Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2E5F0E62506711EEAF585B1D4AD9E6FC.roa
File: 2E5F0E62506711EEAF585B1D4AD9E6FC.roa (raw, json)
Hash identifier: SSa1Q5q0hJZ4IL9V6rGE7AC8RR/smZfx7FQonRiYTNA=
Subject key identifier: 28:DB:B3:D5:DA:1C:F8:2F:41:C5:D4:B0:F2:0A:4A:3B:E7:57:F6:B5
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 079C
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2E5F0E62506711EEAF585B1D4AD9E6FC.roa
Signing time: Mon 11 Sep 2023 05:50:59 +0000
ROA not before: Mon 11 Sep 2023 05:50:55 +0000
ROA not after: Wed 14 Sep 2033 05:50:55 +0000
asID: 197555
IP address blocks: 192.142.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1948 (0x79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 11 05:50:55 2023 GMT
Not After : Sep 14 05:50:55 2033 GMT
Subject: CN=64feaac2-8510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:11:de:b0:a5:b7:5d:25:f3:88:95:92:22:
ba:07:6c:12:08:4e:1f:f4:33:ef:e8:74:46:66:3e:
df:84:21:fe:d7:51:c7:c7:5f:97:bf:28:cf:f5:bf:
9b:3e:68:e8:32:74:aa:24:ce:95:6b:d9:28:ec:f5:
17:19:99:29:dd:f1:b6:1e:49:58:fa:a8:38:16:eb:
df:fe:a7:72:9e:d4:25:8e:0c:6a:b6:9b:e0:1b:68:
d4:e7:1b:e3:0e:fa:f9:c1:c0:04:18:59:47:d6:a7:
d3:5b:eb:27:1e:5a:a4:17:c5:97:ea:02:3c:f1:ea:
b1:83:14:a8:3c:a1:04:20:d7:bb:78:64:fe:1a:8c:
f5:f0:0d:a4:68:f8:2e:59:d0:33:49:7d:c7:2b:2a:
b4:65:01:5e:c6:77:1b:77:e1:61:13:09:fd:88:8c:
0a:71:9a:40:5f:2c:11:39:d3:9d:d6:75:58:c6:f6:
79:1c:6a:c4:a2:02:66:bc:dc:6f:1f:0f:94:6c:91:
62:9d:e9:1f:4b:84:12:44:de:4f:4c:4f:ba:94:3f:
47:17:cf:db:75:d2:23:5f:7d:db:55:71:5a:13:7b:
86:4c:8c:a4:94:6c:f1:a2:63:d6:a3:bc:08:b1:cc:
f2:99:b5:fd:23:f2:d1:20:3b:8a:b3:22:d3:4f:42:
a7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DB:B3:D5:DA:1C:F8:2F:41:C5:D4:B0:F2:0A:4A:3B:E7:57:F6:B5
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2E5F0E62506711EEAF585B1D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.85.0/24
Signature Algorithm: sha256WithRSAEncryption
29:79:97:3a:05:be:82:cf:d8:94:9f:ad:a9:9e:57:9a:b3:8f:
ad:44:19:25:40:f8:93:5a:fc:73:52:97:d0:f4:98:73:bb:f3:
6d:78:a6:61:c5:8a:4d:df:ee:b9:1e:0d:2b:35:20:34:c7:65:
80:69:07:fd:b1:c4:23:d0:88:f1:5c:67:a3:d9:b4:eb:cf:a2:
54:bc:8b:fe:40:b2:56:42:34:4b:11:2a:1b:33:ea:5b:96:84:
52:c9:b4:b9:25:60:75:fa:22:c3:1e:02:9b:a5:be:08:58:a6:
67:90:1a:19:62:82:25:93:2f:17:2a:89:15:9c:39:d1:d9:11:
dd:28:d5:24:5f:3e:2a:ce:e3:3b:42:a3:f3:08:95:7d:d9:a7:
4b:bd:50:65:2d:01:e5:cb:51:c9:0c:6d:62:58:62:83:7d:d0:
e0:2d:18:28:ed:c9:d9:7a:64:4e:56:14:43:95:08:b5:ca:74:
b4:70:ef:f0:a6:c5:d5:12:06:58:5d:2a:51:3c:56:42:d7:28:
a5:a9:89:24:86:b4:6c:ff:68:2e:a8:57:55:b1:38:60:8b:61:
e2:03:56:03:03:5c:00:50:d4:75:76:80:77:ed:2b:da:4c:84:
b5:b8:23:06:8a:1a:e5:42:67:4c:ed:ef:ae:f4:ae:80:67:8d:
f9:34:b4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 12:52:16 2024 by rpki-client on console-fra.rpki-client.org