Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/22078CDC5C3011EEAA406C354AD9E6FC.roa
File: 22078CDC5C3011EEAA406C354AD9E6FC.roa (raw, json)
Hash identifier: daPlvFivV5R+PmTxBVpcRUqsMsg1rZUrMg6QnbfhWXA=
Subject key identifier: 0D:1F:8E:27:4E:8A:B0:CF:49:83:B9:71:25:DF:2C:28:CD:39:AE:53
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 07D4
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/22078CDC5C3011EEAA406C354AD9E6FC.roa
Signing time: Tue 26 Sep 2023 05:47:09 +0000
ROA not before: Tue 26 Sep 2023 05:47:06 +0000
ROA not after: Mon 26 Sep 2033 05:47:06 +0000
asID: 64286
IP address blocks: 192.142.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2004 (0x7d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 26 05:47:06 2023 GMT
Not After : Sep 26 05:47:06 2033 GMT
Subject: CN=6512705d-e970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:42:93:3c:81:6c:d4:66:92:d8:9a:73:87:7f:
1d:b4:08:8a:04:3a:9d:e7:3c:93:46:3f:cf:46:0f:
23:1f:dc:11:3a:71:9c:87:2b:34:68:d6:ad:7f:62:
95:58:64:7d:df:0a:85:85:a3:35:f9:b3:b3:23:ce:
2b:1e:f3:e9:ec:1c:de:2d:d2:df:64:c1:79:aa:3b:
03:11:62:89:fc:e2:b4:c8:c8:4c:22:0d:8b:86:05:
ff:13:5b:15:c4:5a:73:2c:0c:84:71:ae:cb:68:2e:
6d:4e:ee:9a:5c:7a:30:5f:82:3d:9b:f9:b7:5a:aa:
4c:6a:bb:2d:87:3c:cd:ce:df:30:2e:a2:b3:8b:0e:
be:52:7e:a5:b3:bb:e7:3b:c4:4e:91:8a:27:a7:cc:
21:d4:db:26:bb:7b:79:d7:c8:a1:d5:8e:a4:46:eb:
36:6e:31:00:67:e8:80:ef:c1:e5:f5:b8:04:b4:a4:
76:71:82:7b:10:51:b1:29:26:fc:f7:80:83:34:31:
22:37:d9:38:8c:6a:87:2b:4e:4e:4e:47:75:67:dc:
09:36:0e:51:61:49:88:af:6f:2a:c4:4f:b2:80:c0:
31:56:33:72:0b:4d:9c:5a:20:5f:85:10:11:e8:76:
34:ab:5b:9c:29:4d:7b:c3:fa:ae:fc:e2:9d:ac:d2:
b5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1F:8E:27:4E:8A:B0:CF:49:83:B9:71:25:DF:2C:28:CD:39:AE:53
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/22078CDC5C3011EEAA406C354AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:9f:9c:6a:d1:f0:32:d9:87:62:13:94:15:c1:b8:41:d2:d0:
87:8f:e0:5a:5b:d5:4f:c3:96:89:e2:00:e1:d1:00:6a:dc:cb:
6a:fc:0e:54:49:81:d0:cc:b2:de:53:d8:1a:f9:a8:0a:7f:e0:
cc:e8:47:cd:a0:e8:a2:7a:34:c2:fc:05:fb:4c:64:e2:52:44:
a9:63:90:45:3a:68:1e:5b:4a:af:f1:9c:b5:92:f4:d8:bf:ef:
61:02:e6:02:a7:1a:b8:c1:0a:f7:70:1d:a7:e4:7a:b6:45:11:
52:1e:d9:3f:65:ce:c5:e9:22:b8:1e:59:4b:e1:de:65:81:a6:
c3:6e:7e:e3:ad:a7:f2:43:98:a7:6a:bc:40:d4:29:73:d8:00:
f7:01:4e:d6:fa:5e:50:30:03:e9:ca:b6:d7:33:05:8d:d2:00:
5c:a3:fb:8f:aa:39:bd:08:3d:bc:6b:3c:d6:8f:26:97:cb:f7:
5a:49:40:e5:cb:40:44:7a:b0:76:b2:fb:5e:0a:2c:bb:67:a6:
96:b5:2f:8a:a3:1d:38:c4:d5:ba:dc:17:d6:69:49:8d:03:e5:
ac:51:51:58:2d:c6:f4:56:03:5a:d1:11:49:c8:27:95:b0:1c:
27:06:b8:87:eb:ee:12:28:5f:14:c8:14:37:52:4e:d1:66:ac:
36:4b:30:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 12:52:16 2024 by rpki-client on console-fra.rpki-client.org