Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BD80BB9CFC8111EEBBE1946B017001B1.roa
File: BD80BB9CFC8111EEBBE1946B017001B1.roa (raw, json)
Hash identifier: MVtGh/aDtuLQ4dwtdF4ifQICy0MKDkBpqMqW3ZA6qyA=
Subject key identifier: 87:80:8A:41:82:39:B0:02:85:49:87:9F:F8:57:34:F1:6B:8C:12:94
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0938
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BD80BB9CFC8111EEBBE1946B017001B1.roa
Signing time: Wed 17 Apr 2024 06:14:26 +0000
ROA not before: Wed 17 Apr 2024 06:14:21 +0000
ROA not after: Wed 19 Apr 2034 06:14:21 +0000
asID: 64286
IP address blocks: 192.142.72.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2360 (0x938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Apr 17 06:14:21 2024 GMT
Not After : Apr 19 06:14:21 2034 GMT
Subject: CN=661f68c2-6ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:16:eb:13:eb:6d:93:69:f5:e5:a4:68:42:
21:e4:4b:ff:74:4e:a0:e2:78:3b:3d:86:83:34:ef:
bf:e6:fe:ee:aa:41:38:03:8b:79:24:27:57:d2:ce:
85:02:0d:bc:81:22:ec:60:0c:6d:6f:30:44:ce:93:
53:b8:9b:34:34:71:04:54:1a:35:1a:01:d8:24:f6:
1c:9f:82:b8:ff:6e:14:60:3c:9d:97:55:61:38:73:
91:7b:27:72:b3:06:ed:6b:c0:af:d6:f2:a5:90:74:
9b:fb:a8:c5:fa:d2:3a:a7:32:73:f2:1e:bb:bc:12:
a2:91:59:24:9f:e3:8c:b7:12:e8:e1:7a:6a:c8:90:
1e:2e:d1:d6:10:42:d8:9c:5d:db:58:5b:51:40:59:
35:c8:82:f1:b0:6c:14:01:c7:1b:5e:a6:d6:6e:f5:
7a:2a:5f:40:b5:82:2b:b7:87:2e:92:34:25:1d:01:
41:c8:a7:91:c8:7a:e3:38:78:a2:96:d7:53:cf:c2:
bd:67:de:d6:7e:34:78:10:ee:55:17:e9:8d:da:38:
23:a8:96:c6:d4:96:c4:31:44:92:a0:7f:af:07:23:
8a:58:a0:00:ab:ef:54:a7:86:55:d0:5f:32:96:31:
a4:90:b8:85:75:86:b8:7b:9a:85:be:d4:56:5e:90:
da:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:80:8A:41:82:39:B0:02:85:49:87:9F:F8:57:34:F1:6B:8C:12:94
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BD80BB9CFC8111EEBBE1946B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.72.0/22
Signature Algorithm: sha256WithRSAEncryption
57:80:a2:cb:42:1c:c0:21:7b:07:a4:a9:ec:dd:bf:05:2c:48:
be:5f:69:7f:b0:c3:ed:19:b7:5c:98:63:c6:4c:33:94:66:9d:
37:9b:61:c4:52:ec:03:76:d3:1d:54:80:a2:8a:be:7d:f5:4c:
10:3e:ed:96:56:55:33:9c:07:6e:17:33:64:2c:91:ae:22:9f:
96:ac:4c:5c:a5:a8:d9:e0:dd:e3:5a:c4:dd:58:57:fe:f6:85:
3c:d7:ba:db:23:c4:6e:62:72:34:77:e0:32:a4:61:61:01:5c:
f8:04:67:6d:4c:83:47:04:32:c6:b4:a5:8f:ab:5d:42:aa:f9:
e3:39:60:38:54:0a:f0:45:7e:02:fe:ac:54:57:d3:55:a2:6e:
39:32:54:a2:41:f0:67:0b:74:4b:d9:69:b7:a8:39:33:8e:25:
94:a1:8c:6e:ec:24:cc:8c:45:1f:99:49:6a:05:46:a8:bb:5b:
46:1f:05:2f:0a:f8:1e:59:81:62:15:b5:b5:1a:9c:c5:1f:07:
c4:d9:35:3d:f6:2f:bf:01:79:5f:a1:45:63:cb:a5:bf:33:38:
95:18:9e:6c:1e:bb:6b:33:c2:e4:15:67:3f:3e:01:87:85:f8:
0c:84:80:6a:7a:1e:c8:95:f4:c0:35:50:b7:e0:e6:fa:28:56:
85:3e:04:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 12:52:16 2024 by rpki-client on console-fra.rpki-client.org