Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/174E7B180B6A11EF83F62068017001B1.roa
File: 174E7B180B6A11EF83F62068017001B1.roa (raw, json)
Hash identifier: 8X1RuG3wbiMsjWLro1RFYKeuZ+94QceIh+XrZb8Ona0=
Subject key identifier: A4:8E:D8:1A:80:00:64:D0:9E:79:40:13:38:BC:A5:04:71:3E:86:83
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0955
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/174E7B180B6A11EF83F62068017001B1.roa
Signing time: Mon 06 May 2024 05:32:56 +0000
ROA not before: Mon 06 May 2024 05:32:52 +0000
ROA not after: Wed 10 May 2034 05:32:52 +0000
asID: 215133
IP address blocks: 192.142.136.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:14:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2389 (0x955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 6 05:32:52 2024 GMT
Not After : May 10 05:32:52 2034 GMT
Subject: CN=66386b88-67af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:6c:75:1e:db:47:b2:5c:d4:73:f3:7e:fb:
b7:28:7e:fc:9f:b9:f5:d4:ba:ac:bd:4a:f0:3f:c6:
1c:9a:34:ef:74:28:18:9c:b2:d6:a1:f0:41:15:50:
e9:51:92:6b:66:e4:4e:33:fa:8e:48:ab:4f:f7:9c:
49:c9:e0:18:70:73:03:7e:8f:b4:fe:c0:e6:25:06:
9f:81:af:52:a2:74:75:69:14:29:e7:38:9b:2e:81:
25:41:f2:e4:5b:06:a0:01:ad:b7:04:37:5a:61:88:
6a:e7:16:33:c5:4f:f0:c2:09:83:32:7d:7f:f3:9d:
0f:bc:19:d3:cd:24:70:45:e9:14:b6:9a:48:18:c0:
95:74:ad:70:9f:ae:ee:fa:5f:2e:4b:01:2c:bb:f6:
2b:66:26:4b:19:50:a1:e5:e7:a5:ff:01:5c:81:72:
58:ea:df:f0:4c:68:68:2d:f5:10:32:77:58:96:2a:
e8:23:25:ce:5d:b9:2b:4c:a2:73:64:71:a4:cf:56:
6e:d2:12:28:76:5c:aa:04:50:75:9d:94:27:7a:d0:
2d:51:38:09:58:ab:d7:4b:99:9d:5a:8d:65:0a:ee:
f3:bb:ee:ee:58:bf:f8:ae:e6:3f:0d:18:c2:43:f6:
84:7d:7e:3f:31:5d:bb:af:54:ed:a6:42:cb:30:78:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8E:D8:1A:80:00:64:D0:9E:79:40:13:38:BC:A5:04:71:3E:86:83
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/174E7B180B6A11EF83F62068017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.136.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:ad:78:21:67:28:84:61:59:f2:80:49:68:cb:e2:e5:7d:c9:
d6:45:b9:ad:cf:03:6b:dd:7c:75:35:2a:4b:b2:6f:0f:06:47:
e6:e9:33:98:b2:b3:48:a1:21:cb:8a:64:5e:11:56:f6:32:5e:
08:f4:cb:f5:d1:fc:82:52:90:30:82:ad:f7:a6:e2:80:14:4a:
b9:24:48:d2:28:4b:7d:3c:4e:3e:f9:ab:ec:8f:03:e8:a0:19:
5b:6d:16:0f:cc:c2:90:46:e9:fa:0a:4c:2f:76:60:a0:b4:f5:
19:be:c0:95:49:af:6b:80:77:84:f3:ba:c4:6c:82:f1:87:4f:
99:80:c2:05:d4:2f:2e:74:4b:b7:b9:f2:46:25:4b:41:00:69:
2e:0f:f5:6c:42:52:7a:21:18:a0:b1:82:74:cc:55:99:4f:d5:
51:5e:21:b7:dc:21:36:f7:b0:d9:49:77:27:af:7c:20:41:f1:
4f:c0:97:b3:15:7e:35:8d:e7:eb:15:e1:c0:10:ca:6e:3c:5b:
b2:fc:0d:a1:bb:17:eb:6a:c9:3a:cb:0f:33:ac:0f:04:2e:04:
55:01:95:03:93:3a:e1:21:81:14:c5:0b:cd:77:df:6c:51:21:
80:4c:0a:18:5f:fe:44:5c:36:21:ee:5f:2f:5c:54:6d:0b:58:
71:46:f6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 12:52:16 2024 by rpki-client on console-fra.rpki-client.org