Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/CB0C06044F3311EF98358B74762E951A.roa
File: CB0C06044F3311EF98358B74762E951A.roa (raw, json)
Hash identifier: 33eXu2/oH8uZV41D0k16ej4x6KFYNW3PJSmCRq+OVUU=
Subject key identifier: 71:DD:CB:55:8C:22:56:06:FF:EC:99:C1:BD:30:FC:04:7E:70:C2:F7
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 09CC
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/CB0C06044F3311EF98358B74762E951A.roa
Signing time: Wed 31 Jul 2024 11:55:34 +0000
ROA not before: Wed 31 Jul 2024 11:55:31 +0000
ROA not after: Wed 12 Jul 2034 11:55:31 +0000
asID: 2914
IP address blocks: 192.142.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2508 (0x9cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jul 31 11:55:31 2024 GMT
Not After : Jul 12 11:55:31 2034 GMT
Subject: CN=66aa2636-4a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:54:f6:5c:a9:12:ff:34:54:65:f4:e5:c1:3d:
10:49:dd:1a:8a:0e:58:83:08:73:f4:cf:59:2a:a0:
86:11:30:e1:e7:46:09:18:bc:bb:65:30:6a:77:27:
50:70:8d:18:f5:69:f2:e5:06:ae:62:c1:a1:0c:a8:
da:e8:57:8a:2c:99:04:94:d0:6c:56:5b:e7:f5:72:
8b:1d:a6:61:65:b3:92:5a:b0:6d:ff:af:03:1a:59:
23:77:99:f0:8a:4a:db:d8:c1:85:ea:49:a3:a3:d7:
bf:0e:94:11:11:96:73:c5:5f:7c:5f:81:8e:b8:9d:
80:7c:62:55:5c:46:f8:87:52:fd:0f:69:86:00:b2:
20:d3:7c:4e:b9:53:af:e3:17:73:2a:1a:c1:e7:b6:
fa:69:cd:68:db:56:cc:5e:52:4d:72:26:e6:f0:eb:
80:63:c5:fe:a2:6a:82:ae:57:65:f1:56:3b:15:06:
8f:be:d4:91:75:18:93:4c:ee:39:7d:e9:ce:96:f1:
be:f9:46:bd:90:31:4e:70:71:04:2e:c6:30:25:b9:
b8:67:57:45:bd:d1:83:0c:c3:f6:0a:c2:18:d6:b4:
04:74:26:f3:03:7f:d1:7c:88:cf:f9:fa:f3:45:e0:
df:ab:33:ed:49:4e:8e:0c:bb:9d:82:1b:bb:37:f5:
ce:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DD:CB:55:8C:22:56:06:FF:EC:99:C1:BD:30:FC:04:7E:70:C2:F7
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/CB0C06044F3311EF98358B74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.5.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:45:24:1c:3e:32:18:ec:65:b8:ee:4e:89:73:a4:df:8e:d5:
3f:76:f0:3c:bf:d5:51:cf:a6:94:56:db:ac:d0:0c:fd:37:b1:
63:c5:6e:ac:2f:e8:40:d4:09:de:72:3c:bb:8c:96:eb:7e:d6:
ec:6c:43:97:bf:67:24:dd:ed:9a:1f:8f:83:8a:22:df:0c:c9:
a0:ea:99:37:87:be:5c:8b:63:4b:3b:22:e4:f5:d2:14:24:92:
83:8d:db:df:d7:8e:b4:3e:09:9f:51:e9:ba:ed:05:45:5d:94:
07:32:01:c6:73:84:d1:44:f1:af:90:ff:e0:31:fd:0c:54:c3:
ce:3b:7e:32:02:f0:a7:4c:08:59:28:24:03:4f:47:0a:03:0d:
4b:ed:d4:21:2e:a0:9b:4d:0b:4c:98:31:d1:3a:58:d9:69:1d:
1b:1c:3f:9a:00:a3:0c:3b:c5:fe:c5:8a:a2:9a:11:6d:58:33:
8c:e0:3c:b7:2e:b8:54:55:ab:58:79:73:3d:93:22:90:3c:e6:
32:09:5b:54:55:84:2a:74:21:0a:a3:32:31:3d:cb:71:81:5d:
df:d1:1a:8c:f1:7e:d8:4e:f2:b6:e1:cb:86:be:97:56:a6:e7:
07:06:20:4c:c7:05:72:67:1f:92:3b:a8:4b:94:35:e0:48:7e:
0a:48:35:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 13:22:29 2024 by rpki-client on console-ams.rpki-client.org