Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/70A57AC8087011F09D100750762E951A.roa
File: 70A57AC8087011F09D100750762E951A.roa (raw, json)
Hash identifier: MUi7qI9dfhBHgxEeAlS8P67CGn0IrHqWDkd4zduuNwE=
Subject key identifier: 81:E7:8E:0B:14:36:8A:71:85:82:BE:3C:94:11:49:D4:0F:1E:83:BE
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C4C
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/70A57AC8087011F09D100750762E951A.roa
Signing time: Mon 24 Mar 2025 05:25:47 +0000
ROA not before: Mon 24 Mar 2025 05:25:43 +0000
ROA not after: Tue 13 Mar 2035 05:25:43 +0000
asID: 36916
IP address blocks: 192.142.88.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 12:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3148 (0xc4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 24 05:25:43 2025 GMT
Not After : Mar 13 05:25:43 2035 GMT
Subject: CN=67e0ecdb-dab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d9:c6:b2:9e:10:f8:8f:b2:bb:4c:77:ae:6a:
fd:33:9b:d8:62:5a:c0:79:44:b1:fd:68:76:90:ed:
25:60:92:2e:ad:af:60:b6:2b:9c:80:a1:3b:96:f4:
f3:3e:6e:03:fb:75:34:37:0e:c2:30:5d:8b:d6:12:
36:92:25:de:0e:79:11:84:66:77:c2:17:ce:56:94:
9e:39:11:af:fa:e9:5d:3c:c7:4c:e4:0e:84:8d:2c:
65:41:a8:ff:82:5d:8d:99:c9:eb:35:38:97:da:0f:
70:82:e3:5a:0b:c7:01:89:93:22:8b:5f:66:66:c7:
65:db:a0:e1:5a:3f:08:dd:a9:94:03:80:a7:a8:dd:
dd:a3:35:33:8e:4a:fc:a9:bf:23:25:ea:53:b2:9d:
7b:d0:7b:4f:a0:8a:b2:3e:3a:b7:cb:75:eb:90:fc:
6c:f9:14:70:5a:53:14:7a:3e:b2:db:a5:65:a5:c9:
6e:0b:83:72:e0:62:99:ec:d2:7f:51:c6:4c:1b:82:
b9:17:f7:ba:a8:7c:2d:eb:c6:89:8a:aa:d6:5e:a9:
c6:82:ec:46:02:30:3d:ef:be:3b:f4:78:56:88:7d:
98:63:cf:0a:62:33:62:22:cf:b8:87:5d:3f:2e:c9:
7e:07:02:44:25:b9:cb:72:4f:91:b9:3c:ac:3f:01:
09:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E7:8E:0B:14:36:8A:71:85:82:BE:3C:94:11:49:D4:0F:1E:83:BE
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/70A57AC8087011F09D100750762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.88.0/21
Signature Algorithm: sha256WithRSAEncryption
25:a7:5d:a9:87:95:c5:41:8c:3b:4e:83:e4:10:d4:3b:f4:b9:
e7:51:99:34:ec:9a:5c:8a:c1:96:5d:b9:dc:ea:b1:6a:57:3b:
7f:52:df:d6:0a:a6:c3:ea:b3:5f:ce:8b:85:47:ec:b7:d4:dd:
7e:c7:f8:60:e5:2a:1e:a1:bd:36:7c:e6:47:c2:74:5f:40:cc:
cd:a9:38:f1:fa:94:46:83:15:72:a0:2f:a7:a5:9a:c1:dc:95:
7e:14:91:23:30:fd:c6:b8:c9:30:f1:4c:9e:32:7d:4b:7a:99:
31:39:43:db:e6:35:2a:c4:f0:76:9d:80:31:08:09:3f:e2:97:
ae:54:31:cc:99:2e:34:7e:88:fe:39:3d:5d:21:dc:a0:b0:61:
e8:6c:30:50:18:c8:14:27:be:dd:c6:01:23:31:ab:08:7c:c2:
80:10:25:d4:66:45:6c:8a:76:53:03:eb:30:6a:f4:33:3b:34:
28:e4:9e:c1:93:17:94:8e:c6:bf:97:0d:91:f3:4e:dd:dc:54:
8a:18:4b:96:59:7d:fc:65:ba:78:85:fa:0b:b8:65:d7:da:67:
0a:fe:33:ba:2a:d9:17:a7:33:0e:1d:3d:d8:1b:1a:e4:a1:0a:
3d:e6:80:9b:a7:04:f2:4a:2c:2b:d7:3c:83:24:a2:8e:79:87:
08:7e:b2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:35:58 2025 by rpki-client