Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/DEDC5E66669111EF961B876D762E951A.roa
File: DEDC5E66669111EF961B876D762E951A.roa (raw, json)
Hash identifier: CAFcnq/MwGBXDgcPUawreUzhgCaDUnKYMPv8DLrpyWg=
Subject key identifier: 0C:19:DB:C1:7B:2E:DB:D0:34:4A:58:E6:0F:98:F7:7C:AA:2E:4E:D0
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0A03
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/DEDC5E66669111EF961B876D762E951A.roa
Signing time: Fri 30 Aug 2024 05:36:57 +0000
ROA not before: Fri 30 Aug 2024 05:36:53 +0000
ROA not after: Tue 22 Aug 2034 05:36:53 +0000
asID: 64286
IP address blocks: 192.142.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 09:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2563 (0xa03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 30 05:36:53 2024 GMT
Not After : Aug 22 05:36:53 2034 GMT
Subject: CN=66d15a79-2539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c3:93:4f:a9:c1:87:a4:86:69:73:2f:c7:17:
9c:71:2a:5c:a4:e4:ec:ef:19:84:c0:d3:8c:d0:04:
c9:17:10:e1:50:aa:a5:fc:9b:71:de:d1:49:61:08:
10:f4:a4:1f:b3:e3:7d:cb:95:d2:e0:29:92:c8:b5:
7b:58:84:73:1f:be:f2:47:71:5f:05:22:4c:14:4b:
e2:f8:73:b9:2d:06:12:f9:c8:49:17:70:01:23:19:
31:d3:01:a0:4d:69:ec:25:47:f4:bf:3d:df:2c:9c:
85:57:89:c5:ef:f9:48:06:ad:1c:00:35:f9:a0:dc:
59:c5:ea:89:32:a1:85:c6:e3:e9:65:62:55:27:fe:
aa:16:ff:cc:46:da:b2:63:00:4b:6f:e5:17:e0:e0:
68:dd:42:3c:c0:86:1e:e7:d3:4f:f2:5a:7e:0f:ba:
fd:0a:74:55:2a:26:1c:0d:9b:f2:13:e7:8a:a7:6a:
db:c3:1a:7c:36:b1:12:5a:69:87:01:2e:5c:89:28:
24:2c:d8:bb:4f:04:76:82:b0:03:b9:55:d4:0d:f0:
bc:f4:e6:ae:20:32:61:62:66:72:d6:ff:9d:19:e7:
30:56:5f:ef:7c:43:5e:b6:b9:1d:36:b3:b8:b7:d8:
5e:02:f7:01:82:f8:ac:f5:a9:1a:55:ff:b1:4a:ef:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:19:DB:C1:7B:2E:DB:D0:34:4A:58:E6:0F:98:F7:7C:AA:2E:4E:D0
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/DEDC5E66669111EF961B876D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.220.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:35:e9:23:08:8d:a8:66:06:49:a1:13:8b:30:3b:ba:db:0f:
90:e4:e9:0f:03:c4:45:65:b9:6e:c5:3c:05:a1:3e:d8:ed:2d:
9b:1d:f1:2b:c5:ea:7f:08:78:0d:c8:d4:74:14:30:f1:1e:0c:
5f:ab:73:ba:83:1f:55:53:b5:0d:f8:cc:7b:d7:59:af:53:f2:
a4:19:e0:bd:60:1d:43:59:43:f4:52:da:9a:1f:a8:2c:6e:2c:
d5:2b:7c:67:05:be:ea:21:8a:e8:a4:28:67:c2:c1:60:26:94:
f9:eb:62:ce:1e:2e:c4:9f:4a:25:32:01:ce:fe:57:f0:5d:1a:
5c:3f:e1:be:10:27:1b:02:71:d3:8f:6c:78:b8:8b:c2:67:2a:
13:7d:8a:64:96:6b:34:04:1f:cf:6d:70:e7:33:67:ae:aa:26:
8f:e2:6b:92:ee:5a:91:67:35:15:32:5a:82:18:96:5a:5f:c1:
69:ad:2b:2d:9a:2a:6a:73:2e:e2:1e:74:b0:ad:3a:ee:0f:3e:
fb:1c:0d:6e:9b:1a:cd:f2:c1:a4:04:14:0c:24:27:ad:6a:04:
7d:7d:85:82:76:aa:cc:b5:03:8c:eb:72:f1:6d:5a:e1:7c:49:
83:ef:1f:e4:62:fb:94:7b:7c:fa:6e:7d:f0:44:bf:60:23:59:
b3:76:90:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 10:11:22 2024 by rpki-client on console-fra.rpki-client.org