Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4BFBE194509211EFBFD43050762E951A.roa
File: 4BFBE194509211EFBFD43050762E951A.roa (raw, json)
Hash identifier: dhe6NYVTEDbp0FaASQD6ZGZ/bi0LqZ5sbny/qhb6Ab4=
Subject key identifier: F1:B5:DF:79:D8:97:3C:6B:B6:94:1F:BF:71:9A:A7:1B:37:BD:94:3D
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 09D9
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4BFBE194509211EFBFD43050762E951A.roa
Signing time: Fri 02 Aug 2024 05:44:34 +0000
ROA not before: Fri 02 Aug 2024 05:44:29 +0000
ROA not after: Wed 09 Aug 2034 05:44:29 +0000
asID: 211585
IP address blocks: 192.142.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Aug 2024 06:21:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2521 (0x9d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 2 05:44:29 2024 GMT
Not After : Aug 9 05:44:29 2034 GMT
Subject: CN=66ac7242-66ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:59:46:06:49:ef:db:42:ac:aa:ad:a5:4a:
a0:54:5b:dc:f3:c7:cb:c5:df:b2:80:7e:ec:d0:c1:
57:19:b7:62:68:90:cc:84:b3:d7:42:de:74:29:7e:
73:df:5e:7b:60:33:88:2b:f3:51:ef:83:26:03:b9:
33:c2:04:4b:2e:80:f3:d8:ec:e4:b2:83:95:ae:5d:
c9:3e:de:f6:22:d8:b3:e1:6e:8e:9b:fe:1d:5d:37:
f6:4a:b4:74:cb:b8:fa:30:db:69:0f:67:71:16:81:
ff:7d:38:ae:74:c4:ef:a7:53:b6:da:b1:6f:ae:c7:
15:e9:8b:48:38:ce:81:3c:3a:2f:0d:f4:9a:96:93:
08:31:aa:7a:58:3b:02:b1:e6:f5:27:1d:fa:f0:31:
67:79:a0:28:f8:7f:32:ef:a4:62:50:0c:ae:b2:7e:
df:e3:94:74:54:2d:21:42:25:22:73:1c:4f:ae:e7:
62:92:ef:d8:d9:12:24:c4:e0:e1:0f:82:d0:f5:18:
be:45:d8:07:74:85:4d:f6:39:d0:4b:13:22:4b:37:
5e:aa:3f:29:da:f4:59:c3:fc:52:52:6b:f1:14:32:
df:07:68:68:af:27:87:06:b1:4d:41:43:81:4f:2c:
29:51:df:65:68:e9:46:90:e2:45:0c:c8:88:0a:36:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B5:DF:79:D8:97:3C:6B:B6:94:1F:BF:71:9A:A7:1B:37:BD:94:3D
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4BFBE194509211EFBFD43050762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.134.0/24
Signature Algorithm: sha256WithRSAEncryption
93:4b:1e:78:ad:2c:ac:0e:1e:f9:7e:2b:84:f1:84:c6:12:a9:
42:02:ab:83:07:d1:57:6a:40:d8:d7:d6:bd:1b:9e:03:da:f6:
f3:06:89:d6:75:23:4f:33:be:9f:76:6c:fb:e1:5a:ff:70:a5:
a0:98:8f:0d:b8:99:3f:0f:57:45:b4:b2:85:38:a2:b5:e1:a1:
48:8d:16:ff:62:e9:a0:d0:96:d0:33:3c:6d:49:8e:f4:51:6e:
84:66:f8:16:0f:fb:9e:c1:a2:d3:27:da:77:c5:35:0a:eb:ea:
5d:ce:ba:f9:ee:81:ac:60:d9:35:ac:20:79:c6:d1:18:1d:1c:
02:3f:8b:d1:e3:0e:1b:40:25:54:d4:2e:b5:37:ee:f7:fa:0c:
3e:15:22:b5:40:f5:43:b8:9c:a9:84:6d:79:03:ca:25:92:8e:
ed:d5:d1:03:c7:81:36:8a:50:56:d2:3c:cd:c9:78:92:36:3d:
8b:e4:f4:f6:2a:44:0a:df:89:d6:1e:4c:ee:0e:35:6e:3a:13:
07:d2:a8:49:8f:77:75:cf:4c:50:35:54:4b:30:35:19:0a:98:
35:92:ae:9e:7d:d1:13:03:02:be:c4:7f:bc:be:15:bf:ad:f4:
d1:0f:af:34:ca:63:95:ee:38:66:d2:07:73:42:36:b2:e7:7e:
03:ae:5e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 08:15:43 2024 by rpki-client on console-ams.rpki-client.org