Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/04D518E07CA611EFA2A808AA762E951A.roa
File: 04D518E07CA611EFA2A808AA762E951A.roa (raw, json)
Hash identifier: Z2tdDsktP/8p0I6OpPy0aZaPBoKCHjNwQD8x+rJGYwk=
Subject key identifier: D4:3F:C2:F9:9A:EA:7D:26:F3:41:B8:F9:B9:E7:7D:8F:2F:2C:B6:37
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0A32
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/04D518E07CA611EFA2A808AA762E951A.roa
Signing time: Fri 27 Sep 2024 07:56:36 +0000
ROA not before: Fri 27 Sep 2024 07:56:32 +0000
ROA not after: Tue 19 Sep 2034 07:56:32 +0000
asID: 211585
IP address blocks: 192.142.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2610 (0xa32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 27 07:56:32 2024 GMT
Not After : Sep 19 07:56:32 2034 GMT
Subject: CN=66f66534-822a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a3:ea:48:de:50:aa:0f:d1:cd:f8:d9:36:46:
78:30:d7:a6:de:6a:c1:85:53:3b:05:24:d3:37:e6:
50:ce:97:ba:9f:f2:ce:97:ba:53:66:70:16:73:6e:
60:28:ef:a3:8e:50:08:02:32:f1:48:60:33:32:cc:
8f:93:4e:9f:91:aa:90:24:8b:44:31:a2:42:b8:b8:
be:c9:79:f6:4b:10:a9:e7:49:a0:04:3e:0c:fe:94:
81:07:a1:3e:ef:b0:c9:d8:cb:75:39:a6:9c:4b:2e:
ac:25:a1:f4:51:01:63:bd:3a:9b:28:16:f5:61:94:
62:a0:49:ec:1e:68:b7:78:fe:dc:fa:c5:53:ab:59:
dd:99:6b:d3:65:25:f4:59:8f:cd:74:50:cd:a2:e5:
64:f1:d1:b1:61:9f:a5:fd:67:28:b7:59:5c:af:c3:
bc:d7:02:8c:e2:e2:37:54:90:ca:01:b8:2d:08:1f:
4c:39:bd:ca:14:f6:f3:b1:3c:58:e4:4d:98:88:5b:
fb:f6:08:1d:5a:ea:ea:ee:1a:66:ca:d2:e2:b4:05:
f9:f1:f0:e5:f0:4a:c7:65:42:1c:24:f0:b8:04:c4:
4f:02:8a:9b:ba:3d:67:28:7e:6e:67:92:49:07:63:
38:2e:8c:fa:55:6a:a0:98:4a:7c:e6:df:1c:4c:2e:
42:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3F:C2:F9:9A:EA:7D:26:F3:41:B8:F9:B9:E7:7D:8F:2F:2C:B6:37
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/04D518E07CA611EFA2A808AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.101.0/24
Signature Algorithm: sha256WithRSAEncryption
18:17:9b:c0:11:52:dd:01:13:6b:3b:50:1d:56:50:bb:1a:ce:
17:8c:66:e3:31:1d:20:c3:a4:e0:d6:9d:7a:06:54:8a:65:96:
4d:c6:8c:b3:6f:d2:bd:c1:13:fc:5c:5d:b0:6c:45:62:ca:3d:
25:48:43:f1:7d:65:3d:8c:79:e8:e0:9e:bf:46:96:e1:13:5a:
99:17:a9:80:5f:59:39:ca:52:db:a8:5e:59:bb:d3:63:36:77:
1b:9b:81:50:0a:64:1e:23:07:f4:b2:0f:d7:9f:76:b3:68:60:
7d:0b:c2:02:57:c3:cd:74:94:85:56:fa:41:85:ff:ac:e6:2d:
14:4d:43:bb:9d:32:cb:08:4a:85:65:a3:29:05:1d:14:40:1f:
93:57:61:08:13:0c:32:49:2c:d2:ea:f5:96:8d:25:42:01:52:
e7:f2:34:13:af:ed:1c:9f:06:74:cc:9a:d6:3d:7d:b6:74:db:
7f:87:b6:0b:51:9d:bb:26:3d:23:ac:a2:73:ad:af:6f:39:c7:
a9:4b:13:71:c7:59:17:a1:3c:6b:cd:71:e2:86:0b:eb:6d:45:
c0:0e:6a:00:a1:61:d6:25:34:ad:c1:c9:73:01:f5:bb:5b:94:
5d:d9:6b:67:0b:d3:e2:5b:86:f2:48:1b:4c:ff:04:83:1c:e3:
b4:b9:7a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 13:22:29 2024 by rpki-client on console-ams.rpki-client.org