Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/3E369C8003BA11F0B521D26D762E951A.roa
File: 3E369C8003BA11F0B521D26D762E951A.roa (raw, json)
Hash identifier: g/KRmCnJAzbHwEs7NOXu/50FANZny/xOjk3kwDXo2YM=
Subject key identifier: 6F:99:D4:F5:43:1A:E0:16:4B:3E:1D:C0:4D:1B:C5:68:68:51:57:C9
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C13
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/3E369C8003BA11F0B521D26D762E951A.roa
Signing time: Tue 18 Mar 2025 05:31:29 +0000
ROA not before: Tue 18 Mar 2025 05:31:24 +0000
ROA not after: Wed 14 Mar 2029 05:31:24 +0000
asID: 36916
IP address blocks: 192.142.80.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 10:27:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3091 (0xc13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 18 05:31:24 2025 GMT
Not After : Mar 14 05:31:24 2029 GMT
Subject: CN=67d90531-7023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:6f:49:09:c3:40:4a:9a:1a:da:be:5e:e2:
5c:65:7c:f4:a8:84:73:a6:59:3f:c7:6d:f7:90:9b:
a0:41:36:d6:90:aa:24:21:63:1e:c6:af:df:af:51:
78:ba:a7:98:e7:58:92:c7:d9:b2:cf:bd:96:ee:cf:
2f:11:8b:dd:cc:53:f9:f9:af:2a:89:c9:01:0d:f3:
f2:56:c0:b7:3d:db:33:30:58:87:19:5f:ec:3f:f9:
bf:1a:2a:df:c5:99:81:ab:bc:59:c8:4a:96:28:a4:
de:b1:1c:d5:da:df:87:ec:0f:52:d6:ba:38:b7:eb:
43:53:47:ce:e1:42:cc:3b:5a:a9:f5:2e:13:24:1f:
81:61:52:7d:91:54:56:72:bd:1a:05:fd:4f:0e:0b:
54:fd:51:0c:6c:fb:a2:3d:0f:2d:0c:75:d2:46:8a:
b7:0b:d5:8e:6d:bd:53:38:1f:6e:7a:9a:18:c4:71:
d6:03:27:df:01:fb:9f:ee:68:38:dc:32:eb:a8:96:
b9:a7:ac:fd:18:b6:1e:56:89:ef:ab:d5:f0:f3:d7:
48:4e:b9:2e:36:68:2d:b5:46:e9:e9:73:20:5b:09:
fa:6f:9c:12:d9:82:13:85:88:8d:94:29:7c:4e:64:
4f:72:d8:ab:7e:e5:21:0b:ad:5f:a8:7b:66:ae:24:
39:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:99:D4:F5:43:1A:E0:16:4B:3E:1D:C0:4D:1B:C5:68:68:51:57:C9
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/3E369C8003BA11F0B521D26D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.80.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:46:3f:ea:fe:85:e4:8a:6a:26:9c:1a:d2:cf:86:35:2c:8f:
06:51:cb:3f:11:5f:ae:a7:55:21:b3:b8:f6:1c:db:88:74:d2:
7c:e0:d6:38:25:f1:f4:bf:11:4b:07:a1:b8:fe:80:14:34:06:
4d:cb:88:3e:c3:1c:45:16:cb:21:34:3d:34:d5:64:8e:7b:4a:
c5:cb:e3:90:3f:3d:ab:2b:51:69:33:d3:12:c5:3c:a1:e2:92:
21:71:cb:94:c2:4a:87:7f:e9:48:9d:a8:6c:58:d1:b5:9b:e6:
6a:88:8a:c9:f2:d7:c6:32:1d:78:05:ea:d4:32:5a:38:96:fa:
6b:a8:7a:f7:99:f0:05:b6:98:c5:be:f0:f4:6d:c8:c5:03:a7:
03:a1:f2:61:5c:67:6c:18:b6:6e:6b:d8:48:3a:35:d5:40:0b:
d7:9e:d7:56:97:d9:fa:7a:b1:7b:56:77:82:99:1f:6a:9f:3d:
07:17:e8:7b:c7:e6:6b:a5:98:aa:d2:af:6b:75:4f:e6:ef:f2:
2a:fa:cc:3d:a7:e9:10:cb:7c:9f:2c:b7:fb:3a:1f:71:87:cc:
68:2d:ef:59:23:3f:5c:78:07:11:7b:a0:1b:89:6f:d1:de:7e:
2f:3e:e6:92:89:1d:bb:a8:f4:4a:c7:48:b0:9f:29:cd:9f:ab:
6a:74:44:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:20:52 2025 by rpki-client