Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D068B062427111EFB5C0DE56762E951A.roa
File: D068B062427111EFB5C0DE56762E951A.roa (raw, json)
Hash identifier: XojZ0IO+Hs39ML8aekj+RRmahssKiarPT0fN8KxAOv0=
Subject key identifier: A0:4D:88:75:FD:BA:EA:70:8F:10:AD:A6:2B:88:A5:A0:D0:ED:6E:7D
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 09B1
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D068B062427111EFB5C0DE56762E951A.roa
Signing time: Mon 15 Jul 2024 06:16:47 +0000
ROA not before: Mon 15 Jul 2024 06:16:43 +0000
ROA not after: Wed 12 Jul 2034 06:16:43 +0000
asID: 197555
IP address blocks: 192.142.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2481 (0x9b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jul 15 06:16:43 2024 GMT
Not After : Jul 12 06:16:43 2034 GMT
Subject: CN=6694becf-e7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:42:aa:73:2d:af:60:b8:02:d9:ff:3e:02:
ca:6e:6e:9b:ae:95:d8:db:75:25:9a:90:75:51:5d:
25:1c:8f:a9:76:0a:eb:b3:de:13:2e:55:8a:0b:95:
2d:33:34:68:9e:6e:34:5c:1e:0a:3c:f8:8f:61:8f:
cf:ba:9f:fb:92:fc:29:54:30:5c:4d:50:38:88:48:
0d:a6:ee:9e:0d:d3:29:74:30:e6:e3:f3:49:94:2d:
55:7e:98:ad:b2:31:39:78:2a:b5:99:ed:9c:0c:48:
a4:98:ef:7d:2f:6f:93:ff:3e:04:3c:ac:eb:d9:7f:
7e:8e:aa:7b:b3:33:59:0c:97:73:ef:72:ca:46:a5:
72:43:93:77:25:9b:7a:d5:e2:cf:ea:ca:19:73:75:
e5:03:1c:6a:7d:db:21:8b:19:7e:4c:12:7b:d8:ed:
89:c6:bc:87:17:4e:ed:e9:74:34:1f:88:92:1b:6e:
f9:32:89:7a:04:68:b1:e0:59:43:29:ed:8b:11:88:
7f:a5:3a:26:e0:55:26:79:57:ba:b7:0e:77:b4:f8:
e7:f6:44:8e:de:b7:09:22:e7:40:50:7f:1b:ad:55:
05:c3:c4:ab:1a:13:86:f8:c4:e3:cd:41:bd:ce:27:
2b:33:92:ec:9a:7c:06:10:85:00:4b:75:04:6c:b8:
5a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4D:88:75:FD:BA:EA:70:8F:10:AD:A6:2B:88:A5:A0:D0:ED:6E:7D
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D068B062427111EFB5C0DE56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.106.0/24
Signature Algorithm: sha256WithRSAEncryption
51:32:74:61:ae:05:51:e3:18:a1:a4:55:ad:2d:ba:96:a7:af:
47:eb:9e:9a:9c:d8:70:04:62:59:9d:09:90:32:33:45:15:61:
0c:93:e4:6b:07:30:9d:88:bf:c3:31:ff:31:4f:16:70:cc:2c:
b6:57:af:9d:23:8f:eb:da:d1:d1:0c:37:65:ed:88:2a:21:fe:
2b:56:7c:d2:93:f5:c2:9e:7c:7a:a9:bf:c9:9e:eb:bc:c3:b9:
b1:64:ae:69:ec:e3:b7:79:20:34:f0:37:a4:aa:a7:ca:c3:75:
88:d7:f8:fa:f8:54:e0:a8:e7:3e:d6:6f:22:56:60:f1:21:ac:
a6:b6:51:58:a2:fc:88:28:01:dc:ce:d6:85:a7:2b:c1:47:30:
f5:58:3f:eb:9f:c6:52:ca:b4:d4:f5:45:5b:99:9d:3e:55:d4:
4c:6a:6a:e2:f5:2b:b2:cd:76:50:ec:e8:b5:3e:70:14:db:41:
20:b4:29:88:45:67:c7:f2:bf:4d:19:c1:ac:6d:0a:d4:67:48:
26:d4:ef:0a:85:da:f2:3c:f9:cf:51:32:8a:1a:7b:88:9b:0d:
27:c5:4a:58:3f:02:9e:7c:ac:17:a0:ea:c2:34:18:67:9b:4e:
39:72:5e:a1:46:f0:71:bf:73:43:02:c3:17:9f:01:06:d2:42:
01:bc:8e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 12:52:16 2024 by rpki-client on console-fra.rpki-client.org