Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FFDAFEF405EA11EF8A478629017001B1.roa
File: FFDAFEF405EA11EF8A478629017001B1.roa (raw, json)
Hash identifier: oabLOCxOCpVHe4/1AsorTaa01uXxd4awg8YJUBMEA7s=
Subject key identifier: 85:A3:E7:8B:A7:AE:BD:A5:60:59:D5:0A:CB:EB:62:33:99:80:99:42
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0948
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FFDAFEF405EA11EF8A478629017001B1.roa
Signing time: Mon 29 Apr 2024 05:40:34 +0000
ROA not before: Mon 29 Apr 2024 05:40:31 +0000
ROA not after: Wed 19 Apr 2034 05:40:31 +0000
asID: 141759
IP address blocks: 192.142.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2376 (0x948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Apr 29 05:40:31 2024 GMT
Not After : Apr 19 05:40:31 2034 GMT
Subject: CN=662f32d2-6345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f5:77:05:f7:76:8e:6f:ce:e6:04:79:52:d9:
43:23:85:8f:bc:b0:2e:3b:85:7b:38:57:85:01:ee:
30:ca:39:75:36:db:06:6a:87:cd:93:9b:f0:7a:59:
6a:69:ab:4d:9e:bf:36:1d:96:ec:82:1e:3b:2a:7c:
74:ee:26:64:b0:74:2a:f9:82:18:7c:b7:21:9f:1e:
8c:ce:c8:47:c6:47:cb:bd:08:47:f4:56:5e:ec:f2:
66:28:8d:f4:c0:c3:57:aa:3b:2a:cd:48:75:c0:72:
5f:c0:fb:3f:6e:80:84:be:62:56:7f:35:fe:70:1f:
f2:05:87:d6:bb:91:f9:87:98:1a:27:bb:ff:fc:07:
00:b1:59:2b:ef:14:d2:a5:23:57:99:06:08:a5:81:
af:8e:77:30:26:04:86:37:fb:d4:ab:bd:37:62:59:
74:b2:1e:d7:fe:c4:b7:27:11:b0:8b:49:16:03:70:
d7:2a:f7:bd:f7:6b:54:fe:02:0c:fd:84:69:38:db:
1a:f8:a7:71:e8:a0:84:4c:74:6a:56:bd:5e:4e:8d:
42:a1:e0:2a:3a:6f:d4:48:0c:f8:3b:4b:6b:92:4c:
ee:8e:42:e3:37:53:0b:69:b2:3e:ad:16:91:f0:c4:
03:1f:26:84:af:e9:ec:e1:9b:95:e0:48:a3:4d:5f:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A3:E7:8B:A7:AE:BD:A5:60:59:D5:0A:CB:EB:62:33:99:80:99:42
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FFDAFEF405EA11EF8A478629017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.29.0/24
Signature Algorithm: sha256WithRSAEncryption
03:8c:58:b0:af:90:e4:4e:ff:99:f9:8d:a2:f9:11:6f:2d:b1:
ea:b3:6d:37:df:af:78:4e:09:fa:cf:a7:09:7a:cd:93:5a:d3:
92:b5:af:a8:ba:ac:2a:9f:7a:e7:a2:76:0c:f7:b6:83:9b:aa:
3f:cc:85:eb:2b:fd:a7:bb:87:e0:1f:f5:32:de:45:f3:fa:75:
75:8d:31:9f:83:5f:dd:a0:6a:c1:f0:8e:44:9e:4c:2a:68:21:
7b:33:51:36:55:5b:91:4c:3f:de:95:fb:26:38:9d:e1:d9:35:
6b:f7:1f:42:2e:a9:c1:84:95:8d:9b:b8:5b:17:7a:99:e6:d7:
19:66:a4:e0:2d:3d:6d:74:ca:66:92:32:ad:9c:b5:46:19:1b:
ba:d3:bd:82:70:7d:b6:81:c3:d6:1b:66:64:48:17:ba:56:9d:
3d:79:d3:22:cb:f8:2c:16:aa:b6:88:d4:a0:46:15:16:b6:a9:
bc:ce:4b:ed:07:0e:c9:15:47:72:52:58:4a:b7:c5:f2:8c:d5:
0b:b8:eb:ad:b0:7e:1d:dc:df:7d:42:dc:f8:5b:9e:87:53:97:
43:ec:cf:3e:3b:4f:20:b4:c3:42:5c:6a:e2:33:68:1b:fb:c6:
7f:f6:65:d3:3d:df:bd:32:41:9e:80:b6:32:71:a1:bf:42:c0:
ff:31:ce:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 12:52:16 2024 by rpki-client on console-fra.rpki-client.org