Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FEAF82DA956011EDA95955E2F1222468.roa
File: FEAF82DA956011EDA95955E2F1222468.roa (raw, json)
Hash identifier: wvLcG9qZ4LNgNtikdwaayO5QCkB+/+Ad4Fj4UowNc0Y=
Subject key identifier: A5:A2:52:7C:08:89:02:36:DC:CB:0A:AF:EB:71:9B:5D:DB:6A:52:B3
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 061C
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FEAF82DA956011EDA95955E2F1222468.roa
Signing time: Mon 16 Jan 2023 05:45:34 +0000
ROA not before: Mon 16 Jan 2023 05:45:29 +0000
ROA not after: Tue 11 Jan 2033 05:45:29 +0000
asID: 3320
IP address blocks: 192.142.248.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Jan 2023 05:40:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1564 (0x61c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jan 16 05:45:29 2023 GMT
Not After : Jan 11 05:45:29 2033 GMT
Subject: CN=63c4e47e-caca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:6d:71:65:cf:5d:95:b8:e2:18:ab:4c:5e:
46:91:fc:9a:d3:af:1e:fd:4a:a3:1e:97:5e:bb:b2:
f3:6e:f0:bd:d2:6a:bf:84:82:22:8e:93:d6:a1:b1:
1d:92:41:2a:8a:b9:8b:ce:03:2d:8b:59:3f:6b:ff:
ff:f3:1c:06:5f:ec:3e:fb:c7:3e:2b:f8:ff:30:ec:
d4:2d:13:7e:f4:ea:02:03:3b:8e:93:3c:69:40:fa:
df:02:6f:fe:f4:50:e5:e1:1e:98:51:f5:b6:c0:4a:
5d:c5:c7:3d:c9:03:14:f1:d7:d3:4c:48:4e:07:6d:
1d:b8:3c:1d:93:25:08:1a:53:d9:f4:4e:92:66:98:
e0:e4:87:ee:6d:f0:99:89:3e:a6:fa:4c:31:06:52:
79:1f:82:f7:6f:ef:84:e5:a5:14:66:e7:02:24:21:
dd:84:99:78:a6:bd:e0:d2:38:a4:00:d3:e0:50:bb:
65:85:1e:5b:63:62:25:5b:46:0c:b8:4c:6d:73:c9:
a5:49:3e:3e:62:31:7d:ff:b3:60:45:67:27:e8:ec:
ec:ef:59:e7:36:7d:79:15:3a:3b:1a:b7:41:2d:c2:
75:ef:48:84:3c:e0:13:98:62:c6:ec:17:94:88:95:
9c:3d:72:7e:29:86:6c:29:e5:89:e9:3b:b2:71:23:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A2:52:7C:08:89:02:36:DC:CB:0A:AF:EB:71:9B:5D:DB:6A:52:B3
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FEAF82DA956011EDA95955E2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.248.0/21
Signature Algorithm: sha256WithRSAEncryption
42:2e:cf:01:36:8f:b5:d1:89:51:28:60:24:6b:69:a9:8d:3f:
72:70:d9:6e:93:24:b1:59:e9:ad:f4:2b:99:44:dd:58:1d:9a:
4a:df:87:11:49:a0:1d:a5:8a:e3:1a:0c:4a:fa:e5:a6:d7:25:
74:dd:89:67:45:f8:23:9e:b0:bb:ed:8c:92:2b:f5:ac:c8:a5:
da:6e:00:00:45:9d:4b:3c:9f:16:fe:05:2e:8f:34:5e:5c:b4:
63:21:99:e3:81:53:fe:1f:0e:97:68:8b:67:80:1a:53:1b:11:
42:09:d9:09:b2:bf:a2:76:ee:93:e5:0f:b9:40:e3:b9:52:ad:
9d:95:1c:a7:80:bc:2b:66:ca:32:54:e7:80:03:c7:5e:e3:8f:
6b:b6:e4:ab:03:a3:31:d3:4c:80:3a:f9:ea:0d:07:8b:c6:3b:
73:cd:f2:e9:fe:da:fc:3e:bc:11:cd:1d:3f:fb:84:00:18:16:
a6:71:d0:ad:fe:6e:62:1f:9b:41:3b:64:3a:b2:26:57:4e:79:
6a:64:ca:ce:a8:92:e4:91:37:9c:07:bb:6b:d4:82:26:b1:1e:
eb:06:37:6a:a6:95:3e:b2:8f:7d:6d:cd:27:d6:fd:5c:51:b7:
41:00:1e:ef:c0:97:9a:76:09:d5:0b:d1:75:69:93:08:32:a8:
da:fd:3a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org