Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/7D2B79C4A68111EF9FE6188D762E951A.roa
File: 7D2B79C4A68111EF9FE6188D762E951A.roa (raw, json)
Hash identifier: bdLAnPDnnek8CIA0Z3+O/+nFhRTiDnG10jGUb9ZKub4=
Subject key identifier: 84:CE:D4:C4:AD:AE:C9:26:AC:8F:EF:68:26:4B:E9:29:3F:BA:B7:6B
Certificate issuer: /CN=F3690C51AR/serialNumber=1D6738D3BFC611D87DF0DE7403D25DA0F64EB1E0
Certificate serial: 02
Authority key identifier: 1D:67:38:D3:BF:C6:11:D8:7D:F0:DE:74:03:D2:5D:A0:F6:4E:B1:E0
Authority info access: rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/7D2B79C4A68111EF9FE6188D762E951A.roa
Signing time: Tue 19 Nov 2024 14:20:55 +0000
ROA not before: Tue 19 Nov 2024 14:20:52 +0000
ROA not after: Mon 30 Nov 2043 14:20:52 +0000
asID: 328045
IP address blocks: 160.119.80.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 17:28:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3690C51AR/serialNumber=1D6738D3BFC611D87DF0DE7403D25DA0F64EB1E0
Validity
Not Before: Nov 19 14:20:52 2024 GMT
Not After : Nov 30 14:20:52 2043 GMT
Subject: CN=673c9ec7-f619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:9f:b3:05:aa:d3:d9:a2:8c:a7:c0:db:4a:
9f:c6:cb:3c:74:15:ee:83:bf:68:af:c0:cc:04:f3:
12:83:d9:48:14:42:6b:85:e0:f5:98:17:eb:23:78:
83:ca:a1:14:03:e9:4f:5f:ed:65:90:ea:a6:67:6f:
bb:da:8e:3f:91:ec:ea:32:ac:2a:cc:32:54:01:46:
59:bd:32:14:fd:0a:3a:15:31:c5:c4:64:d7:e6:6e:
22:21:42:fb:a3:ca:46:d4:55:05:61:5a:06:90:17:
2c:1f:78:45:3f:91:e6:39:5e:6c:59:d1:9b:b9:f4:
74:bc:a1:59:60:80:9d:b3:a9:ea:da:d8:de:c4:08:
b8:74:80:28:53:32:08:63:f4:47:44:f1:28:6a:44:
44:56:cb:5b:45:92:49:42:f1:2d:65:69:02:d1:9d:
3c:ff:f7:e4:47:c3:2a:15:17:a2:c2:3c:df:66:f7:
ea:6f:c1:94:cf:a9:88:0d:fc:3d:af:fd:f0:66:c2:
bf:d4:7c:cc:5e:90:0f:64:4e:55:f6:3c:86:4a:1c:
1c:a0:70:0a:d1:48:a4:3e:0d:87:11:3d:e7:d8:34:
a0:a3:0c:4b:b8:b5:d7:79:db:29:fa:6e:08:ed:b3:
6f:09:27:79:94:20:4e:66:d5:61:3e:f3:b0:aa:f9:
c5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CE:D4:C4:AD:AE:C9:26:AC:8F:EF:68:26:4B:E9:29:3F:BA:B7:6B
X509v3 Authority Key Identifier:
keyid:1D:67:38:D3:BF:C6:11:D8:7D:F0:DE:74:03:D2:5D:A0:F6:4E:B1:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/7D2B79C4A68111EF9FE6188D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.119.80.0/21
Signature Algorithm: sha256WithRSAEncryption
69:70:0e:f6:d9:e9:c1:dd:a9:04:f5:a1:f5:40:50:a5:f2:90:
77:14:5d:05:e9:57:31:c1:73:88:66:76:17:6c:34:e5:61:8c:
c0:e5:ba:15:eb:f0:cd:ff:60:74:90:47:9a:d7:fe:aa:5a:31:
f8:58:6a:5a:ac:b8:5f:a2:70:6a:d4:1b:e2:07:b6:22:65:ad:
a9:d7:a5:d4:97:a1:63:22:31:f6:59:d7:e6:b0:04:04:97:9e:
84:42:8e:c0:39:a8:77:94:3c:41:20:c9:15:a9:6f:3f:99:a8:
37:5e:88:40:37:d0:14:4f:17:4d:c4:44:12:92:f9:73:29:1b:
58:cf:52:7e:b7:4b:10:db:3d:c2:8d:9b:87:a1:fd:ac:1f:89:
ee:32:70:c7:03:d1:84:45:f9:25:cb:c8:72:92:d2:c5:9f:83:
63:0d:aa:67:14:fe:a6:a1:d6:df:ee:92:00:50:e5:05:0d:79:
a8:d1:29:90:ce:6b:7a:0f:6b:ac:6b:b7:01:09:93:6b:96:71:
2f:55:1e:88:d1:6e:aa:2d:d8:9c:1d:5c:43:70:47:c6:d0:9c:
25:39:da:6c:ce:2b:7f:23:78:93:4a:c7:e9:1e:08:3c:44:c3:
57:8e:b5:89:42:2c:61:3d:f8:c3:6a:9d:47:77:01:72:ea:c4:
7e:e2:d4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 19:24:40 2024 by rpki-client on console-fra.rpki-client.org