Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FD3E0D409FC311EE9BCE8040D25BE465.roa
File: FD3E0D409FC311EE9BCE8040D25BE465.roa (raw, json)
Hash identifier: 3yfj7nhWjVQyuLTkdG1Uyv3kbPSBeUAbViFRAdsLc1w=
Subject key identifier: D3:8D:75:AE:30:8A:16:D0:98:24:5B:1C:C8:25:EA:1C:DB:7A:D7:8F
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 085F
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FD3E0D409FC311EE9BCE8040D25BE465.roa
Signing time: Thu 21 Dec 2023 05:44:21 +0000
ROA not before: Thu 21 Dec 2023 05:44:18 +0000
ROA not after: Wed 21 Dec 2033 05:44:18 +0000
asID: 47959
IP address blocks: 192.142.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 05:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2143 (0x85f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Dec 21 05:44:18 2023 GMT
Not After : Dec 21 05:44:18 2033 GMT
Subject: CN=6583d0b5-c2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:ff:b6:35:e1:98:37:7e:db:1c:3b:15:d7:
f4:db:46:9a:c7:34:c8:6d:df:54:ab:8e:16:69:6e:
fb:93:82:98:67:67:6d:2c:fc:74:3f:d7:b4:2f:d7:
ea:b5:d7:93:80:6a:a6:9f:cd:3f:07:f4:75:02:ec:
16:01:41:f3:76:bc:ad:fc:a6:a3:62:50:02:97:8c:
14:4b:d6:55:fc:89:56:39:7f:ab:9f:77:cb:57:3f:
f3:c2:90:8c:6a:4c:7f:72:0c:11:a7:6a:97:03:02:
b8:c4:28:35:dd:16:a1:98:06:25:4b:e6:ae:b7:88:
9d:86:e7:51:b8:7e:78:4b:86:2e:2f:0d:d1:c9:d6:
2c:7a:ec:76:26:de:09:41:c5:4d:9a:8e:8d:b9:27:
a1:ee:49:89:e1:22:8a:9f:28:47:76:6d:cc:76:01:
2f:67:fe:e1:93:19:4d:0b:1b:72:14:d6:a5:ba:24:
05:45:97:91:3c:f3:1c:9d:70:86:0e:33:e8:0d:25:
32:2f:bc:d8:04:62:be:78:f8:f5:92:cb:87:70:47:
eb:65:e6:32:29:8b:2d:39:31:b3:5a:b7:ef:d9:b4:
a8:0d:b3:db:b4:f7:40:a6:0e:0d:1f:14:8e:56:df:
71:1c:64:ad:df:32:84:4c:35:a0:f4:6b:33:15:f8:
5a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8D:75:AE:30:8A:16:D0:98:24:5B:1C:C8:25:EA:1C:DB:7A:D7:8F
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FD3E0D409FC311EE9BCE8040D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.72.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:a4:5e:97:b1:05:54:d3:95:4f:a8:2c:a6:7b:60:8a:8f:30:
84:cc:58:9c:23:84:ce:8d:c5:e7:58:21:4d:f5:f0:03:d0:e7:
25:29:82:c0:b2:4a:04:ac:74:57:62:04:d0:b4:01:cc:24:e7:
06:83:ae:a7:b8:12:77:fb:86:75:d1:cf:92:18:0b:e4:68:6e:
3a:e3:af:98:58:eb:ad:81:d9:5f:40:87:0b:a8:46:9f:59:32:
16:17:b7:aa:23:cd:48:ba:4d:72:df:61:80:58:36:b6:de:2c:
54:47:a2:1a:36:79:4c:8a:62:28:25:83:fb:f3:5c:eb:af:a6:
e6:f5:cc:5c:5e:ca:e0:c1:06:6a:69:0f:2e:a6:9c:8c:b1:dc:
39:43:81:f0:9d:b3:31:87:f8:7c:be:70:c0:20:2b:57:e6:22:
7f:25:a9:94:20:13:53:69:28:1e:4f:27:8e:8a:09:89:f0:1c:
96:b9:9c:66:b1:ff:44:3f:a8:cf:7a:7e:97:9b:2e:81:1f:0d:
68:0c:ab:fe:0f:bf:08:ca:58:d9:a4:f0:ad:bb:6f:63:cc:d0:
d5:4f:ac:96:7c:37:0b:06:bb:bb:48:6e:f0:3c:e5:e0:42:43:
85:7b:f5:cc:b8:2e:e3:51:fd:95:9f:89:9b:b0:42:6e:49:b9:
f6:42:5b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org