Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663CEE/2E98855883BE11EA9D53D930F8AEA228/762EAC9083DB11EA9C64014EF8AEA228.roa
File: 762EAC9083DB11EA9C64014EF8AEA228.roa (raw, json)
Hash identifier: jBkp8kyX9xTOD95yoyBEUbobGKY/B/LufLKKfnjtkFc=
Subject key identifier: 29:53:17:58:EA:24:59:48:8C:DA:AA:BE:19:68:9A:26:0E:0D:51:FB
Certificate issuer: /CN=F3663CEEAR/serialNumber=E7AE8FC09CF807DED3463DDB4200151BA50A559F
Certificate serial: 03
Authority key identifier: E7:AE:8F:C0:9C:F8:07:DE:D3:46:3D:DB:42:00:15:1B:A5:0A:55:9F
Authority info access: rsync://rpki.afrinic.net/repository/arin/566PwJz4B97TRj3bQgAVG6UKVZ8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/2E98855883BE11EA9D53D930F8AEA228/762EAC9083DB11EA9C64014EF8AEA228.roa
Signing time: Tue 21 Apr 2020 14:22:00 +0000
ROA not before: Tue 21 Apr 2020 14:21:47 +0000
ROA not after: Mon 29 Jul 2030 14:21:47 +0000
asID: 327693
IP address blocks: 160.119.136.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 13 Nov 2023 08:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3663CEEAR/serialNumber=E7AE8FC09CF807DED3463DDB4200151BA50A559F
Validity
Not Before: Apr 21 14:21:47 2020 GMT
Not After : Jul 29 14:21:47 2030 GMT
Subject: CN=5e9f0187-72b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:13:80:d4:f9:3d:4d:0f:ee:9c:92:f7:1b:be:
2d:59:0b:66:1e:15:d1:74:84:e9:f1:3b:d5:a4:e2:
c4:b3:c8:92:53:26:7a:58:d9:ed:82:11:49:0f:65:
a3:8d:aa:50:78:70:8a:bc:21:13:33:2d:f2:a4:2b:
5f:ad:c8:dd:99:3e:58:f0:de:79:82:50:29:77:fe:
bf:a9:fd:4b:b3:cf:1e:3e:a9:38:cf:b5:d2:e9:7a:
bd:fa:2d:81:f5:4d:c0:40:4d:75:90:33:3f:87:30:
0c:63:82:d5:45:e7:61:fd:b1:56:4f:ca:06:8f:e5:
08:81:fd:40:7a:27:4b:46:1e:e5:ed:fd:1d:ef:a8:
e2:91:a3:b9:9e:99:e0:76:a7:8c:9a:b8:5f:a4:6b:
2c:ad:5e:c5:52:73:9e:7e:31:7d:40:8f:08:29:d9:
10:f4:73:7b:0c:d3:0b:52:79:e0:5d:5e:34:75:01:
9a:fb:f1:cd:ed:be:d3:b3:42:01:c0:bd:bb:94:ee:
78:91:c7:5d:cb:d3:fb:ba:65:44:62:e8:6f:3d:15:
71:2f:15:4d:14:68:30:4d:62:10:40:a5:a6:ab:7f:
40:95:ee:a8:f0:9a:f9:15:1b:fb:79:49:42:dd:c4:
06:a7:e2:56:8b:24:f8:9d:66:76:5c:6b:0a:63:3b:
56:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:53:17:58:EA:24:59:48:8C:DA:AA:BE:19:68:9A:26:0E:0D:51:FB
X509v3 Authority Key Identifier:
keyid:E7:AE:8F:C0:9C:F8:07:DE:D3:46:3D:DB:42:00:15:1B:A5:0A:55:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/2E98855883BE11EA9D53D930F8AEA228/566PwJz4B97TRj3bQgAVG6UKVZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/566PwJz4B97TRj3bQgAVG6UKVZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/2E98855883BE11EA9D53D930F8AEA228/762EAC9083DB11EA9C64014EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.119.136.0/21
