Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9343A7E4087011F0B7D82150762E951A.roa
File: 9343A7E4087011F0B7D82150762E951A.roa (raw, json)
Hash identifier: kh0tzblzRSJ5LsaaAI2puHS0It3ArJ1XKnLPWv+9yNw=
Subject key identifier: FB:3C:6E:39:B4:44:3B:9F:33:03:71:3A:12:2E:D5:73:FA:09:FC:FB
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C4E
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9343A7E4087011F0B7D82150762E951A.roa
Signing time: Mon 24 Mar 2025 05:26:45 +0000
ROA not before: Mon 24 Mar 2025 05:26:41 +0000
ROA not after: Tue 20 Mar 2035 05:26:41 +0000
asID: 36916
IP address blocks: 192.142.96.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 12:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3150 (0xc4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 24 05:26:41 2025 GMT
Not After : Mar 20 05:26:41 2035 GMT
Subject: CN=67e0ed15-ae2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:76:7a:35:a3:be:1c:d6:0d:4f:1b:2e:41:b5:
0e:99:e2:8e:77:6a:ea:0d:79:d9:77:c6:18:ee:32:
00:cd:9b:6d:b7:30:7c:48:fa:bd:90:29:5e:02:d5:
61:51:7d:bc:58:1c:3c:ab:79:3b:88:83:66:51:33:
6f:0a:cb:83:e2:db:7d:6b:99:bb:43:2d:c6:46:0c:
56:db:44:ec:fe:27:2a:18:c0:25:7a:e9:3d:25:ea:
4a:87:72:ed:29:2d:11:cd:2c:1b:fc:74:66:d5:32:
2d:a3:9d:ab:96:20:f5:e2:68:50:f1:f2:3d:9a:60:
ad:29:28:95:92:ca:51:9b:f3:36:d7:07:e1:19:bb:
b8:27:07:ee:dd:30:a8:06:c9:f6:24:5a:1b:2e:04:
ec:fe:13:ea:3a:81:d2:a5:59:e8:4c:7d:cb:c2:34:
dc:57:c4:9d:8b:0e:c9:30:06:12:af:6d:14:f2:e6:
4b:76:80:d0:d6:8e:cf:0f:19:c4:c5:82:08:cf:94:
00:c2:1d:bb:03:d2:a5:cb:45:d6:b9:de:61:39:6c:
75:56:c2:51:4f:be:b2:3f:ae:1c:45:6b:90:2a:40:
c5:b8:d6:d9:28:8b:83:79:19:bf:90:95:51:cd:20:
1a:16:0b:6d:2f:8a:d2:37:54:68:ed:a5:1d:94:34:
15:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3C:6E:39:B4:44:3B:9F:33:03:71:3A:12:2E:D5:73:FA:09:FC:FB
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9343A7E4087011F0B7D82150762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.96.0/21
Signature Algorithm: sha256WithRSAEncryption
98:61:41:e5:61:1d:3e:e2:a0:9e:5e:ab:f8:44:59:67:31:06:
cd:18:13:82:2e:b9:67:01:a1:2f:3e:80:0c:f4:04:b2:10:51:
50:82:56:6d:a5:bd:21:ad:81:dc:c5:dd:2b:15:09:ed:ff:c3:
c8:04:82:3f:51:b6:55:bc:29:18:0c:d2:84:81:f3:2f:0b:7b:
66:e9:cc:83:49:3d:eb:3b:2c:d0:37:ea:8a:7d:e6:00:7a:c2:
0d:a9:f8:10:af:18:b1:fb:0d:9b:65:67:11:7a:fc:54:23:52:
c8:e5:2c:77:90:d9:6b:61:27:d9:4d:b9:d6:fc:b8:5d:41:c2:
b0:7b:06:8d:63:fb:d6:f6:ea:c7:bd:96:49:f7:13:81:cc:ec:
ed:cc:57:ac:a6:16:a6:b7:7a:3d:a0:04:f7:b2:2d:bd:61:54:
2c:82:1a:58:49:8b:95:4f:3d:7a:33:dd:f1:ac:b8:b6:b1:47:
14:4c:12:fa:b4:85:e3:b9:e3:0d:4e:e9:ad:2a:1f:eb:d5:45:
56:d4:db:aa:78:cd:43:09:96:88:21:aa:8a:25:ae:04:56:0f:
b7:cd:c0:01:b8:e7:43:b3:5f:59:3e:2f:15:de:e6:c2:c3:f7:
a5:e9:6a:5d:a8:30:57:06:bf:7e:e3:dd:bb:10:d8:8a:d5:87:
27:35:05:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:32:29 2025 by rpki-client