Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B9ED2DCC2B0111EF943FB43A7DDC24C2.roa
File: B9ED2DCC2B0111EF943FB43A7DDC24C2.roa (raw, json)
Hash identifier: Y+QHxzYFknCrHmBJ6QqMmHLVV8l9PV6cI+xZ8fapmVo=
Subject key identifier: 01:04:BA:4F:F5:03:DF:37:66:7C:14:55:10:84:6E:1D:EE:6D:F4:3D
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 098D
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B9ED2DCC2B0111EF943FB43A7DDC24C2.roa
Signing time: Sat 15 Jun 2024 10:26:29 +0000
ROA not before: Sat 15 Jun 2024 10:26:25 +0000
ROA not after: Wed 14 Jun 2034 10:26:25 +0000
asID: 64286
IP address blocks: 192.142.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2445 (0x98d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jun 15 10:26:25 2024 GMT
Not After : Jun 14 10:26:25 2034 GMT
Subject: CN=666d6c54-b64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:84:44:66:1b:d3:ff:39:59:7e:a8:b4:9e:41:
a1:86:e8:c1:bc:af:a2:ad:79:a1:4b:53:3d:54:fd:
bd:37:9a:db:88:4d:d1:67:3c:91:47:af:a4:bc:f5:
91:bd:a9:de:e6:66:6c:fb:39:b5:6e:8c:ec:e9:3d:
26:86:ee:bf:1d:69:4f:7d:e0:0c:7b:92:fe:57:fb:
04:43:af:6d:59:b4:21:e3:e7:61:bc:71:ef:f7:b8:
c7:7b:8b:72:8f:38:5d:a4:3c:df:e3:04:7d:4b:7b:
96:cb:d4:7d:4e:a2:f5:45:ba:5d:3a:71:fb:fa:e6:
4d:59:c4:85:bb:0a:21:71:08:35:f0:82:71:34:74:
d9:30:f1:1e:f0:7b:b0:e3:9a:50:22:21:1c:5a:ca:
00:01:b1:cf:f0:45:2a:96:25:df:76:66:84:0d:91:
dc:58:ca:29:ab:c3:de:12:7e:6b:38:cc:31:c2:f5:
bc:2c:77:69:28:93:8b:22:f4:f9:3e:d5:e6:b3:7d:
fa:16:a5:fc:39:9c:a2:14:ac:9d:50:1c:f4:5a:c3:
52:16:41:d4:f0:85:a8:3f:6d:d3:df:88:0f:7c:d5:
a0:27:cf:54:0e:00:d9:d9:bf:ef:3a:42:c5:0a:bc:
1b:af:4c:c4:07:01:50:fe:c8:5b:d9:f7:b2:ab:2f:
da:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:04:BA:4F:F5:03:DF:37:66:7C:14:55:10:84:6E:1D:EE:6D:F4:3D
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B9ED2DCC2B0111EF943FB43A7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.100.0/24
Signature Algorithm: sha256WithRSAEncryption
72:8d:fc:b9:22:b3:2b:d1:fa:af:93:78:46:1b:f7:07:72:ec:
7c:78:8f:23:43:e7:4b:9c:fd:11:34:e4:5e:00:bd:a9:86:d0:
22:6a:6d:1e:70:04:e0:6b:69:65:87:89:0c:7a:25:30:50:bb:
88:bd:18:6f:0e:8f:c0:e9:93:2f:2a:dc:bb:3b:58:49:b8:d8:
58:5d:69:35:ab:5d:03:78:97:77:55:3e:78:93:f4:d8:8c:8e:
1c:5c:2e:db:19:ab:bc:14:4d:a1:ef:d0:96:c9:89:6a:df:af:
ef:70:7a:08:72:ef:f4:96:54:cb:b0:f0:79:dd:09:da:a8:4d:
3e:9d:f1:f7:68:ab:f8:d2:71:8e:5b:3b:a9:29:8b:39:87:4f:
4c:bd:f7:54:b6:b5:34:8a:16:0d:7e:a9:d5:18:ab:31:1b:da:
6e:c5:0e:8e:40:7f:5a:c0:54:da:95:e6:07:19:82:6d:6a:f4:
27:c4:cc:44:d6:7a:d8:28:85:2a:b8:23:ab:77:36:3f:9b:85:
9e:1e:23:00:ff:c5:0a:86:e5:9c:60:6d:91:83:7a:19:32:47:
ea:af:f3:88:a0:fb:4c:a7:84:5e:4a:bb:41:e2:89:b6:9f:dd:
e4:a9:91:98:7c:78:7c:27:23:be:66:56:24:25:21:cc:b5:75:
bb:69:16:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 12:52:16 2024 by rpki-client on console-fra.rpki-client.org