Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FF9466E6AE6011EF93DD45A1762E951A.roa
File: FF9466E6AE6011EF93DD45A1762E951A.roa (raw, json)
Hash identifier: YdxYRRa+JrgShMz85kr6vCh2A8GkKIwKh6WJPoeIB6U=
Subject key identifier: 89:FB:13:11:21:7C:F4:8A:ED:EE:FA:8B:7A:7A:7B:41:AE:E8:66:3B
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B38
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FF9466E6AE6011EF93DD45A1762E951A.roa
Signing time: Fri 29 Nov 2024 14:48:30 +0000
ROA not before: Fri 29 Nov 2024 14:48:26 +0000
ROA not after: Wed 29 Nov 2034 14:48:26 +0000
asID: 6206
IP address blocks: 192.142.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 08:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2872 (0xb38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Nov 29 14:48:26 2024 GMT
Not After : Nov 29 14:48:26 2034 GMT
Subject: CN=6749d43e-2a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f8:c9:ea:bc:4d:03:c7:ba:36:cd:5d:cc:e5:
f5:91:70:3e:d6:96:01:ed:b0:a1:97:ed:95:de:ff:
c1:36:ac:18:48:91:c2:71:65:35:e7:ef:fc:a5:97:
a5:56:9c:65:8d:8a:80:cd:37:a1:86:5e:d5:13:65:
2d:c4:cf:d4:d2:13:18:dc:a5:2f:72:1f:b8:5d:f2:
cc:cb:e5:40:3e:4a:50:a8:f6:70:e4:ab:a7:a8:f2:
d5:6c:ee:f1:17:ff:aa:2f:37:f2:a9:09:89:ca:77:
4f:cd:17:2e:b5:d7:2a:e9:3d:74:89:c2:49:30:d6:
c0:9d:fc:07:08:19:71:86:c8:b6:15:17:2a:61:e1:
d6:9c:f5:ae:12:8c:cc:72:9a:cd:44:00:6c:6e:04:
39:b3:71:88:c5:87:5c:c4:83:88:c7:c5:e7:78:37:
d0:74:02:70:43:0e:cd:53:8f:67:13:69:57:08:90:
0a:c0:4e:5a:f7:30:13:0c:66:09:c8:e1:3a:d5:a4:
75:30:67:58:63:19:cb:19:e8:08:ac:5e:85:81:d5:
c1:e1:84:9f:c5:d6:86:a4:50:5b:c6:f8:c2:67:74:
05:5b:8a:68:c0:12:42:9f:ff:ed:13:05:d1:71:ab:
1b:3d:9d:ef:ec:37:67:05:55:45:88:42:73:cf:a2:
87:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FB:13:11:21:7C:F4:8A:ED:EE:FA:8B:7A:7A:7B:41:AE:E8:66:3B
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FF9466E6AE6011EF93DD45A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.67.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b0:da:54:98:40:55:ee:dd:ce:6d:bf:f2:9a:c8:9a:c1:64:
28:a4:65:77:86:91:ae:86:3b:77:b6:b0:6b:d2:83:82:09:76:
d7:4b:a6:ff:85:fc:45:35:1c:bb:83:b1:f0:84:50:fe:cf:77:
5c:38:7d:85:ce:29:82:5d:0e:34:77:58:5e:cc:54:db:dc:87:
8f:a3:6a:c5:ed:89:02:0a:e8:91:bc:28:79:2e:ad:4c:f4:d1:
b3:51:69:09:5b:2d:ac:0a:d5:02:31:e5:94:43:ac:0b:d1:3a:
00:10:9e:aa:2e:7f:24:04:71:e3:f0:43:b2:dc:33:75:23:e9:
5a:60:67:95:ff:3c:c9:c6:91:96:7f:b6:09:95:2b:07:f0:35:
0d:5d:4e:9b:bb:1a:7f:8d:2b:fa:3d:92:c3:1e:27:2b:86:53:
07:a5:34:fc:7b:8f:81:5b:c8:67:58:c6:82:a4:37:98:be:b4:
46:e2:24:4b:33:22:67:55:4c:33:64:39:57:18:6b:02:1d:35:
9e:fc:a0:26:13:09:94:a6:0a:e6:a9:90:11:75:40:9e:73:c0:
22:2a:36:ba:ec:9f:b0:82:3e:6a:8d:45:93:c5:80:e2:fd:33:
24:61:93:17:53:58:1b:fa:eb:ba:da:f2:e9:37:34:20:be:8f:
f2:68:19:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:21:46 2025 by rpki-client