Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/76A0C7F6A57511EFBD2C9A83762E951A.roa
File: 76A0C7F6A57511EFBD2C9A83762E951A.roa (raw, json)
Hash identifier: hEQVAsvpsJyA4ROpWFLjfq+J59Rqg/KoOQ0apRPtB4Y=
Subject key identifier: 60:2B:6F:FC:4F:1E:32:B9:E7:2C:0D:1A:D1:6A:9C:0B:CA:29:AE:BB
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0AEC
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/76A0C7F6A57511EFBD2C9A83762E951A.roa
Signing time: Mon 18 Nov 2024 06:22:19 +0000
ROA not before: Mon 18 Nov 2024 06:22:15 +0000
ROA not after: Mon 13 Nov 2034 06:22:15 +0000
asID: 30431
IP address blocks: 192.142.10.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 11:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2796 (0xaec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 18 06:22:15 2024 GMT
Not After : Nov 13 06:22:15 2034 GMT
Subject: CN=673add1b-7abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:d1:2c:b4:6b:7d:a6:79:6e:db:5c:6f:1d:
f0:e4:08:48:dc:78:32:3f:dd:bd:c8:02:d5:b3:17:
1f:9a:dc:09:fe:a3:b0:07:22:d5:1d:f1:36:9a:c9:
0b:f6:79:4c:e1:62:17:8e:d1:6a:1b:60:e6:1c:ea:
03:af:3f:f7:db:b2:08:01:67:d6:9f:02:70:5a:ce:
e6:32:46:eb:9d:f7:d7:4f:8a:39:6a:97:99:59:78:
91:5a:e6:33:b6:02:0e:e4:fb:15:5f:96:ef:56:69:
25:97:f9:a0:d0:2b:f8:df:ab:e0:cf:c9:0d:c7:1e:
25:74:32:d8:5d:1c:85:d6:5a:5f:0c:92:19:40:c4:
80:4b:6f:72:e9:0c:03:18:e5:5b:8a:cd:9e:f8:10:
51:4d:ad:1b:6c:b7:94:c5:c8:36:d7:55:11:67:b4:
70:0e:4d:15:44:43:47:a8:81:77:35:cb:e3:e6:ee:
8c:5f:b0:fc:6a:10:c0:6c:89:53:4f:43:1b:2f:03:
85:9d:ad:08:ad:26:57:53:d7:a5:2e:f2:d4:a0:b5:
7e:14:93:df:34:c6:5b:3e:df:fb:4a:5b:8f:88:03:
df:5a:18:c1:ab:c8:ee:bd:39:70:89:36:04:52:41:
45:da:74:90:8d:5a:53:68:29:da:49:f5:74:9f:24:
e4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2B:6F:FC:4F:1E:32:B9:E7:2C:0D:1A:D1:6A:9C:0B:CA:29:AE:BB
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/76A0C7F6A57511EFBD2C9A83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.10.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:c3:72:10:46:28:8b:76:c1:a0:8e:4f:56:f5:9b:7b:9d:f4:
b8:d6:d2:31:5d:35:8b:1c:32:54:b0:a7:b9:3c:6e:85:1b:bf:
68:38:86:50:cf:f8:27:f5:96:12:3a:05:7a:89:20:77:85:e5:
94:cb:a0:9d:bb:20:30:5e:86:2a:e0:a2:ed:47:df:33:fc:89:
06:98:83:09:8c:61:c9:55:d6:20:03:ef:60:e7:13:06:7f:24:
52:26:97:e5:04:4c:3f:97:8e:26:c0:61:da:2d:b9:b4:26:53:
fa:bf:d5:00:f0:53:8c:22:5d:35:1c:2a:9d:e3:8c:bb:0b:e5:
f7:45:bd:64:1a:1e:d3:7a:19:bf:16:56:b6:83:6b:50:da:df:
d7:82:94:7b:50:2f:c7:c7:e0:cf:e5:89:a4:c3:67:31:d0:ca:
9c:8e:c5:1b:94:97:ce:df:53:6a:fc:a9:b4:09:d1:5d:c6:13:
7e:06:5e:a6:40:98:c2:fb:d3:1a:86:10:98:52:8e:5f:49:f4:
37:f3:a3:91:64:1c:81:80:13:9b:75:0f:cb:41:42:82:24:08:
c9:01:cb:02:bc:3d:61:61:6a:38:93:04:b2:40:e1:e1:70:cb:
fa:96:5c:5e:7f:18:6c:90:de:d3:1b:3f:0d:9b:9e:58:5d:93:
9a:c2:16:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 14:00:09 2024 by rpki-client on console-fra.rpki-client.org