Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1E96BD387CA611EFB51FE0AB762E951A.roa
File: 1E96BD387CA611EFB51FE0AB762E951A.roa (raw, json)
Hash identifier: SNj0NIuDI8vEzfdctbdB7o54EzQst0pBpjluDTuwduo=
Subject key identifier: 02:40:F5:47:03:EB:D0:81:31:0C:F3:74:B8:5F:FB:04:97:2D:07:75
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0A34
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1E96BD387CA611EFB51FE0AB762E951A.roa
Signing time: Fri 27 Sep 2024 07:57:19 +0000
ROA not before: Fri 27 Sep 2024 07:57:16 +0000
ROA not after: Wed 20 Sep 2034 07:57:16 +0000
asID: 43260
IP address blocks: 192.142.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2612 (0xa34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 27 07:57:16 2024 GMT
Not After : Sep 20 07:57:16 2034 GMT
Subject: CN=66f6655f-09f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:55:ef:c9:06:c1:30:34:23:dc:f9:d3:45:e0:
93:a3:8e:34:9b:ac:37:af:de:a3:f9:ef:4b:80:4a:
6a:9c:4e:26:b6:08:5f:41:70:89:29:be:ac:3e:a3:
bc:5c:1d:e9:b9:56:ff:6f:50:f9:a4:b1:2b:96:5e:
d8:f9:b1:d3:14:d9:41:00:2e:f5:17:e7:fc:bc:6b:
25:e8:fe:27:74:1c:f3:99:a2:c2:3c:50:49:9c:27:
ca:d4:25:1d:44:c0:36:a1:70:19:47:e1:67:f0:8e:
b5:de:f1:d0:9a:f9:f6:bd:22:c7:53:fd:e0:9f:a5:
a8:78:61:2f:7f:4a:2f:5c:f9:5b:df:bd:dd:db:23:
75:22:1f:45:74:e5:3e:b0:8f:ee:3a:76:d9:94:65:
9e:b3:13:85:db:02:85:10:8d:da:9d:db:7a:d3:59:
80:d5:f7:b8:24:97:80:cf:34:65:7b:d3:b7:11:cc:
f1:a4:06:49:e4:7e:85:fa:85:f3:93:62:9e:c3:07:
09:9f:51:6d:a8:9f:3d:a7:76:b0:6a:24:fb:1b:1a:
43:d2:f4:40:8f:0d:d8:10:69:61:c2:5d:c6:6d:d5:
32:17:d6:83:5c:70:f1:9b:0d:97:13:51:f1:91:62:
13:c2:08:1b:80:3e:ee:15:b0:e5:9b:b5:7c:22:a4:
be:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:40:F5:47:03:EB:D0:81:31:0C:F3:74:B8:5F:FB:04:97:2D:07:75
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1E96BD387CA611EFB51FE0AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.101.0/24
Signature Algorithm: sha256WithRSAEncryption
63:bb:51:8c:ce:44:ae:7e:4c:fd:0c:48:c1:d6:f3:5a:82:30:
f6:cb:30:65:97:9c:53:61:7c:da:54:ab:4b:64:1e:5b:0e:50:
5b:35:e8:d1:56:e6:6e:69:f1:aa:32:6c:1c:ce:f3:56:88:da:
41:04:88:d2:86:b4:88:1e:43:3e:28:58:f0:ad:b3:2d:8b:a5:
b6:16:ae:f9:21:7a:ef:2e:8d:a9:60:5d:d9:6e:76:bf:fd:c1:
d9:28:e3:64:a2:79:1c:c3:ad:1c:46:14:13:f5:b0:4b:61:98:
0e:4d:6a:27:17:13:80:50:54:06:b4:9d:8d:e5:21:a1:5c:a9:
35:66:57:1b:b5:40:3a:30:3f:11:1c:cc:9c:7e:77:92:a4:16:
d7:56:48:c0:0b:f4:cc:e6:5e:ca:29:2e:db:4f:12:65:d3:4d:
e6:b1:7e:08:ef:7e:04:49:99:ec:dd:65:60:77:63:01:39:d2:
d6:e8:50:3c:da:9b:d3:89:e4:8f:a5:05:95:39:e5:80:a0:b6:
b4:46:60:59:ba:d1:a1:b7:f4:48:99:9f:f1:52:7a:06:5a:05:
5b:32:8e:e3:ef:85:56:5c:c1:ca:c4:94:e5:3d:70:af:8d:67:
78:e1:88:ea:d4:f6:c4:45:0e:b3:4a:e2:f2:24:b1:c6:11:d5:
05:9c:29:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 13:22:29 2024 by rpki-client on console-ams.rpki-client.org