Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F44603A23ABC11EF8B314FBC762E951A.roa
File: F44603A23ABC11EF8B314FBC762E951A.roa (raw, json)
Hash identifier: NkWmTVn4arA1UIEGXmhNpYiECf34YGNKW3ZzUQsOhkw=
Subject key identifier: B9:93:8B:97:10:97:6A:08:6A:AE:4E:C4:FC:12:9C:42:99:AC:3C:B1
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 09A5
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F44603A23ABC11EF8B314FBC762E951A.roa
Signing time: Fri 05 Jul 2024 10:54:30 +0000
ROA not before: Fri 05 Jul 2024 10:54:26 +0000
ROA not after: Wed 12 Jul 2034 10:54:26 +0000
asID: 64286
IP address blocks: 192.142.80.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:12:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2469 (0x9a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jul 5 10:54:26 2024 GMT
Not After : Jul 12 10:54:26 2034 GMT
Subject: CN=6687d0e6-645d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:00:b6:1e:f5:32:4b:93:8d:80:26:6f:a4:a3:
32:3f:c1:18:bb:45:7e:3b:4b:ae:7e:fa:cd:a2:12:
88:95:73:93:63:63:56:fb:85:2a:e4:39:96:ea:fc:
cc:56:65:89:d3:b3:9a:b1:29:bd:63:37:dd:b3:e6:
47:e7:b2:6c:03:ad:cc:60:ab:d6:8e:95:96:9c:93:
e9:91:16:13:dd:0f:c7:81:b5:fc:a5:3b:17:71:b6:
55:16:9b:2b:e7:e3:91:b5:75:57:97:85:6e:a6:1c:
83:c1:46:91:43:e3:19:b5:ed:3e:af:9b:02:b7:82:
94:7d:19:9b:e3:e5:10:4a:ca:3b:7b:99:e2:93:e7:
fd:4c:48:17:e5:2a:60:1a:10:2c:d7:9e:a8:d4:4e:
90:c7:17:c1:79:1a:80:d6:44:5f:54:d3:96:ee:01:
73:ee:4d:77:53:88:46:01:53:b4:7a:05:d8:2e:06:
aa:85:9b:a4:19:c4:0c:07:fe:a2:a9:66:da:9c:93:
00:09:c9:a9:32:26:87:a7:c2:ca:2d:d2:05:05:31:
61:8a:95:4c:79:d8:d5:6a:44:41:fa:1b:75:2e:af:
64:dc:6a:e4:c3:c1:ec:e5:47:03:00:7f:22:1c:35:
a1:a1:16:4b:3b:83:b9:5e:ea:1e:16:f5:d9:a5:89:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:93:8B:97:10:97:6A:08:6A:AE:4E:C4:FC:12:9C:42:99:AC:3C:B1
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F44603A23ABC11EF8B314FBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.80.0/20
Signature Algorithm: sha256WithRSAEncryption
45:70:93:fb:bb:10:7a:9f:db:13:cc:e2:35:4d:16:3d:b1:52:
80:38:23:85:ea:a7:36:61:76:d7:be:6b:c6:87:63:bd:37:bf:
c0:79:a2:c9:33:ad:c7:b5:74:bb:bf:67:6e:a4:4a:f5:02:ba:
40:48:93:1e:89:75:e2:96:93:f2:e9:f0:93:48:27:9d:10:b7:
9b:59:4f:bc:a3:10:3f:f7:9b:83:25:7f:8a:29:2e:f3:62:b0:
69:81:11:77:f6:0f:03:18:69:25:9c:31:11:b6:9b:ab:4d:6f:
2d:02:77:9a:2e:19:d2:f7:d2:5e:65:6e:fc:da:dc:87:d4:51:
22:3d:76:72:47:f9:e7:5a:69:04:fc:8b:d9:20:ae:13:13:40:
d1:f8:68:bc:18:2f:63:6d:70:78:30:69:ed:e0:d6:d5:5e:13:
23:80:f6:70:15:54:82:4c:bd:da:fd:d5:95:8f:3a:2e:d2:0b:
4b:d1:15:d2:02:29:bc:e9:7f:0c:e3:cc:4d:3f:06:52:cc:32:
0b:1a:aa:50:16:c1:45:11:8d:00:16:8c:62:45:a7:52:69:c6:
65:92:b3:91:f4:fe:f1:9f:9b:94:02:22:68:55:15:bd:74:9f:
e3:8c:d9:e2:77:c2:0a:c1:b9:36:74:29:10:c0:eb:87:04:38:
cc:6f:34:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 12:52:16 2024 by rpki-client on console-fra.rpki-client.org