Signature Algorithm: sha256WithRSAEncryption
89:d6:48:0a:1c:2a:dd:a0:d5:7a:13:54:57:3e:ad:3c:84:64:
86:84:31:73:0a:2b:96:29:a3:d9:ed:57:99:28:8c:5c:b3:9b:
14:23:8d:f6:16:2d:ea:a8:7a:f9:2e:6f:f9:d5:e8:0c:8a:20:
56:32:0a:38:9e:1c:be:93:ed:6b:cd:b3:95:70:8c:8b:90:8a:
0a:ac:b6:c2:d5:2e:dd:cf:ba:d5:5d:6f:a3:ff:81:f5:61:06:
eb:1a:5d:bb:8c:f9:43:71:23:51:3a:81:38:7a:f3:65:09:2e:
c1:e4:9b:e7:75:83:e5:ff:1c:d7:dc:f9:c7:c4:13:26:96:89:
ca:ef:4b:31:69:5b:82:68:61:ff:14:bd:4c:39:24:b4:9d:1b:
85:41:a9:de:4d:9b:b2:eb:43:07:96:d8:f8:4c:37:e3:56:6d:
d6:32:cb:82:86:88:97:0b:c1:73:f9:1d:6d:90:04:00:94:2a:
78:58:45:33:03:8e:87:38:fe:d8:47:90:5a:22:e5:f8:cf:f9:
36:ab:95:16:1c:55:20:21:66:ef:7a:e4:d5:b2:88:54:0e:02:
85:cd:a8:62:c9:2b:f1:5c:e6:e1:8f:1a:d8:35:5d:d3:d8:44:
27:27:4f:0b:67:69:fd:bd:43:fd:3f:11:c5:4c:75:4d:9a:f6:
f1:c4:27:71
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBAzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY2
M0NFRUFSMTEwLwYDVQQFEyhFN0FFOEZDMDlDRjgwN0RFRDM0NjNEREI0MjAwMTUx
QkE1MEE1NTlGMB4XDTIwMDQyMTE0MjE0N1oXDTMwMDcyOTE0MjE0N1owGDEWMBQG
A1UEAxMNNWU5ZjAxODctNzJiNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOwTgNT5PU0P7pyS9xu+LVkLZh4V0XSE6fE71aTixLPIklMmeljZ7YIRSQ9l
o42qUHhwirwhEzMt8qQrX63I3Zk+WPDeeYJQKXf+v6n9S7PPHj6pOM+10ul6vfot
gfVNwEBNdZAzP4cwDGOC1UXnYf2xVk/KBo/lCIH9QHonS0Ye5e39He+o4pGjuZ6Z
4HanjJq4X6RrLK1exVJznn4xfUCPCCnZEPRzewzTC1J54F1eNHUBmvvxze2+07NC
AcC9u5TueJHHXcvT+7plRGLobz0VcS8VTRRoME1iEEClpqt/QJXuqPCa+RUb+3lJ
Qt3EBqfiVosk+J1mdlxrCmM7Vm8CAwEAAaOCAqIwggKeMB0GA1UdDgQWBBQpUxdY
6iRZSIzaqr4ZaJomDg1R+zAfBgNVHSMEGDAWgBTnro/AnPgH3tNGPdtCABUbpQpV
nzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NjNDRUUvMkU5ODg1NTg4M0JFMTFFQTlENTNEOTMwRjhBRUEyMjgvNTY2UHdK
ejRCOTdUUmozYlFnQVZHNlVLVlo4LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
NTY2UHdKejRCOTdUUmozYlFnQVZHNlVLVlo4LmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjNDRUUvMkU5ODg1NTg4M0JFMTFFQTlENTNEOTMwRjhBRUEy
MjgvNzYyRUFDOTA4M0RCMTFFQTlDNjQwMTRFRjhBRUEyMjgucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA6B3iDANBgkqhkiG9w0BAQsFAAOC
AQEAidZIChwq3aDVehNUVz6tPIRkhoQxcworlimj2e1XmSiMXLObFCON9hYt6qh6
+S5v+dXoDIogVjIKOJ4cvpPta82zlXCMi5CKCqy2wtUu3c+61V1vo/+B9WEG6xpd
u4z5Q3EjUTqBOHrzZQkuweSb53WD5f8c19z5x8QTJpaJyu9LMWlbgmhh/xS9TDkk
tJ0bhUGp3k2bsutDB5bY+Ew341Zt1jLLgoaIlwvBc/kdbZAEAJQqeFhFMwOOhzj+
2EeQWiLl+M/5NquVFhxVICFm73rk1bKIVA4Chc2oYskr8Vzm4Y8a2DVd09hEJydP
C2dp/b1D/T8RxUx1TZr28cQncQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org