Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6883C0CC6E6D11EF9C2F2251762E951A.roa
File: 6883C0CC6E6D11EF9C2F2251762E951A.roa (raw, json)
Hash identifier: 2u+7siNb2gKSIYw79idZb0NyohuY9k5++4bb72JdGOU=
Subject key identifier: CB:B2:4D:8B:36:6B:13:4B:6F:98:2F:3B:0A:BE:4D:F3:42:29:85:42
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0A19
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6883C0CC6E6D11EF9C2F2251762E951A.roa
Signing time: Mon 09 Sep 2024 05:36:06 +0000
ROA not before: Mon 09 Sep 2024 05:36:00 +0000
ROA not after: Wed 13 Sep 2034 05:36:00 +0000
asID: 64286
IP address blocks: 192.142.112.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2585 (0xa19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 9 05:36:00 2024 GMT
Not After : Sep 13 05:36:00 2034 GMT
Subject: CN=66de8945-3b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6f:47:61:94:c4:d7:76:0c:ef:90:d7:4a:c8:
5c:11:10:22:48:32:62:90:5b:46:46:9e:51:7e:8c:
ae:7b:25:09:ae:2e:71:31:ec:4c:70:a4:30:68:fe:
5a:5b:48:77:7d:f6:88:71:e9:76:52:c7:d0:98:e5:
34:50:9f:2b:2c:ee:25:68:6f:89:ec:2c:6e:13:94:
ff:d2:ca:62:fa:5b:69:76:2e:62:bf:d0:8b:f3:19:
31:f9:03:5f:18:e9:80:df:b0:88:c5:df:f6:dc:5f:
42:be:93:9c:c4:f6:52:20:ea:1b:ca:16:d5:89:a9:
75:7a:d7:71:d0:37:55:f7:39:34:00:6c:6e:d5:cc:
66:dc:60:1e:a5:e0:e3:ee:0d:6d:7c:f7:bc:2f:e2:
c0:78:b7:a5:64:3b:64:cd:3c:8b:b4:f5:c5:20:65:
4e:ac:aa:54:12:e0:67:11:bb:75:9d:41:71:af:f0:
96:6e:f1:7b:3c:66:df:00:6b:e8:ae:13:ce:bc:77:
d9:1e:68:2e:4f:f3:7d:f0:68:78:25:55:1d:e0:04:
25:9d:74:d7:f4:9f:51:4e:ea:1d:e7:fc:3d:84:fc:
71:87:69:34:45:2e:20:ae:5d:ae:dd:8d:aa:db:fb:
68:81:99:44:fc:6a:6a:2b:88:29:93:3f:e3:cf:a5:
e9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B2:4D:8B:36:6B:13:4B:6F:98:2F:3B:0A:BE:4D:F3:42:29:85:42
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6883C0CC6E6D11EF9C2F2251762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.112.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:c3:6f:13:11:6d:c7:a9:f9:4d:90:74:32:b9:28:89:25:82:
d6:92:8c:97:8d:d5:7c:1c:72:da:df:50:15:35:4a:c7:de:5d:
58:63:03:14:bc:9c:98:97:55:5c:00:f9:e6:39:f4:55:78:ef:
27:93:43:b4:68:f7:37:ba:37:8f:22:a1:ac:4f:71:0e:29:87:
01:21:3c:a9:d3:c9:cc:c1:a3:28:2f:16:31:34:88:9f:03:64:
24:b4:d1:27:df:7a:e7:f4:02:7c:e1:f3:71:46:63:bb:97:23:
1d:f3:1f:5d:4e:4a:54:1c:66:39:e7:46:ee:f7:b9:f8:42:ab:
c8:4d:e9:95:72:da:2a:45:4e:6b:82:2c:81:59:c0:36:0f:f5:
e2:be:b5:87:8d:16:58:f1:2e:32:01:7b:67:46:35:c5:b0:18:
f0:7c:53:e9:52:e2:e0:88:a4:13:ad:fa:24:00:61:8d:3a:16:
65:76:02:09:77:66:a6:01:b8:dc:bd:57:03:4b:91:3a:16:f8:
1c:84:b7:77:f0:96:16:df:02:85:15:ea:9a:1f:ec:fe:dd:0c:
6e:b0:c4:4b:2d:ae:13:56:ed:3b:09:7b:89:be:c0:20:61:e6:
10:87:a3:88:b7:b6:e3:4b:70:8d:58:df:6a:2c:5d:d3:05:bf:
ac:a1:ca:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 12:52:16 2024 by rpki-client on console-fra.rpki-client.org