Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/8DA1FA66B06E11EFABEAF292762E951A.roa
File: 8DA1FA66B06E11EFABEAF292762E951A.roa (raw, json)
Hash identifier: dQe8yKHgLvirkBiM9t62HNwdNScnNJR5gZ9GosqLhv0=
Subject key identifier: 8F:8B:5F:B3:FE:5F:A1:9B:3D:E6:8A:AF:14:DE:C8:65:01:18:49:EE
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B3D
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/8DA1FA66B06E11EFABEAF292762E951A.roa
Signing time: Mon 02 Dec 2024 05:30:34 +0000
ROA not before: Mon 02 Dec 2024 05:30:29 +0000
ROA not after: Wed 06 Dec 2034 05:30:29 +0000
asID: 15020
IP address blocks: 192.142.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 14:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2877 (0xb3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Dec 2 05:30:29 2024 GMT
Not After : Dec 6 05:30:29 2034 GMT
Subject: CN=674d45fa-a1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:e7:9c:f3:79:32:2d:13:a0:53:6d:bc:64:
af:cb:9a:29:e4:f7:77:eb:37:bc:8c:90:e7:32:b8:
d5:21:72:7a:aa:69:26:aa:44:7c:db:49:06:e8:1f:
78:7f:c5:ba:cf:50:2e:9c:75:98:1d:92:0b:c9:fa:
0d:09:74:f2:c7:a5:a2:45:5c:bb:ef:4f:bc:8f:aa:
25:8b:d2:4f:3f:08:bf:52:31:96:8b:82:d1:51:f6:
28:c8:ec:3c:37:6f:14:b9:87:b6:3e:f8:6f:52:23:
bf:c9:1f:4a:a6:24:6c:84:69:cc:98:80:87:59:25:
bf:a3:6e:8e:ee:9a:ce:86:80:23:89:88:7c:92:f5:
fe:dd:b2:59:67:d7:54:04:5c:07:9e:39:fc:3d:80:
e9:13:42:60:c9:64:35:97:35:c4:58:ce:3c:34:43:
de:d6:aa:ef:c6:fc:da:63:0e:a4:d7:6c:5f:8e:42:
1e:03:9a:31:e0:b5:d3:dd:62:7f:26:23:87:0c:f3:
c6:2f:d1:d9:7f:35:76:4c:e5:3d:8b:71:bc:64:bc:
4b:81:ee:b2:bc:da:b8:80:0f:cd:4a:37:41:ad:0c:
ec:b1:12:39:a5:c3:91:44:78:41:c9:e5:4e:37:36:
30:e3:b6:9a:9b:67:fc:a6:fa:66:80:e0:06:cb:eb:
fb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8B:5F:B3:FE:5F:A1:9B:3D:E6:8A:AF:14:DE:C8:65:01:18:49:EE
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/8DA1FA66B06E11EFABEAF292762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.11.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:88:69:a0:10:f0:3b:42:42:28:c2:cf:88:e1:50:8c:fe:ef:
ec:e6:d9:dc:a3:29:87:1f:90:ec:31:86:1d:cc:63:59:7b:7a:
5a:80:10:53:ff:b6:44:ee:b3:08:62:f3:f2:43:94:a4:59:a1:
61:1b:3a:d9:a9:8d:c3:9f:0f:b2:12:57:eb:68:6b:40:1d:5c:
4c:aa:06:19:f0:3f:dd:d1:d9:cf:87:c4:ac:86:ad:72:9f:be:
cb:2a:0f:2b:49:c7:07:02:f8:34:41:be:c0:c3:25:0b:7e:28:
48:1c:ad:88:8d:4e:a3:8d:bb:7d:b9:03:73:c3:68:2f:2e:b9:
6b:23:e1:97:f4:a1:f8:7b:8f:2d:b9:83:5a:19:be:0f:27:57:
8c:26:dd:f5:20:4f:20:0c:0e:a2:d4:11:26:dc:08:7b:2e:7e:
9e:2c:ff:11:87:40:24:fe:fa:5e:17:74:7a:29:f7:7f:9a:ce:
8d:3a:cd:16:b2:fb:0d:3e:33:14:4f:39:7a:30:e8:28:ad:51:
5e:38:88:09:b8:af:f7:c6:76:ca:2f:d3:63:93:81:68:8c:50:
95:77:67:a0:54:b5:fa:b8:35:65:2a:ea:96:11:2b:45:ab:7b:
3d:a0:1a:a5:01:1a:12:10:0a:66:d5:eb:37:32:73:87:f8:db:
63:2b:ea:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:18:18 2025 by rpki-client