Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/3382B04A7F4D11EFAD4EA751762E951A.roa
File: 3382B04A7F4D11EFAD4EA751762E951A.roa (raw, json)
Hash identifier: Ie1S7edjuoJfHiLekzYmZi5wDAbmMI6wUdCnBVQny/k=
Subject key identifier: 5A:8C:63:D9:38:F4:56:61:82:CC:DB:AF:B2:76:3C:8A:AC:0D:E2:C2
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0A3D
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/3382B04A7F4D11EFAD4EA751762E951A.roa
Signing time: Mon 30 Sep 2024 16:58:23 +0000
ROA not before: Mon 30 Sep 2024 16:58:18 +0000
ROA not after: Wed 20 Sep 2034 16:58:18 +0000
asID: 210574
IP address blocks: 192.142.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2621 (0xa3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 30 16:58:18 2024 GMT
Not After : Sep 20 16:58:18 2034 GMT
Subject: CN=66fad8ae-dcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:59:d8:f6:27:12:03:08:2a:26:bd:5e:fa:
5f:ec:39:1a:f4:c5:1d:77:17:2d:3d:b4:ca:c0:01:
b3:2f:b6:99:3e:07:79:e4:fb:b1:88:69:32:95:43:
71:9c:39:50:b5:b8:e5:21:2f:6b:24:27:08:88:6c:
0f:3e:b6:f2:03:25:11:02:2d:a3:eb:1e:8c:52:b7:
37:69:96:64:0e:a2:1b:d0:f7:dd:e5:7b:9c:11:c9:
ce:98:a4:07:ac:3c:a8:8e:7e:7e:14:08:f4:6b:66:
6b:b4:fd:e8:75:85:56:d6:22:99:e0:cc:a4:ab:c3:
72:2b:63:b3:39:98:c7:97:a5:86:d6:9f:ac:2a:ef:
91:cb:1f:cb:96:a4:f1:33:91:42:72:a9:cd:e7:01:
4f:19:94:9b:36:e4:67:a7:7c:66:e2:07:e8:92:ec:
17:f1:6c:14:f7:a1:d2:8a:61:6a:be:64:03:ce:ef:
2e:4d:9e:89:27:05:52:74:ee:68:66:0f:71:8f:30:
f4:c7:e6:2a:02:76:cc:a4:8b:5d:3b:95:95:32:33:
30:05:ed:64:3d:59:74:19:64:18:ad:22:47:2a:66:
de:a6:aa:96:d6:4c:8e:b2:16:a5:da:8a:71:9e:12:
89:df:01:f7:58:3b:0a:7c:20:be:8c:ac:2e:6b:fe:
b7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8C:63:D9:38:F4:56:61:82:CC:DB:AF:B2:76:3C:8A:AC:0D:E2:C2
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/3382B04A7F4D11EFAD4EA751762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.169.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:03:f5:19:58:2a:3c:c0:12:6f:09:3b:ad:74:5f:93:a3:84:
55:ab:51:62:97:ea:b3:a5:5e:a4:ca:cd:26:9e:3b:38:e1:ab:
42:d2:be:12:00:23:0a:12:ce:2c:0c:77:91:66:0c:b9:d5:d2:
8b:22:4d:8a:1e:70:51:38:91:ac:aa:e9:ea:0f:0f:d2:c4:48:
6c:d8:09:08:7f:a8:a2:51:ec:be:25:59:50:d3:6c:bc:95:92:
dc:a2:df:ab:aa:a4:54:64:44:89:1b:e0:cd:a5:aa:fc:79:ed:
37:09:20:23:ed:50:7f:bd:76:44:84:b5:30:ab:f3:84:07:6a:
24:d7:ee:8b:62:9e:d7:b9:91:f2:d3:e3:75:d5:21:cb:37:b4:
96:72:2a:55:fe:f9:ea:57:81:d6:53:33:d1:c4:8b:53:a9:5d:
8b:1b:42:60:03:61:be:c9:47:83:aa:fd:57:5e:d4:92:91:6d:
11:d9:58:89:02:1b:e7:a3:3f:07:be:1c:7b:e5:13:fe:12:1a:
ad:ba:02:a3:eb:15:7d:7b:80:bf:71:f5:d2:b2:04:ba:8e:b2:
5f:c8:15:2d:67:2b:19:f6:90:fe:ea:80:3f:7f:b6:4a:3e:c9:
ee:1f:0b:c2:7f:1d:a9:dc:07:42:c0:9f:00:4f:6a:09:5b:15:
18:03:11:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 12:52:16 2024 by rpki-client on console-fra.rpki-client.org