Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2D44080C7CAD11EFA408E658762E951A.roa
File: 2D44080C7CAD11EFA408E658762E951A.roa (raw, json)
Hash identifier: IuIHyOinSWqtvXPCz9T8dnQqU5VE+xTwLC0bjqj36V8=
Subject key identifier: B8:2F:10:4A:04:DD:73:AC:0D:07:DA:E3:4D:7C:C3:1A:51:43:F5:2B
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0A38
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2D44080C7CAD11EFA408E658762E951A.roa
Signing time: Fri 27 Sep 2024 08:47:50 +0000
ROA not before: Fri 27 Sep 2024 08:47:47 +0000
ROA not after: Wed 20 Sep 2034 08:47:47 +0000
asID: 43260
IP address blocks: 192.142.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:05:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2616 (0xa38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 27 08:47:47 2024 GMT
Not After : Sep 20 08:47:47 2034 GMT
Subject: CN=66f67136-d0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:73:66:3c:3d:ac:ba:eb:11:ed:8a:6f:d0:
b9:e5:79:ee:f7:a2:08:f5:e7:12:c4:55:71:5f:cf:
29:58:a8:70:99:32:9c:61:5a:ce:cd:fe:fe:e8:6b:
19:8d:70:1c:d4:17:17:ee:36:82:d8:49:7e:ff:6d:
48:31:91:b3:ac:2b:82:67:b4:3c:87:fe:2a:25:89:
e9:af:49:06:0e:27:d0:3a:51:2d:4d:f9:94:5a:99:
39:9e:19:58:16:27:1f:67:04:51:6c:75:6b:56:2f:
29:a1:27:e5:e5:2a:95:ac:47:95:a9:09:63:dc:e0:
87:2c:84:30:ef:58:eb:38:87:89:db:c1:3e:78:f3:
80:7e:e9:45:46:40:d3:e5:43:28:e7:d0:86:49:7c:
63:e6:10:d7:11:f7:54:b0:fd:a6:1d:52:d4:db:f4:
a8:9d:82:06:44:31:30:9b:52:c3:21:eb:b8:72:49:
2f:6c:7f:d5:e1:2d:45:e8:6e:f7:f5:a4:96:c9:8a:
97:ae:d3:35:3e:1b:c0:53:ab:24:3c:5e:18:65:62:
91:45:68:0c:0d:b0:2b:1e:3a:8d:c7:ff:41:56:99:
b4:62:7e:61:89:9f:94:bc:a1:1c:98:c7:17:c5:f4:
5b:49:e9:d3:de:37:d3:d2:87:2b:ba:ee:d4:2b:b0:
e4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2F:10:4A:04:DD:73:AC:0D:07:DA:E3:4D:7C:C3:1A:51:43:F5:2B
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2D44080C7CAD11EFA408E658762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.134.0/24
Signature Algorithm: sha256WithRSAEncryption
96:63:54:ac:52:3b:82:a7:32:34:29:f9:e8:21:08:49:c0:46:
fd:d7:b0:26:f3:d1:03:9a:b6:f9:e7:b2:2e:18:73:5e:26:96:
38:2b:d6:76:d0:18:c7:04:a1:7d:d8:fd:48:70:e7:e7:ce:03:
32:d3:7d:3d:16:aa:ad:88:d7:35:16:8b:31:6e:4f:09:1a:74:
90:18:bf:8f:99:50:f9:e5:3d:91:48:94:ca:72:7e:38:ab:5a:
c4:be:12:2c:c9:e9:77:93:8d:db:9b:69:a0:78:af:9b:38:d7:
36:e1:99:fc:87:41:ed:46:59:d3:45:97:d1:7c:70:15:f9:9c:
02:ae:f2:45:f8:1a:27:81:11:81:46:74:c2:37:cb:4e:f8:f3:
82:73:5e:af:e3:f7:23:f9:e4:54:ca:c4:ec:70:df:a3:ed:a4:
35:e0:31:0a:c4:3e:2e:37:03:8c:3e:54:d6:88:41:27:b1:03:
cc:51:38:3f:eb:b2:52:e4:3e:29:3b:95:d6:ee:0b:e3:75:f0:
a9:fb:66:39:ea:86:ce:fa:09:43:a8:0a:c7:9d:84:76:b4:89:
9e:bb:b8:d6:32:89:c5:f5:14:51:d9:4d:df:9d:61:77:ae:30:
3c:0b:a7:a3:86:a5:06:fd:72:19:c5:ae:e4:6b:06:4c:03:ac:
fe:59:16:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 13:22:29 2024 by rpki-client on console-ams.rpki-client.org