Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FF3B1BCCC4AF11EE8D747AAD775412E6.roa
File: FF3B1BCCC4AF11EE8D747AAD775412E6.roa (raw, json)
Hash identifier: UPRgPOZ0Wb07Fk4owzD2Ib0Ls1JgxWi1lt1GXbBXL4g=
Subject key identifier: 55:2C:3D:CB:B5:DD:2A:97:4A:ED:B1:11:0A:7D:EB:62:1C:51:EA:7A
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 08B1
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FF3B1BCCC4AF11EE8D747AAD775412E6.roa
Signing time: Tue 06 Feb 2024 05:24:28 +0000
ROA not before: Tue 06 Feb 2024 05:24:22 +0000
ROA not after: Wed 08 Feb 2034 05:24:22 +0000
asID: 205663
IP address blocks: 192.142.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 05:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2225 (0x8b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Feb 6 05:24:22 2024 GMT
Not After : Feb 8 05:24:22 2034 GMT
Subject: CN=65c1c28b-7907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8f:00:41:fc:0f:c2:3c:e3:08:59:71:a0:06:
66:9c:b6:88:91:fc:ec:df:73:4b:91:19:43:32:76:
c9:59:aa:ce:91:f4:cc:44:17:7a:84:5b:b6:5d:11:
83:e9:f3:48:fd:71:a1:03:13:07:1f:fb:af:9b:89:
e2:39:e5:01:eb:5f:81:10:a4:e5:ab:4d:31:ad:08:
92:fa:f3:d6:07:ea:05:3c:58:f9:48:01:0e:93:dd:
76:54:eb:ad:06:f5:45:66:0c:d2:da:bf:d2:13:e6:
7b:14:bf:2e:4c:8d:c3:4e:88:24:c2:43:e8:6f:99:
53:45:62:1a:64:a4:47:28:92:92:e4:4c:29:c4:19:
03:19:d4:15:e3:b8:d4:4d:3a:24:f6:2d:5f:7f:f7:
d4:19:8a:3c:9b:c1:e5:e9:bb:a5:93:d3:20:1b:5e:
b5:5f:a2:59:2d:9b:9a:44:b5:df:ac:30:e2:14:69:
e4:ee:95:bc:76:1f:b7:40:8d:66:d1:ba:d6:3c:4c:
95:55:68:47:6d:ae:2c:31:b0:43:20:61:82:64:fa:
b7:3d:96:55:7e:c5:d1:ab:13:f0:1b:aa:3b:b6:7a:
79:81:54:59:87:aa:6f:80:6c:37:52:ce:77:4e:bf:
7d:67:ae:20:be:1f:27:9a:51:ce:61:ce:ad:29:a3:
6c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2C:3D:CB:B5:DD:2A:97:4A:ED:B1:11:0A:7D:EB:62:1C:51:EA:7A
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FF3B1BCCC4AF11EE8D747AAD775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.29.0/24
Signature Algorithm: sha256WithRSAEncryption
90:0d:82:c5:f0:29:cb:80:73:f8:f2:65:9b:ca:d4:d2:56:1d:
38:6c:ca:92:72:19:1f:f7:a9:a7:70:5a:c7:4d:16:3f:b9:bf:
69:0b:67:40:c4:96:2c:11:5c:ac:75:69:ad:10:e3:ef:26:de:
63:25:f3:87:c3:16:7e:68:7e:5f:04:2e:6c:9a:d1:4a:8a:a2:
aa:90:e2:54:df:df:b9:de:67:3f:af:65:1f:ab:cb:bc:ed:37:
ab:de:ba:35:61:c4:0f:81:4d:ea:41:43:d5:d1:c2:b9:37:7b:
b7:71:23:ff:3f:d7:63:ba:17:64:2d:db:ef:4d:93:8b:6d:8c:
4d:c4:b7:03:7d:13:47:db:f2:60:f3:9c:4e:20:4d:16:c9:10:
5e:b8:7b:00:35:54:f4:d1:64:b0:3f:7e:67:9a:e8:e0:fb:7d:
af:57:23:90:56:78:74:06:fa:c3:0d:2e:43:87:05:37:f3:bb:
d1:f3:c5:f3:40:02:87:63:b6:2a:70:e8:e6:5c:a9:8d:ec:95:
b4:a5:26:86:9a:87:11:91:ca:6c:1a:da:72:cd:7d:c4:bd:3a:
02:22:5f:7a:9c:f0:64:21:9d:8a:6f:cc:76:82:a4:6d:c4:7e:
0b:ac:97:36:a4:95:3e:d9:a0:24:f1:6e:11:a1:b5:cd:42:ab:
a2:30:90:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org