Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2AED0E4C501511EFAECB1B75762E951A.roa
File: 2AED0E4C501511EFAECB1B75762E951A.roa (raw, json)
Hash identifier: X/dSS1Eg7wq1HT7dlTuCCdpO1YB3O4s9YpdSG9bofgQ=
Subject key identifier: 8C:2B:6E:39:6D:15:C1:0E:34:B6:68:81:5B:EB:0E:EA:63:E6:EB:1B
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 09D6
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2AED0E4C501511EFAECB1B75762E951A.roa
Signing time: Thu 01 Aug 2024 14:48:52 +0000
ROA not before: Thu 01 Aug 2024 14:48:48 +0000
ROA not after: Wed 16 Aug 2034 14:48:48 +0000
asID: 53107
IP address blocks: 192.142.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2518 (0x9d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 1 14:48:48 2024 GMT
Not After : Aug 16 14:48:48 2034 GMT
Subject: CN=66aba054-5ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:63:86:e3:91:5f:4c:bb:d5:10:65:7e:d1:
55:db:ff:96:43:83:18:6b:de:c2:ec:01:f6:f5:52:
87:f9:0a:39:cf:75:36:e7:85:24:cb:71:a0:a8:10:
55:86:a1:a6:94:ad:e4:01:0a:d1:88:a9:26:7f:9d:
ab:c9:6a:25:c5:0b:f4:06:b8:ad:ba:57:4b:e1:10:
cf:25:e5:f2:fc:86:cb:8e:a2:98:36:68:5d:13:f9:
ea:87:ed:6f:46:2c:51:d8:61:3d:60:a5:14:e2:7d:
9c:33:4e:3a:7e:ed:31:65:70:04:c0:c8:90:06:d3:
05:2d:c8:a4:fd:74:d9:5f:04:66:a8:a1:ac:16:2d:
47:1a:12:b7:8d:db:1a:2d:44:fb:0f:38:3e:b5:23:
a5:c3:b6:25:1f:0d:7e:94:64:1a:54:44:05:88:7e:
b9:1a:78:33:22:51:c0:c0:0c:e4:4d:eb:e1:95:06:
f6:53:33:42:14:3c:1e:ca:1c:3b:9b:07:24:52:5a:
c9:23:b0:79:03:4b:3f:2d:14:16:85:6d:16:b5:70:
8b:17:02:45:2f:c0:6b:a8:7e:f8:21:20:a7:bf:12:
82:14:43:9e:22:87:52:f7:33:f3:e3:28:db:b4:95:
0b:57:6f:49:af:1b:97:d9:2c:ff:81:bb:56:43:53:
a1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2B:6E:39:6D:15:C1:0E:34:B6:68:81:5B:EB:0E:EA:63:E6:EB:1B
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2AED0E4C501511EFAECB1B75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.8.0/22
Signature Algorithm: sha256WithRSAEncryption
59:15:cc:b1:a8:b1:72:29:89:ec:de:13:02:11:67:26:df:ed:
cf:5b:cd:06:05:73:a3:4e:54:0a:fb:8a:56:4e:68:13:7b:8b:
2f:23:3e:11:25:5f:58:48:50:1c:3a:86:e0:d4:a4:92:a2:34:
51:b6:53:47:9f:e7:ef:d7:46:ae:f9:ec:90:c1:94:19:b3:df:
99:65:07:12:ee:37:71:e4:32:b5:83:98:d7:91:03:33:e2:5d:
22:7d:68:00:95:45:a2:ae:5b:c8:d2:06:fe:0d:29:11:fd:c2:
fc:13:9f:67:bb:12:89:c0:11:20:bd:19:9f:f2:05:e4:d4:0b:
20:67:15:af:2f:3f:e0:7b:a9:fb:64:35:c6:e9:02:67:a5:c5:
91:56:17:1c:c5:d9:04:fc:77:16:20:94:6c:a7:51:c3:c2:c1:
02:8b:ef:c7:1a:27:c1:cf:7b:e6:cb:cf:3a:05:46:06:fa:c8:
b7:73:14:0b:2a:d7:91:3e:0b:d6:fa:94:e2:5b:95:23:61:80:
f0:89:05:db:6c:f2:71:41:e0:c3:f6:7e:59:a3:51:02:5a:04:
9d:8c:35:f9:51:5c:79:ff:dc:90:8a:e3:81:39:94:04:17:50:
19:a6:f8:93:58:c1:8e:fd:21:53:32:ea:5d:e9:c0:94:62:2f:
c4:b1:9d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 13:22:29 2024 by rpki-client on console-ams.rpki-client.org