Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/17FCEE2C04D011F0BACB17AB762E951A.roa
File: 17FCEE2C04D011F0BACB17AB762E951A.roa (raw, json)
Hash identifier: gQGHSbDx2She82gavHzlpydCHLmg1p+wW3XYOpMurZo=
Subject key identifier: F5:4E:D6:C6:AF:F6:9E:A7:4F:87:90:9B:3D:C5:2A:B0:DE:AF:51:03
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C3A
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/17FCEE2C04D011F0BACB17AB762E951A.roa
Signing time: Wed 19 Mar 2025 14:40:25 +0000
ROA not before: Wed 19 Mar 2025 14:40:21 +0000
ROA not after: Tue 13 Mar 2035 14:40:21 +0000
asID: 7029
IP address blocks: 192.142.104.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 05:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3130 (0xc3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 19 14:40:21 2025 GMT
Not After : Mar 13 14:40:21 2035 GMT
Subject: CN=67dad759-2dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:89:10:0c:98:d1:c2:f1:b9:8c:d8:c1:74:
c9:79:24:ce:4a:8c:3c:3c:99:98:f3:18:6f:b3:cb:
b8:a7:9d:02:b7:ce:ff:e4:c7:2c:f0:b6:f5:ad:56:
c3:ee:33:14:25:3d:a2:db:0f:dc:d0:9a:81:0b:f4:
56:a2:71:f8:2f:23:47:1f:de:a9:34:a7:14:a6:ac:
d2:09:65:3c:ea:91:fe:1c:7c:f7:6f:fc:3e:99:9a:
8c:10:8e:83:ac:e0:bf:e4:8b:78:9c:63:06:c4:55:
ea:c2:88:e7:3e:07:10:9b:40:7b:6a:ef:e9:20:82:
67:cd:09:bb:40:d0:e2:e7:8f:ed:5c:9f:af:eb:d9:
fe:84:2c:79:24:da:b9:d7:64:cf:2c:d0:5e:3c:18:
f9:ab:f6:10:14:72:c2:c3:af:c3:35:d1:36:c2:53:
27:b7:94:83:78:54:81:f6:bd:2e:36:ff:9f:30:41:
88:ff:41:c5:e8:a4:f4:4d:8c:ff:28:ea:ab:98:ee:
71:c9:1c:30:06:7d:02:da:40:54:36:bc:ee:27:1c:
63:2f:a0:c7:57:7a:f4:ff:44:47:3e:13:5b:bc:14:
be:62:f5:15:e5:bd:d2:4d:64:fa:06:29:e2:0f:8b:
ae:25:3f:d4:41:36:d4:4c:22:32:66:5a:53:3b:9d:
e2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4E:D6:C6:AF:F6:9E:A7:4F:87:90:9B:3D:C5:2A:B0:DE:AF:51:03
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/17FCEE2C04D011F0BACB17AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.104.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:a9:61:9d:3c:11:6d:1a:e9:25:8a:86:d4:48:ba:59:4f:cd:
5d:c1:8e:ca:eb:ae:cb:40:c1:ba:a6:da:ee:63:d8:c9:22:37:
72:da:8f:d5:0f:e4:1b:ad:6f:ed:05:89:e2:1e:b1:22:65:8c:
53:d9:5a:5b:eb:65:c0:29:81:d7:7c:25:e7:f1:12:46:39:a2:
0d:ac:da:48:f1:b1:95:e0:f1:ce:38:0b:60:93:78:cd:44:15:
00:a9:32:3b:6a:38:c9:41:9f:2c:3d:df:77:58:a1:d0:36:9d:
47:a4:ee:30:e8:e8:e3:8b:4e:25:6f:a5:b2:37:b0:e4:1a:7d:
c2:a0:c5:fc:ce:2f:a7:8d:b6:72:f7:52:78:57:04:46:1a:e2:
2d:7d:02:56:38:ef:16:83:cb:4a:27:e7:a3:6d:51:50:fb:0c:
47:f6:ac:b3:cf:37:a8:58:42:ec:98:61:51:fd:a0:00:40:a8:
d3:68:f7:5f:05:99:31:75:60:ab:ed:5b:1a:50:d8:81:3c:74:
90:6f:5d:10:1f:4b:42:d9:9c:0a:7a:65:07:08:9c:29:a9:d7:
c5:af:8b:f5:1a:5c:8a:44:b7:02:7b:66:9f:15:7b:99:89:a4:
75:c1:26:72:3a:26:59:66:17:37:1b:d7:62:db:40:b7:28:87:
3c:e5:92:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:36:26 2025 by rpki-client