Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/280EA092CC9311EE90300CC1775412E6.roa
File: 280EA092CC9311EE90300CC1775412E6.roa (raw, json)
Hash identifier: qTwFU658f2jDkMyy7tTwVNWY3D3J8OVMCos6ts7R0Z4=
Subject key identifier: DD:69:C4:88:2E:43:9F:D9:DD:98:EA:27:BA:E9:9C:58:AB:EC:38:E2
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 08C6
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/280EA092CC9311EE90300CC1775412E6.roa
Signing time: Fri 16 Feb 2024 06:18:10 +0000
ROA not before: Fri 16 Feb 2024 06:18:05 +0000
ROA not after: Tue 14 Feb 2034 06:18:05 +0000
asID: 60707
IP address blocks: 192.142.24.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:39:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2246 (0x8c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Feb 16 06:18:05 2024 GMT
Not After : Feb 14 06:18:05 2034 GMT
Subject: CN=65cefe22-2010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:96:b4:19:66:2a:ff:5a:47:69:a3:4a:7c:04:
b1:62:16:1c:0c:77:46:69:0b:1a:a8:4c:9f:e1:13:
8d:e3:23:3c:4d:13:ab:51:22:f9:f8:a2:5c:4e:78:
cf:f6:9e:72:6f:71:8c:61:af:0f:ec:cd:95:23:96:
62:76:87:3c:75:e2:ca:c8:59:0b:2e:8a:46:dd:06:
53:cd:e9:6b:0a:87:94:1d:34:0a:c1:cb:b3:33:94:
68:84:c7:8f:d9:31:89:87:e6:91:df:af:dd:a4:ba:
f5:e1:50:f9:d3:7a:18:5c:9b:4c:15:89:0f:45:25:
35:fa:43:ba:cd:b8:e2:5e:4c:29:bb:b0:7a:6f:d3:
54:21:96:83:12:38:b9:8a:2f:a7:f9:d8:93:ee:b6:
4a:42:8f:ed:09:d8:fb:d3:ee:18:30:95:72:9e:f3:
01:32:87:cd:9a:f6:a2:4f:47:f5:cc:df:42:5e:b0:
c0:6b:8b:8f:97:a6:d9:ac:ad:97:01:e6:52:c0:93:
54:05:f0:ad:79:8b:ae:63:cb:16:e0:17:2f:26:6b:
37:a7:a8:4f:25:13:4d:b5:e8:17:e9:05:65:d2:43:
33:34:a1:97:07:81:b1:08:f9:ae:74:b2:6e:36:75:
7b:17:5e:34:6f:e0:46:7c:a6:80:fc:70:69:fe:1f:
2b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:69:C4:88:2E:43:9F:D9:DD:98:EA:27:BA:E9:9C:58:AB:EC:38:E2
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/280EA092CC9311EE90300CC1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:f2:84:df:36:5b:ac:fb:58:b8:66:06:77:82:8d:1a:58:ab:
ed:aa:04:55:20:b4:20:6a:ba:ee:e9:c6:c0:52:89:3a:a4:98:
1c:c4:5d:aa:52:e3:87:f4:1d:1b:a2:ca:da:27:f5:36:eb:6d:
a9:52:05:ae:7d:0c:6f:92:21:a3:bc:ee:e8:18:85:12:51:02:
c4:a8:58:c6:c1:71:54:a7:27:65:a7:f1:7a:c5:a8:b0:a0:bb:
6b:66:a9:1b:60:7b:fd:f7:bc:f9:4f:b6:02:13:81:8f:60:0b:
52:ee:47:5e:e0:1d:b8:fd:cd:7b:9a:0e:d2:6e:c8:e4:65:66:
d6:9c:54:8b:8e:1a:d2:e9:9a:81:d9:52:76:f6:b1:ba:a3:34:
76:d8:f5:db:b7:e3:01:65:b2:0b:bc:3a:83:70:a2:fb:d1:ae:
03:d0:d4:05:b1:3e:a7:24:a8:30:c4:a0:43:6a:17:3c:c5:ab:
8d:92:9a:92:eb:12:65:aa:9b:33:cd:bd:21:30:8f:ef:bb:8f:
03:b1:d1:dc:fc:7f:f2:c7:eb:d1:08:54:78:c0:ef:d3:e5:76:
42:75:42:a5:44:92:c0:ca:d2:19:f8:d9:30:d1:36:c9:e8:97:
f0:a4:e4:6a:ca:0c:d8:43:58:7c:e3:1f:42:c3:bb:c7:dc:e5:
7f:bd:ec:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 13:22:29 2024 by rpki-client on console-ams.rpki-client.org