Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/89F9C77083EB11ECB1DD4FCD5A40D577.roa
File: 89F9C77083EB11ECB1DD4FCD5A40D577.roa (raw, json)
Hash identifier: N3V2woM4VSD7DxwblLEFYKuOM9uD216t3wNnbAj5jQ4=
Subject key identifier: 72:C1:29:A1:53:46:4F:23:0A:E7:B0:E8:06:A3:2B:32:7B:65:09:02
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 042C
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/89F9C77083EB11ECB1DD4FCD5A40D577.roa
Signing time: Wed 02 Feb 2022 05:47:00 +0000
ROA not before: Wed 02 Feb 2022 05:46:55 +0000
ROA not after: Wed 11 Feb 2026 05:46:55 +0000
asID: 9009
IP address blocks: 192.142.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 07:06:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1068 (0x42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Feb 2 05:46:55 2022 GMT
Not After : Feb 11 05:46:55 2026 GMT
Subject: CN=61fa1ad4-3303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:17:fc:10:3d:8f:1f:0f:62:11:1b:7b:71:
c5:73:05:1a:d9:26:44:b5:f7:bd:d2:70:3c:fe:1a:
d2:99:21:0c:ea:ab:65:20:c1:57:1b:ed:64:cb:36:
7f:c0:56:4e:97:2b:dd:fa:d1:41:c4:fd:22:1d:76:
5a:58:af:74:94:3f:05:12:85:03:7c:b4:c0:03:a0:
0e:0e:6d:5f:bd:89:72:e4:99:20:58:2d:e1:9f:65:
f4:15:b0:1b:ff:52:c2:09:37:cf:2d:b8:50:17:32:
a3:a3:92:05:4b:33:78:e9:f1:d5:16:11:0c:f2:a7:
c6:64:6c:90:53:d2:25:90:35:0e:c9:9d:f2:ff:22:
8f:ff:de:6c:c4:65:df:2d:00:6e:5a:e7:63:02:57:
38:f9:79:aa:be:c8:31:5c:03:52:95:a1:a6:a1:d2:
71:67:05:cf:96:16:04:a2:aa:21:2e:7c:42:7e:9f:
8b:27:c9:47:3c:ef:b6:65:04:f6:ba:e7:aa:c7:59:
35:da:04:d0:9a:bc:a2:f3:68:42:bf:33:b2:c9:6c:
ae:0b:5b:39:b0:b9:4b:eb:cc:69:3c:c8:59:6e:4b:
48:9c:59:9c:4b:b1:ea:45:08:65:92:fb:0b:2d:38:
e9:a1:34:58:f7:67:3e:7f:76:a1:95:10:1f:47:94:
ef:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C1:29:A1:53:46:4F:23:0A:E7:B0:E8:06:A3:2B:32:7B:65:09:02
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/89F9C77083EB11ECB1DD4FCD5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.128.0/24
Signature Algorithm: sha256WithRSAEncryption
68:33:50:13:f5:8c:e5:83:92:e8:e8:16:05:1c:1b:69:59:61:
a1:ee:4c:58:01:d9:3e:09:f5:be:5f:64:bb:20:2c:3f:05:c0:
9c:35:98:33:a1:02:82:dd:66:9c:4d:d0:49:e0:80:04:d4:f0:
8f:77:a7:84:ed:20:10:cf:33:97:71:d0:d4:a4:e0:45:03:fa:
f5:4e:99:b6:e8:88:37:89:38:c3:f9:25:d7:64:75:79:1d:09:
45:1c:31:39:f0:fd:1e:13:b4:7a:26:0e:fd:86:92:02:14:ca:
6f:85:4e:4f:da:a1:5d:f1:6e:f4:4e:f8:91:d4:39:af:a3:fc:
58:6d:43:fa:36:67:d5:04:20:8d:7d:cb:91:fe:20:ce:83:61:
e9:cb:14:5c:5d:88:83:4b:10:8d:6f:1f:9b:fe:71:51:f5:b7:
64:95:8c:a1:4f:e2:71:ef:89:22:24:30:49:5e:d4:a0:80:3a:
c7:52:0c:0e:26:89:88:6e:09:3b:a6:60:0f:a6:7d:97:18:a0:
e4:72:f4:a7:98:1d:97:42:38:49:3e:1d:30:5a:cd:f7:5e:13:
08:85:5f:3a:8a:dd:60:cf:db:e6:84:c6:74:be:85:f5:e4:52:
e4:1c:b6:57:68:8a:1e:9c:7f:b6:db:fb:d5:bb:de:5e:be:91:
77:0b:f9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 08:14:49 2024 by rpki-client on console-ams.rpki-client.org