Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/981856E2FF0711EF87CD64B6762E951A.roa
File: 981856E2FF0711EF87CD64B6762E951A.roa (raw, json)
Hash identifier: uHq5M9FOfhcEzkRmNL92Mvv03mbxWYZabDFueY9IEYM=
Subject key identifier: 7E:8E:77:B5:D0:14:59:3A:EC:28:6A:0F:DA:44:6F:FA:27:15:45:B0
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C0B
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/981856E2FF0711EF87CD64B6762E951A.roa
Signing time: Wed 12 Mar 2025 06:02:35 +0000
ROA not before: Wed 12 Mar 2025 06:02:32 +0000
ROA not after: Mon 12 Mar 2035 06:02:32 +0000
asID: 7029
IP address blocks: 192.142.88.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 05:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3083 (0xc0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 12 06:02:32 2025 GMT
Not After : Mar 12 06:02:32 2035 GMT
Subject: CN=67d1237b-587a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:76:51:28:d5:59:03:f3:e0:10:b7:d3:7a:
4b:93:46:04:0d:3b:7b:47:06:6f:d6:27:29:39:cf:
9f:42:d8:15:8f:84:01:27:d8:93:db:77:af:9b:af:
98:35:99:fe:6b:71:37:65:0f:29:5d:7f:d5:9d:6d:
9f:cb:09:e3:2b:e7:a8:4c:c1:78:ba:47:2a:ed:cb:
26:73:5e:30:7d:dc:c5:1f:c1:24:66:77:bf:e1:01:
4d:aa:ba:7d:af:03:8d:37:13:00:36:41:10:05:b1:
64:b4:63:0e:75:e5:80:e2:af:fd:bf:72:69:ad:dc:
1f:7a:f4:42:ce:40:5b:b1:c1:da:08:63:fe:ae:38:
43:e3:25:f8:20:68:87:7b:f9:2b:76:b3:1c:61:d6:
98:86:0a:df:45:27:e2:7d:1d:ea:80:62:f1:d2:75:
18:cb:30:cf:34:36:01:0e:03:01:8a:0b:b9:b1:0b:
bd:6d:c1:ad:d0:5b:14:7d:47:7b:d8:13:f5:84:de:
b5:28:8c:81:51:2b:86:58:cb:44:d4:0b:2b:44:03:
7e:c1:29:76:bf:d4:22:77:55:f7:6d:bd:66:a0:bd:
03:19:b7:55:46:c1:62:29:6e:bd:29:cc:b6:14:06:
b3:11:d0:98:90:f5:9d:61:25:de:11:4f:26:53:eb:
e7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8E:77:B5:D0:14:59:3A:EC:28:6A:0F:DA:44:6F:FA:27:15:45:B0
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/981856E2FF0711EF87CD64B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.88.0/21
Signature Algorithm: sha256WithRSAEncryption
c2:20:cf:36:40:c0:29:c9:0f:61:ac:20:8b:77:a0:ef:46:f5:
19:70:25:8b:dc:1d:dd:f7:f1:0a:85:af:44:6a:e6:88:af:5c:
74:02:2d:c6:28:bd:8f:49:03:c9:9d:5c:75:aa:4c:dc:a8:27:
76:58:11:85:8b:e4:dc:1a:61:03:a0:0e:9e:9c:48:d0:d0:05:
a2:96:6d:56:95:1b:a3:16:fe:e0:62:cb:9d:ee:3c:4e:8d:58:
1c:e3:6f:25:cd:81:f8:09:c7:9c:21:6b:24:bd:43:c3:fc:ad:
6c:13:66:33:15:4e:91:b7:71:5f:7f:d2:5d:61:f7:10:9a:7e:
ab:12:bc:43:45:09:f1:ee:b5:49:b0:92:2a:36:df:82:63:1d:
59:24:80:c3:a3:bb:47:09:65:57:aa:d9:93:aa:4c:87:10:e8:
3c:63:3a:19:ad:eb:2d:4b:87:59:29:e9:42:eb:0c:63:1c:5d:
35:8b:b0:4f:b8:b3:d3:c2:89:6f:78:4a:2e:e0:85:d3:14:5e:
b4:8a:74:52:b8:9f:44:d8:52:38:30:ab:7c:5c:51:2b:54:27:
7a:81:51:f1:f6:85:fd:45:9b:9f:2b:13:f9:c9:a0:d2:d5:8f:
3f:3d:89:39:66:42:4f:71:f9:26:7d:10:90:bf:83:93:87:83:
2d:6d:df:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:03:00 2025 by rpki-client