Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/AA7430D081E611EEB36E620E4AD9E6FC.roa
File: AA7430D081E611EEB36E620E4AD9E6FC.roa (raw, json)
Hash identifier: XrBR324e7kF9UHXbYCQW9yhfhLAcWhX2FrFTji7h9hU=
Subject key identifier: 99:0D:8F:F0:95:25:01:D6:4A:8A:FA:D7:DC:1F:D6:87:66:67:DD:1C
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 082A
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/AA7430D081E611EEB36E620E4AD9E6FC.roa
Signing time: Mon 13 Nov 2023 05:37:00 +0000
ROA not before: Mon 13 Nov 2023 05:36:56 +0000
ROA not after: Wed 16 Nov 2033 05:36:56 +0000
asID: 14618
IP address blocks: 192.142.102.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jan 2024 08:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2090 (0x82a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 13 05:36:56 2023 GMT
Not After : Nov 16 05:36:56 2033 GMT
Subject: CN=6551b5fc-43fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e6:78:29:22:0b:ee:6d:0d:75:5e:4c:ce:3f:
77:ae:ce:e6:80:01:6d:52:be:f3:b3:00:1c:11:c4:
78:5f:05:a1:7a:a7:ab:51:34:81:4c:9d:c9:17:53:
73:0f:b3:bb:74:48:78:ec:fa:7e:ad:a7:91:09:19:
13:79:24:6f:e4:30:48:6b:21:ca:6f:56:bf:bb:c3:
8e:a3:1e:7b:30:38:3c:07:ce:22:06:73:9f:cf:4e:
4d:f1:c9:ee:79:db:12:f0:04:13:6f:b6:e5:a4:76:
f6:dc:9f:56:f9:66:be:30:72:c7:58:7a:d0:42:e7:
9f:c0:63:1c:35:74:0a:4c:f4:fe:d2:3f:da:4f:2f:
79:c5:43:02:dc:d0:7f:03:af:bd:11:6d:01:86:51:
19:c6:14:ce:22:b5:1e:24:b9:1c:7e:92:f9:95:1f:
bd:cf:4b:b5:6f:78:36:47:7f:a1:5c:4d:24:f9:7c:
95:51:b4:2b:62:27:42:a2:03:64:49:94:41:1b:55:
f0:d9:a9:02:7a:7f:14:af:05:09:c5:f5:a9:d2:c1:
7e:06:bc:a7:35:8b:02:4f:8b:49:ba:0b:dc:0a:fd:
d7:5c:7b:e6:6e:c7:4e:47:3f:ad:bc:38:8a:bd:e3:
0f:30:1b:2f:71:d7:12:b3:6a:a8:a9:88:b8:d9:b4:
aa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0D:8F:F0:95:25:01:D6:4A:8A:FA:D7:DC:1F:D6:87:66:67:DD:1C
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/AA7430D081E611EEB36E620E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.102.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:7b:c1:3d:f6:c9:c7:16:5e:c3:c0:ff:e5:9f:a4:ba:21:73:
19:28:1c:eb:14:3c:3b:63:d6:91:8d:04:55:26:32:56:51:eb:
d3:11:8c:52:9f:fa:f3:f3:c0:16:48:d7:32:cf:db:ff:1a:fc:
00:4f:7c:21:65:b8:ce:b9:3e:0e:b8:2a:3c:50:70:d6:f4:43:
ec:3f:ce:72:ca:34:9b:3a:32:85:24:90:84:ad:39:e4:c7:12:
aa:00:4b:e7:41:c6:1e:b5:c3:6d:e0:0d:98:f1:a7:8d:71:01:
c1:7d:45:30:d9:84:25:c4:f3:e7:a1:7c:e7:8a:6f:22:a0:6e:
b1:7f:ea:d9:b7:1f:7a:71:6f:64:98:ae:72:97:a9:eb:2e:dc:
89:2e:c9:3f:c7:32:cd:c0:c9:2f:fe:10:c4:38:90:3b:b8:74:
ac:ab:e8:a7:84:91:c1:22:79:31:e7:0e:e1:06:7a:37:37:81:
c9:de:b9:ee:e6:a9:c4:a6:5c:38:d3:cf:70:09:60:fa:eb:4b:
0e:a7:93:88:ca:dd:ab:75:b5:d0:c9:90:3d:0e:93:da:b5:30:
f1:8b:bf:ec:b3:57:ac:2c:e2:69:31:77:6f:4c:56:88:e5:01:
9c:d1:1f:e5:94:15:6a:2a:ad:0e:cc:94:bc:c3:0b:15:39:a0:
2f:3f:c7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org