:3b:52:35:4c:
0f:6b:c5:14:73:b2:33:b6:4b:67:45:50:cc:af:2c:
5e:40:d9:3d:ed:e7:c4:8d:dc:27:92:cc:49:12:ea:
52:c0:50:19:5a:9f:93:dc:e3:d1:13:3c:6b:98:83:
a3:8d:bc:29:58:91:93:54:69:18:01:7b:ac:7c:3c:
57:91:6a:0a:50:f5:45:57:92:67:30:1b:b9:8e:83:
dd:fe:a5:0a:42:83:1a:34:fd:84:8a:7f:25:ca:11:
e5:bb:be:08:56:d5:eb:00:f3:b4:0b:84:c2:df:d8:
18:e6:48:34:65:31:13:45:29:54:a9:cc:43:20:63:
67:df:5a:b0:88:5c:b7:5a:f5:37:f5:c6:16:9e:b0:
07:d6:93:47:f0:24:29:e0:0f:90:81:78:91:91:8b:
f4:69:be:f3:fc:d2:c9:a2:02:89:bb:18:dc:00:42:
d1:63:cb:0e:22:b9:65:99:9e:39:35:ab:a0:15:ac:
a2:b5:73:4e:c4:b4:60:99:81:73:72:5d:63:f8:61:
19:fd:09:52:98:2d:d7:b7:d6:ea:41:5d:b3:fe:3b:
bb:58:08:19:74:93:62:a3:63:b7:39:d1:cf:27:40:
1f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:10:D4:CF:89:7B:50:62:7D:5D:AB:B8:DD:AA:35:99:17:EE:0F:1D
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FD1B67FC0E3A11ED9860B5E1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.240.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:7f:4a:14:37:a0:8f:af:ca:9e:bb:a6:cd:12:84:a3:da:58:
80:b0:00:fa:73:b8:8f:6c:ee:01:09:2a:74:d4:a8:b0:c1:de:
1e:0f:65:04:ef:ff:70:8a:c5:bd:43:4b:b4:27:61:81:03:a3:
31:c9:a9:9c:9e:7a:78:2e:6c:26:f2:51:00:e5:29:45:4d:10:
35:1e:ae:25:8b:3d:dc:7c:a1:d8:82:bd:fe:d9:ff:51:3f:cc:
9a:55:c0:a7:74:62:55:c4:ba:a2:8e:bf:26:6c:a2:ba:eb:bf:
02:c1:19:d3:c4:a2:f0:20:e9:3d:13:43:ec:71:59:99:85:09:
33:22:bd:b9:0d:8c:1a:9b:38:80:da:f9:7b:28:87:d1:6c:dc:
41:16:8f:6f:2b:60:65:f3:5c:27:a5:6b:5f:8b:2f:f7:c8:69:
41:26:44:70:20:b1:1f:f9:b7:a9:8a:07:35:03:05:61:fa:91:
1c:b8:88:9b:47:52:b6:2e:26:f9:c2:8c:c8:76:52:6e:dc:ce:
78:d3:ce:a9:e7:20:4a:86:cd:55:af:e0:71:61:aa:10:70:2d:
fa:8b:35:27:91:1d:65:56:a9:16:fd:30:b2:eb:bf:f5:57:c7:
81:6a:f5:8f:06:b5:17:c8:88:bc:38:e0:99:a0:dd:a4:b5:dd:
6b:e6:0f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org