Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FDE5DBC481E611EEA06DC30F4AD9E6FC.roa
File: FDE5DBC481E611EEA06DC30F4AD9E6FC.roa (raw, json)
Hash identifier: rAWX0bUPxW7CK0ZPiLLpc/hNWUWSy0pNcXAJxrIIaBs=
Subject key identifier: FF:99:01:91:19:E0:E2:C0:54:05:B5:41:77:58:21:20:7A:62:06:7C
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 082E
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FDE5DBC481E611EEA06DC30F4AD9E6FC.roa
Signing time: Mon 13 Nov 2023 05:39:20 +0000
ROA not before: Mon 13 Nov 2023 05:39:17 +0000
ROA not after: Wed 16 Nov 2033 05:39:17 +0000
asID: 212219
IP address blocks: 192.142.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 10:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2094 (0x82e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 13 05:39:17 2023 GMT
Not After : Nov 16 05:39:17 2033 GMT
Subject: CN=6551b688-022b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:21:6c:cf:d2:2a:f5:35:36:fc:2e:e0:3c:9c:
74:39:e7:15:a6:f0:cb:2e:36:57:8e:53:7d:0c:c6:
55:98:66:68:54:74:f5:45:a5:2b:ef:08:b4:11:1e:
08:39:47:6c:c7:47:44:0f:bd:d9:69:bb:91:f5:4e:
bc:6a:cd:71:95:d8:7f:7b:67:23:cb:23:62:8f:68:
97:a3:f1:6c:c6:6b:bf:d5:ef:44:86:b1:da:46:b0:
6e:ac:f4:dd:95:9e:11:63:73:89:ee:7e:b5:b1:90:
1c:da:57:58:23:db:c7:3d:83:7a:4a:e2:13:ed:6b:
b8:be:75:c7:e2:e6:ff:fb:74:64:64:40:e8:6c:6d:
ed:9c:75:9b:03:dd:4e:e9:0d:e9:87:a4:59:17:50:
28:ac:b7:4a:50:a5:40:e5:66:08:69:1d:32:8b:f4:
97:5e:6d:a5:b1:4e:70:81:2c:a3:81:a5:ab:d6:97:
ed:2c:d8:5a:38:16:9b:82:1e:7a:ff:b5:a0:8f:3d:
68:72:b7:18:31:a6:74:86:02:3c:d7:8b:77:21:c4:
d9:ee:2e:b8:9a:cb:49:f4:88:c9:f2:8f:5b:86:a2:
46:e1:6a:27:b0:23:25:e3:1a:82:bb:55:9c:88:58:
6d:b4:e5:9b:52:d7:f5:ac:38:94:cb:3e:0c:8b:38:
9d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:99:01:91:19:E0:E2:C0:54:05:B5:41:77:58:21:20:7A:62:06:7C
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FDE5DBC481E611EEA06DC30F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.173.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:33:58:10:c6:4f:3d:11:03:f9:06:16:a5:eb:74:ba:59:a7:
29:d9:9f:ab:c3:53:90:a7:69:07:61:f9:8d:61:f0:98:2b:76:
e8:ee:a0:ca:91:d0:a3:c0:70:34:4f:15:2e:f4:26:30:9e:61:
46:0f:9b:cc:d2:ba:e2:9f:3e:69:5b:ef:34:b7:65:a9:2c:34:
cc:58:f2:9f:05:3c:37:cb:01:72:e4:80:a4:a0:2a:85:33:e7:
8d:ab:92:2c:2b:00:a6:12:0e:37:dc:48:1a:7b:cf:58:ae:ba:
d7:21:b7:9b:20:34:73:6f:67:c3:c0:96:7e:56:e8:42:09:02:
e0:a6:a8:e0:1c:a2:73:c2:bf:82:1e:2d:f2:df:15:56:d9:e6:
a2:5a:3d:2d:1e:b2:eb:91:35:7c:60:bf:1b:0b:ed:dc:3e:a1:
e7:b5:5f:80:43:02:8e:45:80:f5:f2:f6:d4:60:5c:f4:53:e1:
d8:d3:c3:64:39:eb:21:c7:ac:41:ad:36:03:41:5c:91:ef:75:
8b:11:05:68:f5:c9:c6:6d:7c:87:6a:87:c4:b8:8c:63:3d:47:
68:31:ec:60:fb:56:3d:69:9f:3f:4b:b0:93:25:e1:0a:16:64:
67:6c:05:6f:f9:a2:84:86:96:32:ef:07:dd:f1:14:99:fa:9a:
29:83:f7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org