Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A9D674886A9F11EF8230D662762E951A.roa
File: A9D674886A9F11EF8230D662762E951A.roa (raw, json)
Hash identifier: Gf+J+NY6eO/sYZcTEBJ8WL99BDAlCp+QcQIbBj+nGCU=
Subject key identifier: 8F:AA:C6:84:A4:FB:EA:F3:D4:B3:A4:FC:0C:78:9C:9C:5A:D4:8E:FA
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0A12
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A9D674886A9F11EF8230D662762E951A.roa
Signing time: Wed 04 Sep 2024 09:25:45 +0000
ROA not before: Wed 04 Sep 2024 09:25:42 +0000
ROA not after: Tue 12 Sep 2034 09:25:42 +0000
asID: 199760
IP address blocks: 192.142.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2578 (0xa12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 4 09:25:42 2024 GMT
Not After : Sep 12 09:25:42 2034 GMT
Subject: CN=66d82799-847c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:3e:0c:b7:a2:c8:3e:b7:f2:d8:30:4b:7c:
de:45:e5:b6:37:88:78:e5:2a:da:c9:e0:6e:e7:f8:
7f:26:9c:86:06:6a:56:2a:e3:4e:e7:bb:e0:f2:32:
45:35:d4:00:4c:2f:b9:63:89:c5:ad:d8:8c:3a:7d:
fe:05:0e:30:56:f1:7f:77:62:56:13:db:44:25:32:
e8:dd:8b:09:ff:78:e0:e5:a7:c1:e6:59:01:15:15:
5a:0e:e2:3e:15:72:c8:f7:7e:be:74:25:af:a9:3a:
b7:c1:58:4f:4c:94:7f:04:6f:62:18:e6:e3:77:b2:
29:17:75:a5:9d:9d:2f:d6:15:13:6b:f0:f6:44:c4:
9f:68:64:22:11:07:ef:68:8b:7e:05:84:b6:a9:a8:
4e:32:7c:b1:3d:00:95:45:7d:78:4b:ba:ae:0e:2e:
73:56:1b:ad:58:ba:19:33:2a:bb:bf:36:d3:93:61:
4b:23:1c:3c:4a:46:26:c7:de:96:4d:d4:48:b3:80:
3a:2e:8f:97:c3:79:ea:50:37:e6:76:31:05:9d:0b:
8d:10:9c:97:cf:83:16:d6:c1:28:db:e0:4f:d3:e3:
9c:ed:47:35:8b:33:00:51:47:bd:78:70:9d:7c:22:
7f:5a:6f:87:45:21:51:80:21:3e:7b:c6:bd:db:75:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AA:C6:84:A4:FB:EA:F3:D4:B3:A4:FC:0C:78:9C:9C:5A:D4:8E:FA
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A9D674886A9F11EF8230D662762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.220.0/22
Signature Algorithm: sha256WithRSAEncryption
41:4f:50:9c:b1:b8:11:37:0b:38:cf:c8:91:2c:46:63:c2:76:
0c:17:d0:2c:81:47:4e:df:4f:06:74:4b:35:37:15:bf:2a:8c:
71:b5:50:94:f1:3f:d3:f6:f3:32:15:95:da:40:53:2a:1e:c7:
e3:cb:89:bb:a3:ad:71:dd:6b:ec:bc:77:6c:32:6d:f9:d9:e2:
de:0e:6c:80:d1:44:b8:a8:30:98:db:0f:a2:da:e1:74:06:48:
c3:8f:73:c5:aa:7b:5c:16:6a:94:75:7a:f7:a3:9a:00:85:06:
4a:77:73:89:42:2a:c2:00:38:30:79:14:6b:f4:5d:4d:37:76:
a4:e6:74:ae:ad:d3:46:d7:26:38:53:89:84:d8:72:87:34:56:
22:71:a8:12:6a:04:8f:d2:e6:1e:14:7a:f9:26:f5:90:a3:d7:
64:dc:d1:44:7b:ae:6d:1a:cf:f9:e7:dc:cd:c4:1c:49:bf:5f:
97:76:14:44:4f:48:17:50:72:c5:2a:66:6a:f5:33:93:72:be:
71:11:0e:d5:bd:77:f4:9f:1b:79:8d:e8:72:63:38:5b:59:90:
99:26:ab:a9:85:b0:73:ce:30:e3:b2:1b:78:85:2a:4c:2c:6e:
ee:ed:9f:16:da:28:f7:aa:70:63:de:bc:d2:47:33:b1:0a:2d:
4e:ac:5c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 13:22:29 2024 by rpki-client on console-ams.rpki-client.org