Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/38FE415EB0A111EE9CA51DA6775412E6.roa
File: 38FE415EB0A111EE9CA51DA6775412E6.roa (raw, json)
Hash identifier: BdeXDa96qBW0QAVZRxO8fEh5hz39h/rGRfuCR19bn3E=
Subject key identifier: B3:B8:BB:E6:9A:77:1C:3E:D2:95:D5:EE:10:D1:46:18:5E:EE:02:F5
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0885
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/38FE415EB0A111EE9CA51DA6775412E6.roa
Signing time: Thu 11 Jan 2024 16:48:19 +0000
ROA not before: Thu 11 Jan 2024 16:48:15 +0000
ROA not after: Wed 11 Jan 2034 16:48:15 +0000
asID: 64286
IP address blocks: 192.142.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:41:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2181 (0x885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jan 11 16:48:15 2024 GMT
Not After : Jan 11 16:48:15 2034 GMT
Subject: CN=65a01bd3-2f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c3:9e:a7:49:72:7f:c1:4c:15:3f:35:f9:16:
76:3f:87:3b:97:23:52:0a:38:cd:36:f9:9c:0a:78:
80:d5:21:d3:48:e1:2a:3f:a4:3f:ca:0c:89:19:89:
24:71:3b:50:0e:fe:8d:2d:1c:6d:cf:2a:6f:fa:ed:
b8:b9:88:b8:37:9f:19:40:b7:10:e4:dd:c8:57:51:
69:69:3a:29:73:7f:42:93:7f:e9:1a:62:de:dc:e9:
b3:21:f2:1e:f5:8c:84:bf:ac:7e:f0:c5:43:c2:35:
ca:8d:bf:29:e0:63:79:08:26:39:c4:be:71:f7:79:
3c:29:f3:e1:dd:4f:e3:f8:0d:73:a7:52:6f:d9:e3:
7b:ac:43:7d:fe:d6:44:a5:9e:23:b7:25:7c:bb:71:
ac:b6:4b:78:84:05:01:81:df:4b:67:27:d7:c7:65:
90:b2:14:7d:a2:0f:53:f2:b1:d2:19:b4:e7:18:d9:
55:05:99:3f:7b:66:be:f3:06:c0:8e:7e:e2:1e:42:
a1:c6:fe:67:c0:d6:ab:55:80:ba:64:ee:da:3b:16:
1b:c5:43:86:75:0b:97:10:9c:fa:7e:1c:e7:8a:1e:
11:2b:e9:29:c0:f4:53:af:23:02:e6:9e:f8:09:1e:
80:34:c7:b4:3a:a0:cc:70:aa:e1:71:6c:a0:a4:fe:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B8:BB:E6:9A:77:1C:3E:D2:95:D5:EE:10:D1:46:18:5E:EE:02:F5
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/38FE415EB0A111EE9CA51DA6775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.137.0/24
Signature Algorithm: sha256WithRSAEncryption
13:94:ca:7f:9a:76:b7:d5:1e:f6:17:da:05:71:95:8f:04:3b:
83:c5:3e:1c:39:e7:e3:3d:31:fe:e2:ef:fe:bf:96:b2:19:80:
fd:42:2f:17:07:2a:e1:aa:31:8b:28:ef:c5:68:f0:d9:d8:01:
e7:f3:61:cd:18:f8:1f:d7:5c:0f:04:34:de:e9:30:b2:e9:0d:
af:c1:fd:98:87:7e:ef:c9:42:73:d8:1e:58:5f:d9:34:f6:64:
ab:71:78:3c:7a:c3:f7:80:e7:4f:12:f1:03:a3:00:93:2d:49:
37:37:93:86:d8:84:aa:03:ec:94:c0:dc:c8:25:17:1a:9e:0d:
eb:2d:08:55:4e:a0:ce:c6:b5:0c:94:c7:63:ff:b3:cb:0c:34:
71:c9:3d:81:45:d6:c4:cc:b7:4d:0f:fb:c0:8c:20:3f:96:40:
ff:72:d3:71:66:74:2b:62:77:cc:e6:f7:2c:f2:5d:02:88:73:
c0:98:ab:00:79:33:e0:f2:15:10:6b:2a:9e:29:77:b2:bc:9f:
75:dd:64:fc:c0:3e:56:4c:3f:22:3d:92:27:25:58:7b:13:a2:
98:2d:99:d0:37:dd:11:48:56:77:9d:29:05:46:77:eb:fa:83:
b2:ad:d6:6e:3d:93:7c:98:c1:96:24:6b:c5:05:86:b0:d4:06:
1d:5d:f5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 13:22:29 2024 by rpki-client on console-ams.rpki-client.org