Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D7A5E8A42B0111EFB1E1DD3A7DDC24C2.roa
File: D7A5E8A42B0111EFB1E1DD3A7DDC24C2.roa (raw, json)
Hash identifier: XAmvnrSb+nMIriPi+Vuo32kEa2VIyWkfE+aKto+WQF0=
Subject key identifier: C7:FE:3B:C7:8D:30:DE:4E:6E:AF:29:B5:52:C7:28:ED:80:A2:29:D4
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 098F
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D7A5E8A42B0111EFB1E1DD3A7DDC24C2.roa
Signing time: Sat 15 Jun 2024 10:27:18 +0000
ROA not before: Sat 15 Jun 2024 10:27:15 +0000
ROA not after: Wed 14 Jun 2034 10:27:15 +0000
asID: 64286
IP address blocks: 192.142.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2447 (0x98f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jun 15 10:27:15 2024 GMT
Not After : Jun 14 10:27:15 2034 GMT
Subject: CN=666d6c86-dc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:6f:a8:18:0d:b8:fe:3f:2e:fa:fe:31:e9:
52:b4:a0:31:2f:96:3b:9c:ff:18:dc:84:d8:a3:2a:
55:c6:d6:06:27:6a:fe:d3:18:3a:30:58:99:7c:7e:
28:6f:bf:5e:9e:11:37:fb:80:95:30:6a:08:e1:bb:
4f:62:07:e0:b3:1d:af:f5:ba:4a:d3:ae:24:67:85:
62:08:2a:4e:a8:33:0d:de:37:47:69:b3:60:1f:4d:
66:a2:75:3f:6f:2a:7a:df:70:90:f0:46:ea:38:17:
0c:d7:be:5c:10:4b:1d:f6:c8:70:5b:5a:f3:58:91:
4d:8f:eb:4c:1e:c7:1e:ca:6a:b0:e9:80:23:77:c9:
98:a8:eb:f1:a0:56:6c:5d:5b:92:67:6c:8d:68:01:
8b:cd:5f:68:c2:6e:4f:5b:b9:3d:37:6b:c7:d3:13:
ac:ea:a6:dd:1c:3c:3e:47:09:83:fd:11:8f:6a:30:
4a:1e:9a:7f:0d:ef:ff:24:2b:f8:1a:ac:f3:ee:19:
20:9b:d1:cc:3e:a6:98:fe:66:2b:ac:96:cf:4b:3f:
a2:06:db:59:3c:53:8b:7d:cf:9a:30:19:8e:8f:ff:
99:04:08:73:fd:5c:09:3e:ae:39:cd:33:2b:e3:1a:
1f:2b:af:a1:bd:ff:54:e3:90:8f:fb:0d:4a:35:36:
ca:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FE:3B:C7:8D:30:DE:4E:6E:AF:29:B5:52:C7:28:ED:80:A2:29:D4
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D7A5E8A42B0111EFB1E1DD3A7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.128.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:38:f9:6e:fd:d1:40:19:6f:02:a1:45:eb:99:fc:d1:d6:af:
31:98:f9:cc:06:87:d6:a4:42:ad:1e:27:03:79:8f:b8:28:c1:
54:f3:b7:d0:8d:d1:80:76:bc:cd:c2:f4:43:5c:8a:f6:9c:01:
17:55:fe:8b:8c:c7:fc:4f:6d:7c:9d:ca:40:a4:62:28:2c:a2:
a0:57:33:3c:bf:f8:a3:2c:d2:02:5d:1d:6d:fe:bc:6b:cb:b8:
a4:b8:e7:09:f6:14:b5:77:f4:15:8f:7a:b5:4d:9c:b6:6a:ec:
d5:58:d5:67:8a:b6:e2:94:24:45:ba:fd:3f:e7:f7:00:67:66:
af:85:12:ed:98:ae:6a:8b:da:fb:37:eb:03:41:ff:21:cb:c0:
1a:75:51:40:7d:5c:69:6c:3d:6f:66:85:f5:14:63:c5:4c:0c:
4b:72:89:0d:c4:e6:3a:0e:fe:d3:f9:1d:c7:94:06:92:db:83:
45:35:3e:d3:fa:c7:40:f0:03:31:65:9e:6c:e9:a2:48:bd:e5:
c7:7e:b5:5f:c6:95:79:0e:a2:28:40:f0:5c:11:c7:38:da:32:
a9:22:e9:08:1e:c9:25:eb:b0:74:62:25:8c:4c:5a:0f:15:92:
12:ed:31:ad:3d:2e:b9:c4:70:5a:0e:be:4f:cb:17:11:dc:e1:
69:c7:31:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 13:22:29 2024 by rpki-client on console-ams.rpki-client.org