Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/040F870A4F3411EF9475DB74762E951A.roa
File: 040F870A4F3411EF9475DB74762E951A.roa (raw, json)
Hash identifier: 1pfrfpf6u6SAlVh9lHUFMaTTaNgfYSilz96i5d2j5qY=
Subject key identifier: 32:F9:80:91:B0:5A:DE:1B:7B:64:69:1B:13:63:36:E3:DF:9F:80:8D
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 09CE
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/040F870A4F3411EF9475DB74762E951A.roa
Signing time: Wed 31 Jul 2024 11:57:10 +0000
ROA not before: Wed 31 Jul 2024 11:57:06 +0000
ROA not after: Wed 12 Jul 2034 11:57:06 +0000
asID: 2914
IP address blocks: 192.142.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2510 (0x9ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jul 31 11:57:06 2024 GMT
Not After : Jul 12 11:57:06 2034 GMT
Subject: CN=66aa2696-2a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:00:e5:72:46:72:3a:fb:49:81:53:0d:ca:f3:
86:eb:4e:6e:36:25:59:6f:cf:71:6f:dc:7f:51:f1:
34:9d:8e:56:c6:e7:0f:c1:8f:f2:d7:4d:50:69:7c:
95:9b:fd:80:74:9b:93:5e:16:cf:e0:ab:5a:3e:91:
47:ba:7e:8c:f6:54:00:c7:6d:08:71:c4:78:86:51:
7c:b3:d6:aa:06:a5:ff:29:b8:a3:6d:dd:a7:3e:4d:
ad:2f:35:ac:cf:0f:38:f5:ea:6b:01:a8:c2:a9:fb:
3b:00:17:a9:3d:74:cf:d6:f4:97:15:31:ed:19:cb:
44:da:d2:ea:c5:ee:42:c6:3c:8d:88:dd:6f:5c:a1:
70:f6:44:66:4e:be:1c:08:7f:c8:08:4f:da:b4:44:
ef:65:b3:61:c1:f1:f5:1b:42:2b:16:54:fc:f5:fa:
75:9f:fd:1b:b7:28:8a:4c:78:c9:59:77:b2:2c:a1:
e6:1c:ef:01:6b:80:46:10:e5:cf:0f:c4:5b:c7:d1:
6c:07:6f:c2:b7:e8:a5:07:0c:50:db:43:98:f3:e9:
2c:a2:6e:70:00:07:84:3e:00:63:08:df:82:28:51:
ca:88:70:12:8a:62:1c:1e:35:bf:c5:4e:88:d9:8a:
d5:17:3e:e0:b5:2e:b7:f2:9f:d7:35:d2:86:3d:8f:
12:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F9:80:91:B0:5A:DE:1B:7B:64:69:1B:13:63:36:E3:DF:9F:80:8D
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/040F870A4F3411EF9475DB74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.140.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:bf:cd:6b:b1:38:d7:68:85:83:95:a2:94:be:4a:bf:d5:cf:
0c:ba:9d:30:3a:13:34:ca:9e:fc:2f:1d:3d:a5:23:a4:ef:2d:
15:ce:59:47:2d:13:aa:e4:af:34:cd:41:7d:5b:9e:a1:3d:38:
77:fa:fc:14:a5:1f:a2:b5:89:af:23:d3:b4:1d:95:5b:ab:55:
a8:93:73:df:3f:69:dd:4a:cb:99:af:51:ba:0f:a4:2d:14:e8:
0e:87:3a:e9:68:81:89:62:32:9c:04:db:e6:e1:20:26:c0:95:
5e:52:81:91:8a:e7:c0:32:8c:9e:9a:30:45:f6:26:54:1c:22:
d5:09:e2:f8:e0:87:7d:c0:0b:cf:e8:4d:bd:15:94:6d:48:92:
c5:3f:71:6b:db:45:76:18:5e:25:bc:74:93:73:63:d6:8e:19:
b6:ac:23:05:01:26:48:6f:f1:7c:10:ce:ea:8c:17:4a:01:4e:
74:95:7a:d4:2f:80:7b:00:e1:d5:14:e8:13:5a:1e:98:3f:71:
61:18:54:02:7b:fd:49:ba:f7:60:31:42:0e:13:08:9e:c6:26:
80:60:ba:fb:62:69:af:e1:1a:34:40:af:88:25:45:dd:8a:35:
90:59:a0:19:21:88:8f:21:bd:73:be:ab:e5:3e:8e:74:43:d2:
76:b7:3f:68
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCc4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNDA3MzExMTU3MDZaFw0zNDA3MTIxMTU3MDZaMBgxFjAU
BgNVBAMTDTY2YWEyNjk2LTJhOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDkAOVyRnI6+0mBUw3K84brTm42JVlvz3Fv3H9R8TSdjlbG5w/Bj/LXTVBp
fJWb/YB0m5NeFs/gq1o+kUe6foz2VADHbQhxxHiGUXyz1qoGpf8puKNt3ac+Ta0v
NazPDzj16msBqMKp+zsAF6k9dM/W9JcVMe0Zy0Ta0urF7kLGPI2I3W9coXD2RGZO
vhwIf8gIT9q0RO9ls2HB8fUbQisWVPz1+nWf/Ru3KIpMeMlZd7IsoeYc7wFrgEYQ
5c8PxFvH0WwHb8K36KUHDFDbQ5jz6SyibnAAB4Q+AGMI34IoUcqIcBKKYhweNb/F
TojZitUXPuC1Lrfyn9c10oY9jxIJAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUMvmA
kbBa3ht7ZGkbE2M249+fgI0wHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzA0MEY4NzBBNEYzNDExRUY5NDc1REI3NDc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALAjowwDQYJKoZIhvcNAQELBQAD
ggEBADu/zWuxONdohYOVopS+Sr/Vzwy6nTA6EzTKnvwvHT2lI6TvLRXOWUctE6rk
rzTNQX1bnqE9OHf6/BSlH6K1ia8j07QdlVurVaiTc98/ad1Ky5mvUboPpC0U6A6H
OulogYliMpwE2+bhICbAlV5SgZGK58AyjJ6aMEX2JlQcItUJ4vjgh33AC8/oTb0V
lG1IksU/cWvbRXYYXiW8dJNzY9aOGbasIwUBJkhv8XwQzuqMF0oBTnSVetQvgHsA
4dUU6BNaHpg/cWEYVAJ7/Um692AxQg4TCJ7GJoBguvtiaa/hGjRAr4glRd2KNZBZ
oBkhiI8hvXO+q+U+jnRD0na3P2g=
-----END CERTIFICATE-----
Generated at Fri Nov 1 12:52:16 2024 by rpki-client on console-fra.rpki-client.org