Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/760CF22C0BB711EFA94E2955017001B1.roa
File: 760CF22C0BB711EFA94E2955017001B1.roa (raw, json)
Hash identifier: Ob4SgTqiDJaMOpRuStkZAHSh6Do6Cq/DabxvDWDIeZ4=
Subject key identifier: A3:7A:7A:BD:1E:96:EE:63:2F:E2:E9:16:36:CD:BF:FC:13:A8:45:76
Certificate issuer: /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial: 61
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Authority info access: rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/760CF22C0BB711EFA94E2955017001B1.roa
Signing time: Mon 06 May 2024 14:46:46 +0000
ROA not before: Mon 06 May 2024 14:46:42 +0000
ROA not after: Sat 31 May 2025 14:46:42 +0000
asID: 37557
IP address blocks: 168.253.0.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 07 May 2024 00:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Validity
Not Before: May 6 14:46:42 2024 GMT
Not After : May 31 14:46:42 2025 GMT
Subject: CN=6638ed56-93c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:bb:6d:86:b5:a4:82:2b:3f:f8:1c:58:42:
96:34:fa:fb:25:37:d8:a5:80:20:a7:c8:f3:01:46:
c3:b5:92:f0:08:ed:f2:9b:28:fc:2f:0b:23:55:f1:
20:8a:98:91:37:1d:eb:6f:86:9f:0b:f7:e5:55:98:
13:0e:a5:d3:7f:4f:17:f8:11:39:14:11:12:a9:c9:
d2:eb:ce:4c:b9:1c:f6:88:91:54:7f:b8:01:7a:c7:
e6:ae:3a:33:35:a9:86:f0:cb:ea:b4:78:06:62:0d:
2f:ba:a7:3a:ff:29:d9:fb:d8:7e:66:73:6e:7c:92:
34:dd:7f:ab:88:f7:74:07:0e:5e:cb:64:eb:e7:8e:
cf:3c:43:86:fb:00:e2:d4:c4:ae:4f:29:26:9b:49:
cf:8c:c0:31:74:5d:78:f0:3f:28:d4:9f:10:57:5c:
b7:75:7b:80:cc:8e:4b:98:75:f3:e5:7f:af:7c:12:
1c:66:3c:99:1e:cf:e4:d4:cf:c0:19:56:f9:f9:1a:
da:a8:d5:00:eb:f1:a8:a1:00:c0:5d:76:07:81:d3:
df:1c:80:6a:cd:9b:02:3a:0f:71:e7:ce:bd:03:fd:
ec:21:26:20:47:95:7c:a8:2f:f6:b4:c1:23:03:2e:
bb:06:37:12:5c:97:a7:27:25:22:09:16:a6:1e:29:
7e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7A:7A:BD:1E:96:EE:63:2F:E2:E9:16:36:CD:BF:FC:13:A8:45:76
X509v3 Authority Key Identifier:
keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/760CF22C0BB711EFA94E2955017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.253.0.0/19
Signature Algorithm: sha256WithRSAEncryption
32:3f:b5:5b:5e:6e:97:07:ef:62:9b:3d:1f:38:ce:64:fc:71:
a5:e0:37:cb:60:9b:40:0a:eb:e0:b5:9a:78:df:99:86:e4:ee:
35:a7:d6:09:0c:53:8c:84:4b:1c:34:aa:d3:c9:87:db:84:36:
7c:62:fe:c7:3d:e5:19:be:46:8c:0c:7f:c0:62:76:7d:00:e8:
f6:78:2c:4d:8d:bd:91:2f:51:ec:b2:87:eb:0f:b7:e7:a1:27:
ec:31:c4:43:86:ea:68:14:6c:6a:e4:de:d6:0d:db:cf:e1:14:
57:f3:e8:6c:86:84:d5:a9:56:c0:b8:88:27:15:38:d7:32:07:
be:24:fc:28:1d:c4:10:34:36:90:ec:08:9e:18:b4:36:fb:88:
bd:c1:95:0c:b6:5c:0d:af:9a:f2:8f:b8:df:00:e7:a4:2b:72:
d6:a5:bf:85:e6:2a:ae:84:74:73:1e:c9:34:89:6c:4a:ba:1f:
7a:26:53:bb:c1:f7:17:a1:78:08:44:ff:f0:7b:4e:6b:ee:2e:
3e:94:d1:24:3c:19:c5:eb:70:e3:be:de:1d:42:98:84:53:20:
9c:7d:9d:a3:dd:86:f7:09:f6:16:3f:2c:c4:fe:97:6d:55:2a:
51:92:1b:e4:9c:e9:46:82:9e:5c:f7:db:05:b6:9e:46:78:f3:
7c:c3:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:53 2024 by rpki-client on console-fra.rpki-client.org