Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F1A84BA07CAC11EF8CACCF56762E951A.roa
File: F1A84BA07CAC11EF8CACCF56762E951A.roa (raw, json)
Hash identifier: Ih0KoC6RiCrBv3mCfjKckbVDO2wDWKZznUNLqrUyRbQ=
Subject key identifier: BC:C9:D4:BC:17:BD:99:FD:20:2F:11:05:6A:4D:E9:8E:A6:68:28:DE
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0A36
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F1A84BA07CAC11EF8CACCF56762E951A.roa
Signing time: Fri 27 Sep 2024 08:46:10 +0000
ROA not before: Fri 27 Sep 2024 08:46:06 +0000
ROA not after: Wed 20 Sep 2034 08:46:06 +0000
asID: 211585
IP address blocks: 192.142.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2614 (0xa36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 27 08:46:06 2024 GMT
Not After : Sep 20 08:46:06 2034 GMT
Subject: CN=66f670d2-fd58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:8b:15:8b:77:a7:5d:d6:46:24:f1:da:f2:
ee:6d:9d:76:d2:d5:15:f1:d3:24:ec:a1:af:dd:bb:
81:cd:0f:94:ba:f6:c3:b8:b2:9a:a0:79:ca:36:a9:
a3:ba:21:6c:c7:b9:0e:3f:f0:8a:e1:fa:08:2d:8e:
43:14:e8:ce:33:90:dd:d1:67:49:e4:0a:44:08:72:
e3:ff:3f:af:b8:91:b6:f1:93:59:d6:fd:d3:68:c1:
6a:20:c8:ce:9a:c0:cb:95:4d:cd:12:25:60:4a:81:
36:1e:6e:74:54:49:98:fe:be:08:7b:27:b9:55:76:
70:84:92:0c:b2:fa:c3:fe:b3:7c:b2:d0:12:10:55:
1a:2e:11:63:80:9f:ea:e7:50:d8:37:82:c8:35:fb:
28:5c:24:11:26:13:90:f9:04:ed:43:81:26:6e:70:
56:4e:a9:72:36:3f:82:43:6a:1b:c1:e3:26:32:57:
80:84:82:e2:27:22:56:95:b4:a3:56:c3:bc:b4:a2:
9f:89:1a:5a:56:8d:1e:90:d1:1c:d6:fd:1e:1f:88:
cf:5d:46:ed:4a:36:ed:69:41:ba:d5:42:81:24:bc:
75:75:ef:0b:ca:bd:7c:40:fa:ef:f9:0f:06:fa:0e:
66:2c:e3:39:e4:72:c8:14:62:41:e4:b8:63:be:dc:
ad:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C9:D4:BC:17:BD:99:FD:20:2F:11:05:6A:4D:E9:8E:A6:68:28:DE
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F1A84BA07CAC11EF8CACCF56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:8e:1a:d3:d0:7f:e5:fd:43:02:4d:4d:be:73:58:95:80:83:
d8:8f:da:7f:38:97:6e:13:3a:37:6f:41:c5:28:61:ab:ed:23:
46:0f:c3:97:56:51:9c:c3:b8:db:d4:c1:9e:85:3f:7e:03:df:
ce:d1:b5:72:1b:45:e2:7b:22:94:5d:75:57:be:ac:bf:67:5c:
6d:3a:e3:66:58:d7:ed:59:c4:d7:26:4a:4c:e5:79:d6:0e:d0:
c9:7f:c8:44:3d:b6:6c:d2:d4:d2:60:cb:a1:95:a3:59:f0:03:
f1:2a:b1:88:fb:df:7c:77:a9:cf:bf:72:22:00:7d:eb:75:fa:
bd:ac:56:fd:de:93:6d:77:e6:20:48:c2:76:56:ec:28:08:c0:
f3:91:5b:2a:95:06:72:c3:50:e2:5d:a0:20:4f:00:c6:a1:70:
d1:ea:75:4e:88:45:d2:ee:6c:dd:56:43:b4:cd:c2:4e:97:7b:
65:ad:e1:4c:3c:ac:17:ed:00:fc:fc:34:ae:20:c6:a5:72:e8:
69:c6:75:4e:8a:45:58:15:b6:5a:b0:52:fb:99:0b:3f:2d:9a:
42:3b:fa:a7:b8:4d:ce:ad:81:01:21:94:af:7c:59:c2:9e:0d:
f0:88:44:69:69:55:78:88:bf:8a:7b:7c:21:51:84:bb:a2:fd:
2f:ac:0e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 12:52:16 2024 by rpki-client on console-fra.rpki-client.org