Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/987116944A4711EFB43B0569762E951A.roa
File: 987116944A4711EFB43B0569762E951A.roa (raw, json)
Hash identifier: keD4gC4X30HrQGjTHTzxgvNDcpzTaSP9/w6h4/XaV9s=
Subject key identifier: 79:95:1D:8E:9D:69:28:0F:F6:67:05:5F:3F:7F:1E:4F:42:0C:F7:2F
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 09BD
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/987116944A4711EFB43B0569762E951A.roa
Signing time: Thu 25 Jul 2024 05:34:43 +0000
ROA not before: Thu 25 Jul 2024 05:34:40 +0000
ROA not after: Wed 12 Jul 2034 05:34:40 +0000
asID: 64286
IP address blocks: 192.142.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 07:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2493 (0x9bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jul 25 05:34:40 2024 GMT
Not After : Jul 12 05:34:40 2034 GMT
Subject: CN=66a1e3f3-208c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:40:74:ce:26:83:7d:e9:a4:0b:3f:38:d9:7b:
c8:66:30:d8:d2:5d:2f:43:87:b1:8e:d0:3e:a9:c2:
15:f6:e6:0b:2b:a5:19:2f:20:1d:68:09:10:5e:3a:
bf:d4:cf:95:5c:e1:62:2d:81:ce:9f:fe:18:da:ff:
2d:01:6c:e6:ab:59:cb:c9:c9:d4:24:71:68:97:16:
e1:5b:a3:2d:d6:7b:46:a7:08:64:5d:09:33:48:7c:
42:d8:d3:1c:d0:68:ec:b4:04:c4:38:7c:02:89:6a:
5f:ad:ef:0c:85:17:b7:47:96:b7:7c:24:00:54:8a:
b6:13:be:fc:42:ac:6c:65:96:36:8e:3d:59:41:12:
2e:92:2e:c0:7c:9b:08:8c:a7:51:6a:11:71:6d:43:
9a:57:ba:2a:ba:5e:a4:da:13:1b:c8:da:12:85:22:
09:14:ab:49:83:58:c9:54:ce:00:89:49:c2:ed:3c:
bb:26:45:9d:fa:08:3e:c3:4c:c3:17:b5:75:d9:a0:
28:4e:5b:0b:4d:63:26:0d:17:d1:20:67:5d:34:38:
57:d5:ab:d4:63:09:b7:f0:50:af:f1:2b:fa:11:af:
3d:a6:d9:b2:ed:88:ff:aa:81:99:26:6f:e1:89:43:
45:4c:27:78:bf:ff:cf:29:71:79:cf:01:d3:7b:d5:
09:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:95:1D:8E:9D:69:28:0F:F6:67:05:5F:3F:7F:1E:4F:42:0C:F7:2F
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/987116944A4711EFB43B0569762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.192.0/22
Signature Algorithm: sha256WithRSAEncryption
56:b7:98:af:9b:58:ab:51:89:65:8e:b5:c5:eb:6d:f5:31:bc:
9c:b6:f3:35:23:00:78:b9:66:9f:2f:91:38:22:0b:f5:45:f8:
69:e3:f2:73:5c:4c:51:74:35:44:8d:16:9d:bf:c9:94:47:35:
d6:ab:54:3c:a0:f8:90:17:ea:9c:ae:c7:af:9b:5f:cb:66:c5:
65:14:ce:9d:3f:fe:74:f6:ed:cd:a1:76:9e:a2:f0:3f:04:01:
ad:9d:30:87:14:69:63:8d:be:7c:46:98:72:6f:d8:bf:14:fc:
a1:89:ad:d3:40:35:92:20:ea:46:b6:93:c3:85:9d:f8:19:0a:
6a:8b:63:fc:1c:4b:b6:d2:01:c9:08:8f:89:7f:7f:8f:97:a7:
ed:c0:ae:d0:13:e5:4e:c0:14:54:3d:c8:e2:e6:91:a4:fe:ff:
46:ad:37:7f:66:2b:3e:ce:d4:14:a1:01:64:4c:2b:63:83:3b:
1c:e7:c8:9f:4d:d4:91:f1:d0:91:6e:38:e5:7e:e9:01:7f:ca:
da:37:30:6a:67:74:da:15:cd:44:a5:36:b8:66:56:15:55:8d:
7b:e0:32:33:b8:d7:df:93:c5:2a:f0:04:13:c6:e5:94:57:95:
ee:23:0a:fe:d6:02:af:ea:c5:4f:43:e7:42:aa:d8:46:48:07:
fc:de:2c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 09:47:35 2024 by rpki-client on console-fra.rpki-client.org