Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/32C2E3B09C5B11EBB3437C1BF8AEA228.roa
File: 32C2E3B09C5B11EBB3437C1BF8AEA228.roa (raw, json)
Hash identifier: vJ24m+VEfWuCkfR3p1xKSZhAaXzTl6HNNXzAJJGESTw=
Subject key identifier: B2:87:42:C6:90:76:59:3B:D5:00:A1:A0:CE:3C:6B:8A:E0:F9:13:28
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 02C5
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/32C2E3B09C5B11EBB3437C1BF8AEA228.roa
Signing time: Tue 13 Apr 2021 13:21:47 +0000
ROA not before: Tue 13 Apr 2021 13:21:42 +0000
ROA not after: Wed 09 Apr 2025 13:21:42 +0000
asID: 46562
IP address blocks: 192.142.130.0/24 maxlen: 24
192.142.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709 (0x2c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Apr 13 13:21:42 2021 GMT
Not After : Apr 9 13:21:42 2025 GMT
Subject: CN=60759aeb-afc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d7:be:be:0d:56:af:5f:0a:f7:2c:3d:50:49:
e8:78:4e:b1:e6:ce:90:dd:06:4e:a2:89:a4:75:c3:
49:94:1d:11:c7:1c:61:15:04:14:22:95:5e:a8:99:
b8:11:ca:ef:78:71:08:9f:bd:71:a5:b7:46:d0:c4:
60:93:44:9f:b0:57:91:f0:43:13:9f:f1:fe:cb:9e:
9c:5b:2a:5c:39:72:3b:90:cc:66:18:70:cb:ee:e0:
c7:48:03:7b:59:20:fa:7a:26:63:5d:47:50:b0:36:
0a:2d:e1:f8:a2:81:4e:d8:46:7a:64:d6:34:b1:c7:
02:57:f7:e1:f4:98:8d:38:46:97:9a:f2:20:06:5c:
1a:ca:cf:d4:1f:0d:26:62:30:57:27:b5:a8:a5:d9:
d3:fd:92:73:4d:20:af:dc:78:51:39:b3:c0:07:32:
4a:2a:4e:74:ab:8d:24:12:b4:8b:ed:ce:27:bc:f4:
88:65:4d:91:0f:9b:20:90:db:7f:66:62:5b:07:79:
d2:1c:2b:15:1c:7e:07:3e:81:b2:0e:b8:07:d6:2a:
c4:29:bc:22:00:a9:99:6c:3b:9f:7e:30:8d:d0:33:
f5:e8:ea:6c:9a:18:0e:63:e0:8c:22:4d:eb:4a:10:
73:81:51:7c:6c:83:66:e4:13:c8:02:61:23:77:07:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:87:42:C6:90:76:59:3B:D5:00:A1:A0:CE:3C:6B:8A:E0:F9:13:28
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/32C2E3B09C5B11EBB3437C1BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.130.0/23
Signature Algorithm: sha256WithRSAEncryption
10:cd:82:7a:28:ce:b8:4a:dc:46:f2:e5:31:81:51:5b:db:b7:
2e:3b:a9:2b:79:84:a5:ed:e0:a4:f0:df:ee:57:2f:d0:1a:2c:
68:c7:34:34:d9:c0:5a:cb:25:16:3a:7c:9f:e9:da:99:87:1a:
b7:99:a0:86:6b:68:77:b7:0e:a6:b8:d3:1c:27:5c:ee:4f:cf:
c0:97:16:f3:d3:25:f1:02:96:0b:fc:fc:05:73:62:dc:c5:d3:
20:c5:5d:e1:7e:0a:35:a9:90:ff:dd:1f:4b:0b:ca:02:a8:76:
81:46:0f:10:d3:ed:2b:c8:2f:0a:25:2e:1b:a5:75:42:73:5f:
94:54:2d:b8:54:85:3a:f0:ab:9f:f1:74:e3:6b:80:ac:2d:74:
d3:9a:ce:12:2e:9b:0c:eb:88:7a:b8:6b:50:8b:65:b2:43:97:
0a:d1:7a:21:7e:5d:f3:e4:22:4e:1d:e1:c9:3a:8b:d8:1a:e4:
2a:f7:90:6a:da:79:cb:74:d1:bb:82:07:31:cb:2f:3a:45:fd:
15:c6:95:cd:1f:a6:10:33:83:18:af:f0:83:21:36:3f:ed:c1:
19:b2:34:d3:0f:39:22:28:44:2b:a0:db:fe:f1:5e:bb:d1:df:
95:9a:c5:b6:ff:c0:79:5f:95:8f:4b:c4:a6:9f:40:14:03:05:
de:35:66:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:00 2023 by rpki-client on console-fra.rpki-client.org