Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/88007E64548111EF98DCD88E762E951A.roa
File: 88007E64548111EF98DCD88E762E951A.roa (raw, json)
Hash identifier: jprHbeAdHuMPIdNEIgMrubAQue+bLgFdTNaZsJjVp4o=
Subject key identifier: 7B:51:88:AC:4E:75:A4:33:AE:49:55:11:BA:6A:06:F3:F3:D9:EE:49
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 09E6
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/88007E64548111EF98DCD88E762E951A.roa
Signing time: Wed 07 Aug 2024 05:54:38 +0000
ROA not before: Wed 07 Aug 2024 05:54:33 +0000
ROA not after: Wed 16 Aug 2034 05:54:33 +0000
asID: 60707
IP address blocks: 192.142.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 05:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2534 (0x9e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 7 05:54:33 2024 GMT
Not After : Aug 16 05:54:33 2034 GMT
Subject: CN=66b30c1e-638b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:72:43:ce:bb:4f:d5:fb:67:01:4f:84:3a:
a3:fe:61:2f:44:07:e8:71:dd:c3:b7:63:f0:84:29:
fc:15:c0:00:b5:ac:c2:3e:20:7a:aa:07:7f:bc:ce:
89:b2:39:36:3c:3d:22:3d:93:0b:3d:52:ab:1b:d9:
46:b8:9b:45:48:7f:ea:2b:65:fe:74:51:a2:d4:be:
71:7e:1e:9e:19:f0:0f:d8:ff:63:5d:2e:af:15:1e:
32:cc:85:76:98:a3:2a:79:b1:67:b1:7d:60:51:3f:
28:ea:66:95:69:a9:6f:1c:ab:2b:c5:bc:9c:c5:bf:
4e:1b:1c:61:08:83:b9:44:4d:3b:1e:ac:2e:d9:63:
7c:00:c3:a3:33:7a:36:f8:e0:b0:cd:65:89:02:59:
d2:22:6d:07:94:25:6a:d2:14:06:38:e5:7b:24:99:
77:50:80:7b:5d:0b:f7:34:97:fb:b7:cd:03:94:2f:
3f:3f:d2:cd:b8:4b:cf:67:47:84:2c:de:90:c5:bb:
f8:fc:1b:a5:30:53:45:73:63:7e:24:8d:48:8b:27:
0f:fc:a8:67:77:95:06:fe:86:81:d8:38:bc:6c:99:
69:9f:2c:17:3b:a0:18:e8:ee:34:c2:8c:c7:c1:ae:
6c:84:b3:dc:71:00:e6:b1:92:d2:fe:c3:da:35:ce:
17:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:51:88:AC:4E:75:A4:33:AE:49:55:11:BA:6A:06:F3:F3:D9:EE:49
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/88007E64548111EF98DCD88E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.173.0/24
Signature Algorithm: sha256WithRSAEncryption
46:02:2b:ca:1f:6d:78:7e:c9:c1:c2:4b:07:e8:3f:69:58:fd:
6e:b9:37:56:65:63:61:56:da:69:de:10:58:78:8f:cb:37:7c:
c2:16:a2:7b:30:6e:df:38:a5:95:b4:83:2b:f0:36:e8:9c:e2:
45:b1:8d:55:bd:77:ea:1c:2e:88:60:9e:b8:01:d0:30:da:77:
a7:03:8c:af:ae:f8:78:e9:84:3b:36:81:41:45:e3:ca:24:1a:
11:60:79:af:49:63:86:cd:1a:b3:d2:55:db:4a:9d:c4:3b:d8:
96:aa:b5:79:4e:0c:42:47:aa:59:50:35:f9:ec:b0:f9:f2:67:
31:89:10:37:1f:9d:a1:ef:27:ee:0a:f3:52:24:8c:e2:d2:fe:
9a:df:11:30:00:58:0e:69:03:bc:00:1e:ef:7d:da:7d:06:ff:
81:a2:77:3f:a0:4a:ce:b0:73:c5:86:75:80:27:38:ea:c9:37:
0c:9a:f0:db:ca:64:94:c5:8a:00:50:2c:87:a6:db:62:99:04:
88:8b:4f:3c:6c:30:dc:3a:e8:49:19:03:79:ea:fe:81:c0:a2:
0e:41:31:0e:e8:4b:c5:22:eb:4b:d6:ee:2a:0e:57:ad:fa:82:
50:37:2d:cb:09:64:00:1c:fc:e0:a2:b5:25:39:e5:34:e3:9d:
90:81:bc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 09:05:02 2024 by rpki-client on console-ams.rpki-client.org