Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/241F95A4590C11EEA8C015304AD9E6FC.roa
File: 241F95A4590C11EEA8C015304AD9E6FC.roa (raw, json)
Hash identifier: d2TPXOxUyQGb2HIvn3dYwiZJ6vga9XsWiZWiNOGR/Io=
Subject key identifier: 6A:3F:3B:52:93:2B:2F:6A:6C:99:5D:A4:22:F5:AE:57:44:59:59:4A
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 07CC
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/241F95A4590C11EEA8C015304AD9E6FC.roa
Signing time: Fri 22 Sep 2023 05:51:58 +0000
ROA not before: Fri 22 Sep 2023 05:51:53 +0000
ROA not after: Thu 22 Sep 2033 05:51:53 +0000
asID: 212219
IP address blocks: 192.142.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:46:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1996 (0x7cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 22 05:51:53 2023 GMT
Not After : Sep 22 05:51:53 2033 GMT
Subject: CN=650d2b7e-d73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:9d:16:92:07:2e:19:62:2d:09:6f:5f:de:
3d:16:b1:01:96:c4:ca:59:c0:e9:14:66:94:03:1b:
9b:1c:98:82:35:97:58:29:50:9e:16:6c:62:42:46:
65:d9:09:dd:7b:93:9f:b4:36:75:4c:04:1c:b8:7e:
5b:49:94:ae:90:da:55:6d:f5:2d:00:a9:f6:9f:70:
b1:cf:9d:7f:01:96:0e:8f:d9:41:9e:f4:e8:08:9f:
e1:a4:e8:cc:48:91:c8:b9:4d:45:f5:d4:a8:0c:85:
fb:77:58:43:f7:cc:83:c0:71:a3:04:12:10:11:44:
5f:bc:38:5e:08:ce:7d:1b:ef:37:1c:2e:7a:b6:bb:
9f:8c:69:6f:8b:d3:a9:86:c9:64:07:d6:4e:00:bf:
95:6f:84:66:d7:94:31:d0:4b:6f:61:58:46:ee:c7:
3b:25:06:20:9d:23:23:45:fb:36:cc:71:a4:0d:98:
73:fd:ea:be:19:7e:a9:c5:ad:3f:36:b3:99:39:89:
ba:a3:61:07:ee:65:9d:27:82:97:29:82:4a:22:c5:
09:62:d2:37:99:dd:fe:bd:15:ab:8a:fb:52:da:38:
5b:d1:c1:13:e4:6d:4e:d0:59:c9:2e:f4:6b:29:d5:
34:6f:9d:ec:92:45:1c:f2:3f:25:03:d3:8a:53:5f:
1c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3F:3B:52:93:2B:2F:6A:6C:99:5D:A4:22:F5:AE:57:44:59:59:4A
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/241F95A4590C11EEA8C015304AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.94.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:eb:db:4d:ca:db:c1:7a:64:0f:29:b6:bf:bd:bc:07:e5:19:
bf:b9:8f:fc:6f:90:d8:d2:ef:37:a8:b8:7a:42:e8:a3:d5:86:
6f:f9:81:7c:92:e0:4f:14:8d:94:9d:93:25:a2:0e:45:ab:36:
3b:a4:e5:dc:28:f1:af:c7:24:e8:2d:ca:82:9f:95:52:4e:67:
61:d0:67:48:a9:86:67:66:43:a1:3f:b2:9f:d0:19:79:f6:6b:
15:f8:95:70:33:fe:66:75:42:21:02:ea:7c:02:e8:0c:4b:78:
61:f1:cf:eb:62:68:4d:17:26:65:02:37:a1:74:fd:6c:68:2e:
db:1c:4f:3c:93:7d:e0:9d:e5:08:a9:8b:ba:9d:7d:4c:c5:24:
00:01:bf:c0:6a:cc:68:cb:08:f5:83:18:c2:24:ab:69:76:12:
15:6e:8f:db:ff:20:1c:25:05:65:19:03:71:17:e3:20:10:44:
25:f1:bc:9b:73:c0:0d:e5:6e:2f:d2:9b:93:b4:ed:e1:38:ab:
e3:af:e6:0e:91:0a:c3:bd:53:43:ea:e3:23:9d:51:9f:c0:20:
64:9f:f4:64:4b:59:35:ee:7d:92:14:29:d2:e2:7f:84:6a:ad:
72:eb:5e:61:41:c8:0b:74:3d:c8:f8:24:68:de:62:f7:60:68:
8c:1a:91:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 13:22:29 2024 by rpki-client on console-ams.rpki-client.org