Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/615B13B24F3311EFB71DB172762E951A.roa
File: 615B13B24F3311EFB71DB172762E951A.roa (raw, json)
Hash identifier: XgIQkVcc2oKF8Phos03iVlND3KhFIbPJulz0gAHjIzI=
Subject key identifier: C9:7F:6E:23:5D:10:78:97:C6:2A:B9:31:13:EF:71:51:D7:6E:2B:4F
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 09C8
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/615B13B24F3311EFB71DB172762E951A.roa
Signing time: Wed 31 Jul 2024 11:52:37 +0000
ROA not before: Wed 31 Jul 2024 11:52:33 +0000
ROA not after: Wed 12 Jul 2034 11:52:33 +0000
asID: 2914
IP address blocks: 192.142.200.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:11:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2504 (0x9c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jul 31 11:52:33 2024 GMT
Not After : Jul 12 11:52:33 2034 GMT
Subject: CN=66aa2585-338b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:dc:ce:c4:ff:33:ac:74:f2:51:50:ff:71:
5f:87:35:25:cc:53:82:ce:e7:41:56:39:0a:93:02:
3a:cf:f2:06:5b:b1:ca:f1:89:f1:31:90:99:e7:07:
46:93:f1:ab:0c:d0:db:e0:38:75:7a:1c:cd:8a:69:
ab:ff:10:3a:87:fc:7f:86:0d:0b:7d:bc:e7:82:9f:
42:6f:fe:79:10:4c:31:48:98:ae:57:fa:90:dd:0f:
01:9c:98:fc:41:4a:f8:5a:49:bf:8b:fb:86:8d:27:
a2:05:fe:b7:ba:df:ac:47:55:0f:95:35:4c:36:6b:
44:98:b9:70:a6:3e:88:94:3c:33:2e:bd:a4:60:b3:
95:15:53:5e:04:ac:68:78:52:32:c4:7d:d9:b8:39:
56:bf:bf:b1:17:87:da:80:1b:e2:e2:80:35:f6:13:
5c:28:8a:4e:bb:24:5f:b9:5d:f7:15:47:b2:f7:39:
f2:d1:43:0f:02:2d:58:d7:6d:af:ae:0e:89:7f:ba:
c0:99:0c:3c:29:3f:05:8b:5c:7d:0a:82:0f:5a:69:
be:74:8c:b2:79:30:1d:80:1a:b8:3e:46:92:e9:8b:
38:21:6f:d0:d1:94:d4:d3:4f:83:97:d6:17:6d:e5:
63:58:3e:0f:b4:80:99:5a:87:1e:2d:46:a2:a4:91:
06:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7F:6E:23:5D:10:78:97:C6:2A:B9:31:13:EF:71:51:D7:6E:2B:4F
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/615B13B24F3311EFB71DB172762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.200.0/21
Signature Algorithm: sha256WithRSAEncryption
a8:22:c4:2b:c8:c9:50:93:cb:95:32:38:cb:df:f0:8a:a7:a0:
48:3d:4d:a7:29:5c:79:1d:1a:a2:24:8d:6d:e3:c4:43:1a:90:
08:79:ab:d6:88:2a:1e:ef:a5:a7:2c:e0:3c:60:21:a9:91:8f:
d3:b9:01:ab:43:78:67:39:c3:6a:bc:45:7c:a8:eb:c3:f3:81:
b3:01:36:a1:fa:a1:94:1b:e0:ca:25:40:1d:30:51:1b:33:69:
9a:fa:73:ea:12:96:ee:ef:8e:f8:4e:67:91:dd:02:5e:71:1e:
f6:ff:b3:3d:87:5a:5c:85:bc:e9:0d:ba:00:e1:f6:76:c1:9a:
be:34:b3:eb:a9:4f:55:00:9f:da:b8:fe:9b:44:a2:01:37:2e:
1f:be:f0:7c:23:63:67:5a:4b:f0:16:f1:f6:c8:07:7c:19:e7:
f8:3b:2d:f4:a8:15:d7:cc:8e:37:44:6c:7e:49:89:97:22:ec:
51:4f:fa:84:3b:6f:b8:f6:55:a2:8f:a2:88:d1:e7:e7:4d:bc:
50:e8:97:5d:e4:82:00:a8:6f:d0:ac:34:3d:56:c3:f9:49:11:
db:7a:cc:b4:95:6d:4e:67:e7:ec:64:50:5a:2f:ea:3f:7f:1d:
40:d6:e4:db:f4:db:6e:5b:af:24:48:52:a9:f4:f5:20:0c:c2:
88:71:a4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 12:52:16 2024 by rpki-client on console-fra.rpki-client.org