Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/86DD9D4A6E6D11EFB6936B51762E951A.roa
File: 86DD9D4A6E6D11EFB6936B51762E951A.roa (raw, json)
Hash identifier: nN2aGro5wRxpoGxoBOny/04CafkbD5BBvhRFBoBnTQw=
Subject key identifier: 24:F5:40:02:6E:63:BB:5B:50:69:FA:F5:8F:A2:98:03:D5:A6:AF:17
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0A1B
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/86DD9D4A6E6D11EFB6936B51762E951A.roa
Signing time: Mon 09 Sep 2024 05:36:56 +0000
ROA not before: Mon 09 Sep 2024 05:36:53 +0000
ROA not after: Tue 12 Sep 2034 05:36:53 +0000
asID: 64286
IP address blocks: 192.142.144.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2587 (0xa1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 9 05:36:53 2024 GMT
Not After : Sep 12 05:36:53 2034 GMT
Subject: CN=66de8978-a6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:bd:49:5e:4c:5a:3c:88:00:68:85:83:c0:
eb:bb:76:6b:e7:64:24:ee:07:ca:ac:d2:37:17:f2:
44:e2:12:ad:ce:4e:8c:a0:3c:c1:b3:00:37:3b:53:
2d:bc:2f:47:60:98:72:e9:f6:a5:1d:cd:43:4a:5b:
17:17:2a:5e:17:08:28:92:f2:41:23:89:f9:c1:cc:
39:20:25:a0:da:98:b0:a9:b1:43:32:f4:85:7d:ec:
a4:b7:51:7d:bf:4e:a0:b8:2c:87:43:9f:77:57:d8:
d8:a7:81:a8:78:a5:21:4f:e2:3b:4d:5c:21:0b:5e:
db:69:64:2d:1e:9c:f0:8b:47:ea:37:d2:67:93:02:
f4:73:f4:4d:33:96:ea:c1:63:bd:97:53:26:42:10:
7d:17:9e:7b:1b:0c:86:7b:64:0b:59:36:79:5d:f9:
92:95:9b:ef:d1:9f:6c:94:e6:70:25:a7:bc:72:90:
6a:5a:73:31:78:9e:1c:5f:a8:be:18:60:96:67:2d:
8b:06:f7:1e:77:c8:48:7e:ae:3c:7a:f6:01:99:c6:
67:93:5d:2e:ba:35:6a:a5:e8:4c:de:09:a4:f3:b7:
94:62:fc:17:bf:b0:d7:f0:6c:b7:5a:67:65:16:53:
d3:2f:b1:df:cb:f7:cb:58:33:a4:8b:f7:7e:a2:73:
22:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F5:40:02:6E:63:BB:5B:50:69:FA:F5:8F:A2:98:03:D5:A6:AF:17
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/86DD9D4A6E6D11EFB6936B51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.144.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:8e:48:39:48:c4:73:ee:71:65:7b:32:cd:66:f8:f9:30:97:
3a:ce:e0:3b:1d:cb:11:d2:e3:1e:41:9e:e9:60:3c:38:44:7b:
68:77:31:f8:d4:3b:21:4b:1f:a6:07:3b:93:f3:93:48:29:a7:
5e:67:5a:40:09:88:11:aa:ca:f6:87:e3:e3:6d:01:e6:d0:dc:
84:45:32:46:43:ec:39:00:34:34:22:24:2c:e3:af:69:1f:62:
d6:8c:09:b9:b2:7e:4b:02:4e:6c:62:9e:4b:f1:db:a7:1c:a9:
b6:99:d0:26:d5:4c:09:87:86:db:9c:49:4a:3b:3b:9d:5e:74:
2b:62:6f:fd:22:0d:c5:0d:e2:60:93:f6:23:2a:df:e9:fb:a1:
e7:21:17:7a:32:2e:78:d5:79:e5:3a:6f:0f:20:f4:00:68:50:
75:77:ab:6f:54:ec:9a:7b:c8:fe:6e:0d:55:0c:3c:cb:b5:6a:
15:89:bb:b3:ac:48:45:e9:6f:fa:d2:4f:d9:69:db:9a:d9:be:
4c:8f:b8:e1:d4:b4:b1:49:83:cc:f9:a2:06:e0:23:18:29:33:
2a:d7:af:6b:87:9c:77:21:51:f3:eb:46:10:c9:ac:84:5e:b3:
69:fd:0c:94:78:83:22:76:ae:56:c8:55:31:c1:6e:a4:f6:3f:
9b:6d:56:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 13:22:29 2024 by rpki-client on console-ams.rpki-client.org