Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2671612671D311EFA70EAF9D762E951A.roa
File: 2671612671D311EFA70EAF9D762E951A.roa (raw, json)
Hash identifier: 9pn76yLvhUkVl3vF6HB+q3uyL59kRTOEgcueYBF/hmc=
Subject key identifier: CA:21:D6:96:FB:83:94:EB:8B:0C:E9:DC:11:2D:2F:03:52:EA:53:CE
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0A21
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2671612671D311EFA70EAF9D762E951A.roa
Signing time: Fri 13 Sep 2024 13:21:57 +0000
ROA not before: Fri 13 Sep 2024 13:21:53 +0000
ROA not after: Wed 13 Sep 2034 13:21:53 +0000
asID: 25198
IP address blocks: 192.142.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2593 (0xa21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 13 13:21:53 2024 GMT
Not After : Sep 13 13:21:53 2034 GMT
Subject: CN=66e43c75-228a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:93:17:70:46:9b:00:48:1a:33:b6:d8:e5:67:
58:33:7e:2b:5a:9b:9c:0a:9a:25:b3:94:53:20:98:
04:25:f6:1b:cc:6d:a2:40:07:88:60:ba:04:a9:8d:
77:27:0b:b0:c7:74:32:45:09:a9:5b:a7:dd:5d:a9:
94:81:55:98:3e:b3:f8:27:56:00:59:01:d7:0f:d3:
84:dd:b8:a6:48:0d:1e:e3:5f:4c:f1:79:9a:c3:94:
68:c9:8c:c7:1c:3d:7d:97:ad:f0:ee:70:5b:64:6d:
0c:16:e3:76:0c:2a:55:99:5f:01:26:72:97:30:cd:
6a:be:14:8a:49:69:60:ab:ba:3c:79:2c:32:ed:a0:
da:6c:3b:d8:31:28:d5:96:12:24:3f:e5:a6:95:e1:
05:08:f8:51:10:23:b1:67:be:88:4d:b7:10:85:68:
d2:00:2e:08:ed:1f:50:5e:72:19:df:f6:56:fa:be:
60:8e:7f:5d:91:03:0d:e4:6d:bc:38:6f:7b:4a:c6:
0f:46:b5:f3:55:84:2d:ea:1f:38:91:b9:de:ed:57:
69:8d:af:1f:dc:95:7e:0c:ad:ab:b7:42:8a:6f:65:
20:94:c7:5a:04:b1:3d:47:2f:a8:cb:64:60:35:e6:
23:2a:ab:60:ac:ab:b9:03:41:36:dc:d2:61:ec:53:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:21:D6:96:FB:83:94:EB:8B:0C:E9:DC:11:2D:2F:03:52:EA:53:CE
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2671612671D311EFA70EAF9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.6.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:22:5d:22:03:97:f3:7e:17:6d:f2:a2:03:73:79:e2:5c:cd:
70:ad:8f:c2:a2:29:62:5d:6b:b7:df:02:58:c9:59:f2:8f:3c:
07:3c:66:8c:20:6c:0f:5c:0f:57:0a:81:a5:92:4f:07:10:ac:
04:fc:df:e2:a9:d2:3e:71:c8:c2:19:71:84:0c:d8:e9:19:bd:
a2:41:2f:e9:80:78:6f:8b:f8:aa:36:a3:8a:72:1c:c2:4e:90:
7f:c2:9a:b1:5b:39:e4:f7:ad:f3:41:9b:e7:1e:3e:74:5f:2b:
c5:8c:4f:4f:a2:e0:2c:71:40:68:2c:f9:26:ae:da:03:9c:12:
b3:1e:c8:83:19:52:99:38:86:cc:3d:01:cf:25:27:78:53:8d:
2c:10:44:60:d3:d3:15:5f:3b:c5:95:af:07:90:8e:1e:1d:0f:
24:c2:ab:8b:5b:22:3c:20:ae:d4:2d:9f:07:59:0a:c9:74:f4:
a8:f0:38:8f:e0:2c:99:13:7d:79:b6:f3:5f:7c:9f:70:ed:63:
a6:e4:1b:fe:2d:1f:b8:ac:0a:36:7f:db:e7:4f:d3:fc:c3:48:
9d:85:fa:51:e0:5c:c7:87:28:14:18:4c:d6:7c:59:76:9f:8f:
6a:c2:2d:81:d6:74:94:5c:f8:3e:f5:2f:2d:83:cc:07:13:1b:
cc:a5:66:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 12:52:16 2024 by rpki-client on console-fra.rpki-client.org