Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2FCC7898A57511EF9C1B8683762E951A.roa
File: 2FCC7898A57511EF9C1B8683762E951A.roa (raw, json)
Hash identifier: C+SOTQWj9+CgpgFqP/u1viDH7Q8AfAJ1g2wLV1o+mvk=
Subject key identifier: DF:47:A7:38:BC:71:2B:E8:6F:70:7D:C4:2D:F4:96:30:15:6A:B5:EC
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0AEA
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2FCC7898A57511EF9C1B8683762E951A.roa
Signing time: Mon 18 Nov 2024 06:20:20 +0000
ROA not before: Mon 18 Nov 2024 06:20:16 +0000
ROA not after: Tue 07 Nov 2034 06:20:16 +0000
asID: 30431
IP address blocks: 192.142.8.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 11:39:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2794 (0xaea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 18 06:20:16 2024 GMT
Not After : Nov 7 06:20:16 2034 GMT
Subject: CN=673adca4-9b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:c2:9d:3a:e2:19:50:10:e0:62:06:68:da:
3d:0d:f8:36:95:c2:34:c6:3a:b7:c5:e8:3c:c5:6e:
c2:ce:f1:45:9a:63:cf:f9:d5:88:ae:2d:b2:19:d7:
53:74:ce:9d:2d:89:99:6c:5f:82:97:f0:19:70:07:
ea:43:f4:b3:e7:91:58:70:e8:a5:f5:86:7c:03:63:
02:75:19:9f:17:6c:2a:cd:0c:eb:ae:f3:90:f2:40:
ad:6c:ba:b0:31:bf:9b:fd:d3:c1:ff:93:fc:87:e5:
d8:57:d3:81:66:9c:7f:50:03:59:78:7d:4b:b7:de:
c6:4b:a8:45:63:24:f5:50:44:75:8b:13:74:a5:1e:
c2:eb:db:49:23:8b:6c:44:4f:5e:07:f6:f6:29:cd:
5e:63:61:21:f6:44:9b:73:e0:59:f3:d7:1c:46:51:
b1:04:fd:bf:86:4b:c2:c0:df:d9:53:4f:e7:10:64:
4b:7e:c7:47:b2:10:8e:f3:7d:df:ba:5d:70:77:56:
89:b7:e2:b6:b5:58:6d:58:62:a0:02:ed:c6:8c:db:
33:c2:24:d7:17:2a:bc:05:fc:e0:d0:f0:fa:3a:2a:
58:12:6a:54:93:dc:ea:5c:57:c0:72:72:f0:6d:d3:
c7:b8:9f:c5:68:7b:ca:5e:34:19:90:58:e2:9f:f6:
ed:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:47:A7:38:BC:71:2B:E8:6F:70:7D:C4:2D:F4:96:30:15:6A:B5:EC
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2FCC7898A57511EF9C1B8683762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.8.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:ab:c8:6d:f4:bd:5b:bf:b9:c1:43:f8:64:87:c6:06:09:91:
63:3f:d1:2e:9d:cd:d1:fc:07:d2:a2:4c:6e:08:90:d4:cf:5d:
25:4a:86:6f:55:64:c1:ef:1c:34:78:69:9e:19:39:03:75:d5:
c0:72:8c:02:61:24:05:0d:da:e9:7a:ce:b0:eb:96:1e:81:aa:
e9:95:20:dc:bc:e8:d6:67:ec:5c:37:ce:ff:63:a4:e4:f8:19:
3c:e6:54:ae:2d:1c:fa:56:7f:0d:d1:50:c9:d3:b0:d6:77:2b:
84:c0:24:33:8f:50:38:98:39:82:00:b9:a5:7b:c4:06:4a:ed:
85:1e:de:bb:94:24:9c:fa:ba:61:40:eb:54:e1:9d:e8:d8:ee:
38:d2:2a:0b:37:c4:f4:a2:49:9b:97:49:6d:6a:6b:ea:38:35:
c8:51:65:d9:a4:16:33:5e:83:40:e5:ac:1f:ec:4c:f1:d9:1e:
5c:c3:98:91:a3:cd:6a:2e:9d:26:5c:93:71:cf:a9:b0:50:04:
2b:5e:b1:0a:c0:a7:b6:fa:d7:74:d6:04:dc:bc:b5:44:ce:18:
9c:a2:57:d4:e1:fe:04:4a:9f:a1:bb:df:2d:94:b8:e9:b9:82:
67:8b:05:69:ff:68:cb:e7:4c:2b:31:d9:f8:56:1c:47:1b:c4:
dd:7d:38:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 16:23:40 2024 by rpki-client on console-ams.rpki-client.org