Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4C1AEAD652F311EF9591E679762E951A.roa
File: 4C1AEAD652F311EF9591E679762E951A.roa (raw, json)
Hash identifier: tc383oqemaOaQRRo8fvSGAeaqgmHJmM2EJzB0A5U8Ck=
Subject key identifier: 7D:A7:F2:13:C4:8F:F5:29:AB:07:65:17:8D:2E:57:49:AC:3E:F9:75
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 09DF
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4C1AEAD652F311EF9591E679762E951A.roa
Signing time: Mon 05 Aug 2024 06:23:58 +0000
ROA not before: Mon 05 Aug 2024 06:23:54 +0000
ROA not after: Wed 16 Aug 2034 06:23:54 +0000
asID: 209737
IP address blocks: 192.142.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 05:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2527 (0x9df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 5 06:23:54 2024 GMT
Not After : Aug 16 06:23:54 2034 GMT
Subject: CN=66b06ffe-2eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:e0:2f:7a:68:23:9d:25:ce:1a:62:16:51:
bc:2f:89:10:fc:c3:2f:76:6d:91:6f:53:fe:fd:53:
d0:4a:f4:0c:d7:7c:6b:e9:93:de:66:2d:ec:ab:84:
f2:df:82:58:2a:77:14:fb:5a:01:fc:c0:d5:0f:7a:
3e:e0:80:91:60:fd:bd:41:20:61:78:cf:33:07:cf:
0d:cf:fc:3f:80:b4:20:a7:ab:95:c3:91:34:02:63:
74:43:fc:ce:d5:0e:ee:37:45:56:0d:2f:d4:bc:06:
3a:1d:6c:2c:27:df:45:bd:a5:a5:d1:a8:83:6d:22:
f2:0d:af:5a:a3:d0:a7:0d:38:83:08:84:ca:b5:bb:
19:e4:f3:b4:04:d5:02:b9:8c:a7:75:7e:d8:28:cd:
85:28:19:0c:12:75:e9:6d:95:05:d9:d9:6d:20:03:
0a:1c:63:f6:1e:e2:6b:24:ca:56:ed:0d:2c:3b:8e:
78:ca:9e:7e:63:8c:dd:dc:17:b2:c1:d7:e8:b8:12:
59:9d:37:73:50:1b:dd:27:1c:50:fc:50:5d:6b:3d:
60:8b:8e:9c:a4:09:2c:61:81:a8:e8:a4:b2:ce:ad:
f7:e3:8b:a9:2d:af:11:9f:37:72:1e:e2:5e:70:be:
92:79:f1:2a:80:f9:dd:81:4b:bd:e4:cf:e3:cb:72:
69:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A7:F2:13:C4:8F:F5:29:AB:07:65:17:8D:2E:57:49:AC:3E:F9:75
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4C1AEAD652F311EF9591E679762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.134.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:d8:73:4c:38:e1:4b:5b:b5:da:ad:1f:ab:1f:a2:a5:7c:53:
ca:5f:a9:9f:ba:00:fa:b2:ed:5b:4e:77:29:f0:bf:08:e4:a3:
00:1c:34:67:30:e7:6e:80:e4:0a:f1:c3:b1:0b:86:1a:50:e8:
ac:9c:60:74:79:94:77:1f:5d:6d:2c:7a:38:60:56:fc:bb:86:
2d:a5:f3:e5:51:40:6a:8e:c0:a6:f3:9a:40:03:8c:4a:e5:14:
76:6b:72:d1:5a:d0:22:b7:61:9f:42:5f:de:c3:65:67:fe:eb:
97:96:17:db:19:31:40:39:70:6b:cf:b3:bf:a4:8d:a9:8d:98:
ea:32:1d:ed:3a:c0:de:31:c1:80:19:43:27:a8:a8:9b:50:33:
c1:72:79:14:80:98:42:5c:1a:d3:27:a4:b7:87:65:2c:5b:d1:
a5:7c:5f:6c:06:6f:09:0f:c3:33:a6:5b:36:cb:5f:3e:c1:3d:
6d:df:03:bd:58:3e:41:8c:88:ae:96:b6:05:9f:c8:af:87:00:
76:bf:31:4f:50:68:73:a8:59:d3:6e:9f:17:52:06:c8:a6:86:
67:54:77:32:df:4a:09:5c:eb:c8:f7:56:ae:f5:84:03:02:96:
f0:0e:d9:74:61:6d:8a:6b:03:ae:a8:49:85:e7:d5:d0:ae:3f:
ef:5c:f4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 07:25:32 2024 by rpki-client on console-ams.rpki-client.org