Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2407259A087011F09E84514C762E951A.roa
File: 2407259A087011F09E84514C762E951A.roa (raw, json)
Hash identifier: zf+usez0MVJgV9kbhQ+DAhi6ej15a2IYUIOmpJuGI0U=
Subject key identifier: B4:5F:33:A1:07:A9:7F:80:0C:D7:B7:B6:A4:0C:D3:34:16:48:93:7C
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C4A
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2407259A087011F09E84514C762E951A.roa
Signing time: Mon 24 Mar 2025 05:23:38 +0000
ROA not before: Mon 24 Mar 2025 05:23:34 +0000
ROA not after: Wed 14 Mar 2035 05:23:34 +0000
asID: 36916
IP address blocks: 192.142.80.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 12:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3146 (0xc4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 24 05:23:34 2025 GMT
Not After : Mar 14 05:23:34 2035 GMT
Subject: CN=67e0ec5a-be43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:2c:d3:49:53:6f:01:d4:0f:8e:4f:45:45:
72:8a:77:9e:64:ee:5f:75:9f:c3:c9:99:eb:53:26:
67:96:e0:a7:37:1b:25:02:b0:58:f0:a8:a0:ea:46:
a0:f3:2a:1e:75:c1:97:e2:db:b2:f0:ec:78:62:51:
9d:aa:a1:ee:86:d1:c3:4e:85:b7:07:56:80:53:22:
13:4d:d3:3c:7a:8d:63:45:aa:bb:59:bd:55:7c:ab:
95:40:f8:ed:a0:eb:3a:cd:79:4f:79:4a:b1:ea:4b:
3b:14:7c:84:b2:ec:14:b1:12:bd:6c:d0:86:58:ec:
15:a9:ac:01:52:f2:22:49:fd:c1:7d:60:31:d7:2b:
c0:7f:d2:d2:34:80:19:14:6c:fb:26:a8:e8:c6:de:
03:fc:a9:23:c5:6f:98:1e:01:94:3d:d9:df:44:8c:
9e:d5:e6:72:c1:98:68:69:d4:38:7c:09:18:52:7d:
f5:58:c9:54:99:de:7e:52:84:39:9b:cf:5e:22:14:
1b:8d:ff:8d:82:94:83:18:fd:19:66:93:54:6c:84:
3d:0b:64:4e:87:b0:0c:81:60:84:4a:34:56:08:d5:
d0:07:8b:bb:ce:37:07:80:1c:93:7a:a3:1a:12:e5:
e1:d8:53:c0:1a:78:a6:07:79:90:7e:d8:b5:3b:9e:
0e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5F:33:A1:07:A9:7F:80:0C:D7:B7:B6:A4:0C:D3:34:16:48:93:7C
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2407259A087011F09E84514C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.80.0/21
Signature Algorithm: sha256WithRSAEncryption
35:b7:6b:43:3f:8b:2b:d1:70:a7:ce:31:72:c6:c5:f6:1d:9c:
86:68:74:75:60:6b:59:44:71:ea:13:42:1b:7c:a0:b9:1c:ab:
d5:97:44:99:d5:e0:71:ce:13:29:72:76:eb:22:0b:e3:f8:f7:
f9:38:c3:e4:23:40:59:1e:f3:20:9b:1e:3e:f3:61:45:9f:60:
ac:01:51:1f:ac:e3:df:10:54:e7:62:03:22:a2:59:6a:20:13:
44:4e:e0:9b:1b:a3:66:63:f2:ce:39:87:c9:d3:58:70:6c:af:
17:f7:89:ea:57:e3:63:1f:51:db:95:2f:46:3b:0b:14:7b:0e:
f3:14:59:c6:5c:24:fd:21:af:2a:d3:b5:5b:66:a1:5e:e0:97:
5b:fb:b4:f9:26:48:08:6f:0a:60:df:a3:7b:20:9a:85:00:93:
a4:fd:c4:d6:56:c8:9d:ea:a7:34:da:a3:3a:30:1d:08:7f:56:
85:e5:8a:03:5f:50:df:69:59:85:cd:be:b4:71:cb:c1:5f:33:
72:25:52:59:d9:ed:94:65:e3:93:e5:21:3e:20:61:62:3c:7b:
41:f6:1e:7f:70:0e:08:d5:33:47:02:03:69:58:05:4f:43:8e:
eb:8f:92:f2:23:54:1e:54:e4:cc:af:cf:6f:ce:37:a2:4c:16:
9e:24:ac:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:10 2025 by rpki-client