Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A4D6451C7D3811EEBBE5FF0F4AD9E6FC.roa
File: A4D6451C7D3811EEBBE5FF0F4AD9E6FC.roa (raw, json)
Hash identifier: f+CfBH4V4JLu+BKJm7Er5ZZYNTy+oO4lly5SpMLHyNg=
Subject key identifier: 49:84:2B:9F:33:F5:E7:91:B2:7D:08:24:C5:0B:E8:74:4F:0F:37:6F
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 081A
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A4D6451C7D3811EEBBE5FF0F4AD9E6FC.roa
Signing time: Tue 07 Nov 2023 06:41:13 +0000
ROA not before: Tue 07 Nov 2023 06:41:10 +0000
ROA not after: Tue 08 Nov 2033 06:41:10 +0000
asID: 212219
IP address blocks: 192.142.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 05:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2074 (0x81a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 7 06:41:10 2023 GMT
Not After : Nov 8 06:41:10 2033 GMT
Subject: CN=6549dc09-e090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:b7:a1:70:a9:78:73:81:73:f1:02:56:19:
c9:a7:04:af:87:87:46:38:79:06:ca:5a:a5:74:0c:
36:2f:16:0d:7b:d2:d1:00:e4:23:a4:fd:81:04:08:
c4:02:9f:e2:82:56:74:4c:b2:46:64:17:df:a4:d2:
c7:19:e9:53:ae:75:16:38:e6:02:71:83:bf:86:01:
04:81:6f:5f:36:81:2b:2f:95:90:36:49:e7:c3:46:
b5:63:aa:8f:c3:a5:d5:10:61:69:05:0a:43:ae:0d:
b4:26:da:9d:53:71:41:b3:7e:8d:34:99:19:de:47:
af:96:19:d1:92:f9:34:04:8c:b2:57:79:78:6d:99:
33:56:ee:94:c3:3e:e8:2b:40:91:db:1e:1b:3a:9a:
eb:eb:ac:46:56:be:5a:ac:ec:48:12:b8:86:76:04:
19:b2:02:43:c7:71:49:a0:be:20:90:9e:3d:ae:4b:
92:e7:c0:4b:ef:6b:0a:de:48:39:ac:9c:80:13:ba:
82:9b:13:32:da:7e:18:5f:a7:40:d4:be:a5:ea:e9:
c0:3d:f3:85:72:69:94:ee:5d:d3:cd:72:02:52:86:
af:89:7f:c5:aa:24:35:18:80:ed:be:f1:16:18:94:
9d:d9:9f:b8:51:51:8a:13:4d:ad:6e:f1:17:aa:af:
d6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:84:2B:9F:33:F5:E7:91:B2:7D:08:24:C5:0B:E8:74:4F:0F:37:6F
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A4D6451C7D3811EEBBE5FF0F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.134.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:fc:d6:66:bd:cb:3e:ed:a7:a6:00:f5:0b:36:3e:cb:b7:d5:
9e:b1:88:11:6e:dc:4b:d3:48:fe:64:01:ac:99:c9:8c:9b:87:
68:bb:6c:c9:64:49:ad:83:67:65:77:99:8f:80:87:36:6d:4f:
df:9f:42:68:3c:fe:ae:fa:8d:33:00:be:7a:bc:5a:b3:94:14:
79:4f:46:73:e2:87:65:7f:e9:d7:93:25:79:cd:c7:9b:03:67:
a1:85:28:bc:ed:2b:70:47:03:23:cb:15:e5:f2:fd:39:c7:44:
2b:e6:f5:eb:11:62:2b:bf:57:61:e4:49:de:20:12:33:71:77:
35:fa:a1:e2:f6:11:17:c0:b0:51:17:e4:fd:d4:f1:02:1d:74:
01:a7:7a:02:01:3f:d9:45:92:78:a9:63:b6:b5:cc:c8:02:63:
1e:58:f6:80:4d:e4:9e:e7:d0:ef:04:9e:45:18:92:c7:b1:e0:
29:23:f8:03:e6:f4:ac:58:62:f8:89:fb:8e:c4:ba:a7:0d:e6:
6c:1f:00:45:0c:cb:53:d5:a6:01:4d:50:1d:67:54:3a:35:82:
2c:ff:f5:05:31:05:3f:6f:0c:f8:f0:ae:b7:40:5c:3a:71:c3:
04:dd:cf:10:07:a7:fd:b4:e7:7c:16:8e:3c:bf:5c:44:6e:11:
bc:c9:4c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org