Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/CD86D4785E2D11EFBC339B5D762E951A.roa
File: CD86D4785E2D11EFBC339B5D762E951A.roa (raw, json)
Hash identifier: IAY4m1NmK9G+Lhp7SYQRmLT1G2DOLSoKw95+WDg0zeg=
Subject key identifier: 42:A0:F5:36:E5:85:6D:DA:3F:A3:E6:64:0A:1C:E5:F0:5F:04:1D:1B
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 09F4
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/CD86D4785E2D11EFBC339B5D762E951A.roa
Signing time: Mon 19 Aug 2024 13:20:29 +0000
ROA not before: Mon 19 Aug 2024 13:20:25 +0000
ROA not after: Wed 09 Aug 2034 13:20:25 +0000
asID: 215224
IP address blocks: 192.142.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2548 (0x9f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 19 13:20:25 2024 GMT
Not After : Aug 9 13:20:25 2034 GMT
Subject: CN=66c3469d-cdb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:68:c2:b1:aa:7f:aa:3b:0c:e9:86:43:81:0f:
62:9b:43:e0:7d:84:98:22:ff:c1:78:4c:21:84:6b:
de:9c:b8:11:a3:86:a5:fc:73:52:96:f1:7e:7a:83:
7f:07:da:01:78:99:5f:73:58:98:07:66:c5:3d:43:
17:c4:58:de:9f:d4:97:72:26:46:92:0d:b4:f2:c3:
1b:01:71:53:45:71:ac:d2:aa:b5:b9:60:d6:71:18:
2f:bf:bf:c6:82:1d:4c:48:2a:0e:fa:72:a2:dc:9e:
aa:0f:27:74:05:bd:94:4c:c7:d1:1d:d3:fe:7a:60:
53:62:fd:a9:0a:d2:7b:be:ca:ba:3a:a1:41:21:ff:
6d:d2:f9:11:cf:7d:02:84:6e:99:71:99:1b:c3:21:
9b:79:cc:8c:a8:bc:b5:fc:1a:09:6c:4a:a3:b0:f8:
c1:49:12:3a:cc:f6:f8:72:09:98:6c:49:75:37:7d:
20:50:f0:72:c5:1d:7a:51:65:a5:f6:57:99:95:69:
66:e3:ad:2f:f4:0b:39:c8:51:1d:4e:31:a7:f8:0a:
b0:97:be:98:7f:5b:41:9b:10:be:c3:f0:29:78:ee:
3c:00:81:eb:bd:93:07:cd:01:09:64:c3:95:f0:ec:
6a:c8:9f:ab:c0:9e:b4:19:8d:48:20:4b:08:68:5a:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A0:F5:36:E5:85:6D:DA:3F:A3:E6:64:0A:1C:E5:F0:5F:04:1D:1B
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/CD86D4785E2D11EFBC339B5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.107.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:a2:cc:e6:d4:bd:cf:48:e1:e3:28:0b:fb:45:e1:39:85:0a:
12:95:07:b2:2c:8a:24:b0:f0:ea:f7:fc:24:aa:d0:a0:c5:c7:
bf:a4:01:10:8c:14:60:4a:1a:05:6b:18:46:bf:a5:10:7f:f3:
4a:1f:72:fb:88:6e:d7:4c:59:51:54:14:3f:b7:7f:93:a8:f6:
4c:eb:f8:38:31:b8:c8:8a:a9:38:94:37:04:30:ae:45:11:51:
21:56:63:f2:5c:62:f2:a5:65:53:a0:a5:ff:f1:05:e3:8d:62:
f3:2d:93:57:b5:5f:1e:5e:ee:51:3d:ff:d2:93:c6:c9:75:53:
4a:55:40:0d:ad:53:2d:7e:d4:71:a9:45:39:80:77:97:81:b3:
ab:33:d5:01:4d:10:42:77:23:ee:01:b8:f3:14:ae:77:68:f2:
c2:7a:7b:08:36:06:3a:2b:65:7b:7e:2f:e5:87:5a:fa:4b:3f:
da:06:d4:a5:2e:28:b7:2b:70:ff:c8:a0:14:ca:e8:33:10:24:
6f:7d:95:56:88:a7:01:b8:5f:96:4c:e3:89:27:0a:e0:81:73:
32:22:e3:53:5e:fa:c8:ea:ff:1f:83:7d:89:a9:81:95:b9:cc:
16:9b:a3:2c:6b:b5:25:4f:a0:49:ab:03:1e:35:26:c0:2e:aa:
cb:f8:7c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 12:52:16 2024 by rpki-client on console-fra.rpki-client.org