Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/516358C00A1811F0A5E31C6A762E951A.roa
File: 516358C00A1811F0A5E31C6A762E951A.roa (raw, json)
Hash identifier: zJ8MvBsddklsHWa34zpHgzemnp8lcUg7niFNKnu6ixE=
Subject key identifier: BB:1D:AE:E1:96:80:D7:93:3C:9F:65:29:49:73:0D:27:07:6D:3B:C0
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C5B
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/516358C00A1811F0A5E31C6A762E951A.roa
Signing time: Wed 26 Mar 2025 08:00:01 +0000
ROA not before: Wed 26 Mar 2025 07:59:57 +0000
ROA not after: Tue 13 Mar 2035 07:59:57 +0000
asID: 214036
IP address blocks: 192.142.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Mar 2025 08:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3163 (0xc5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 26 07:59:57 2025 GMT
Not After : Mar 13 07:59:57 2035 GMT
Subject: CN=67e3b401-c0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b3:9c:7f:46:e0:bb:bc:a7:7c:c6:21:a9:05:
d2:cf:6c:30:d0:cb:66:d1:16:0b:dd:60:90:c0:c6:
99:52:69:bf:28:54:4e:02:a5:e8:81:55:71:8c:19:
98:0a:52:a1:62:c4:1b:41:48:d7:35:49:8c:e4:95:
3a:b3:7e:bc:75:e6:6a:ef:6b:88:59:75:1b:23:aa:
43:9a:d5:d4:2d:34:6f:41:46:6e:b4:7f:85:64:22:
5b:c2:3d:5d:67:24:2d:7c:a4:cc:b9:4f:3e:da:13:
b2:e1:db:e9:05:d8:b7:3e:80:1d:02:4b:f6:55:a7:
2c:3c:3d:2c:43:73:72:09:35:3f:06:25:dd:11:ef:
72:eb:53:a3:d2:11:2e:8f:2a:23:aa:e2:62:4b:db:
63:24:4f:2c:e7:f1:2e:83:92:1a:28:90:fd:c3:4d:
b2:d3:e2:00:15:ef:fe:2b:16:1a:44:ae:bf:d7:eb:
de:4b:de:9d:a1:7a:47:e2:ad:5b:5b:ed:f5:72:89:
e6:48:c0:24:3a:e7:3c:61:1b:1c:cf:6d:00:e6:bd:
f5:5c:8a:a7:81:27:3c:63:9a:91:5c:26:6c:2d:54:
6d:11:c8:53:d3:72:fc:f7:08:c1:d1:74:ac:37:1f:
e5:76:67:84:06:b5:b5:0f:83:16:e8:9d:7f:3d:b4:
e1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1D:AE:E1:96:80:D7:93:3C:9F:65:29:49:73:0D:27:07:6D:3B:C0
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/516358C00A1811F0A5E31C6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.48.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:4d:96:ee:f5:7c:1b:da:de:4c:6f:b8:cf:21:07:22:1c:cf:
81:86:1d:0f:b3:ba:61:48:20:fe:bf:1a:00:e4:fb:9b:5f:c7:
4d:00:5b:07:f2:b8:49:54:ff:9e:9f:58:f9:ac:82:c7:9a:10:
b7:57:c9:0f:68:18:99:00:b5:a8:8c:b6:15:79:cf:3c:fe:a6:
0f:d5:6f:0b:16:38:35:09:95:09:bb:cf:d0:30:be:f9:ec:c4:
8c:e5:5d:82:e5:2f:93:ca:c6:fc:90:cb:3b:e3:34:88:7c:1e:
9d:35:7e:a3:c2:49:5e:5c:b8:13:94:ae:c3:3e:2c:6c:33:64:
83:27:af:1e:5d:43:ee:73:d3:31:55:c4:45:64:dd:c2:95:ea:
8f:19:c8:76:b9:ce:06:ae:24:0c:01:8a:2f:94:e8:91:da:a7:
1a:19:97:68:e0:79:51:1d:50:85:8c:af:28:2c:24:da:a4:07:
89:17:5a:29:d2:29:f5:0d:15:cf:1d:16:9a:a2:1c:1b:f9:ba:
6d:38:dc:cb:07:66:8e:5d:a2:c1:8a:04:fc:e0:5c:8f:bc:f3:
0b:99:e7:5c:ee:fc:f5:36:e9:00:47:57:be:d7:7d:4e:61:cb:
ce:4e:22:0a:85:96:6f:ae:4f:6d:f2:5e:be:f7:ab:2a:e8:7f:
91:fc:77:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:06:28 2025 by rpki-client