Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/97431F5AECD311EE8775B4BB775412E6.roa
File: 97431F5AECD311EE8775B4BB775412E6.roa (raw, json)
Hash identifier: MnbenuA1PnKlyoGS4OSKIiS9YvAsQDKffxCGQzM/+WQ=
Subject key identifier: 72:36:80:30:94:44:21:B7:73:16:7C:87:E5:84:97:5E:D8:CD:40:5E
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0919
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/97431F5AECD311EE8775B4BB775412E6.roa
Signing time: Thu 28 Mar 2024 07:20:02 +0000
ROA not before: Thu 28 Mar 2024 07:19:57 +0000
ROA not after: Wed 15 Mar 2034 07:19:57 +0000
asID: 212150
IP address blocks: 192.142.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 17:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2329 (0x919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Mar 28 07:19:57 2024 GMT
Not After : Mar 15 07:19:57 2034 GMT
Subject: CN=66051a22-1aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6c:7c:70:eb:cf:7b:d3:eb:c8:85:2a:24:54:
21:63:35:2e:ae:0f:96:d0:c2:b7:7d:15:43:2c:e3:
87:d1:94:a9:96:09:98:44:20:b7:ae:14:2a:32:2f:
b2:f9:26:f8:df:80:df:b0:9e:d8:7d:c4:8c:97:da:
7d:96:38:f2:a9:c0:67:53:21:15:fd:7e:59:31:15:
b7:60:e4:0f:09:71:19:3b:a9:51:dd:32:3e:ea:c5:
56:cc:42:c4:88:00:e3:e1:92:8d:88:a6:45:f0:f1:
b8:dd:b5:c1:51:a8:26:76:7d:3d:90:da:fc:40:94:
58:04:95:3c:0e:8a:2d:20:5d:22:ee:3b:41:38:7f:
69:df:c6:61:55:cb:b2:c4:03:9e:78:b1:81:61:73:
ad:8e:73:8d:91:99:25:dd:88:d9:fa:4b:7a:f0:f9:
62:ad:42:6b:da:e4:f0:d3:1c:e7:19:15:86:11:6d:
0a:6e:0f:f2:03:a4:6a:b0:f3:15:2f:73:b3:84:84:
bd:3c:cd:47:2e:ad:33:e6:2c:37:d2:1a:1a:61:fd:
0d:4f:bd:28:dd:8f:01:16:ad:ba:16:6f:2b:fa:60:
dd:68:eb:30:48:8d:1d:1b:a3:46:b2:0e:eb:6b:70:
06:dd:bf:f2:ce:48:73:ca:82:7c:9f:07:f1:97:79:
72:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:36:80:30:94:44:21:B7:73:16:7C:87:E5:84:97:5E:D8:CD:40:5E
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/97431F5AECD311EE8775B4BB775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.28.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:6f:c7:63:93:49:0b:f2:7b:a8:fd:72:6d:1c:f1:34:f2:6e:
5c:b8:76:f7:74:28:d0:8a:6c:1c:f1:d3:e5:56:e6:79:06:d0:
43:d4:7e:c2:4b:92:fc:ff:b5:16:f7:84:82:f9:e1:cd:69:69:
a2:98:01:39:d1:0d:54:88:6b:a9:7f:e7:78:6c:94:d1:58:7c:
c9:d2:65:41:b8:a1:27:47:89:4e:13:23:00:7e:d3:6c:f3:7e:
8e:fb:47:df:a4:30:7a:ea:6e:95:f5:a6:94:a3:d2:91:ef:09:
10:2c:7c:63:cc:30:97:60:0d:7c:64:34:0d:4d:11:8d:85:84:
e2:8a:95:e9:5c:af:f1:c8:85:6b:51:0a:bf:9f:c9:45:bd:3b:
3d:bf:a9:29:f1:01:8e:a1:0c:ad:2c:6f:41:c6:fc:b0:e0:96:
df:ce:77:f5:93:7d:78:78:b0:9f:1f:f9:9b:f5:ee:22:72:9d:
2d:3d:2c:02:d4:94:53:62:be:4d:51:0d:bd:19:e5:1c:5e:86:
ab:e6:77:cd:c0:7a:c9:af:ce:6c:69:1b:14:5c:f4:31:bb:fb:
f8:ae:b9:c9:82:14:79:50:0c:dc:18:f1:fd:ba:93:7a:51:85:
18:d4:77:9a:ad:aa:f4:ad:83:78:1d:88:7d:da:a3:11:4a:ca:
72:1e:d8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org