Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/0C1E8A68743511EC907BAFBF5A40D577.roa
File: 0C1E8A68743511EC907BAFBF5A40D577.roa (raw, json)
Hash identifier: DgbFBl0XlUdsbB+ndCnfg4OJoL7ua03WHJzlkUnLTew=
Subject key identifier: F8:1A:44:A5:97:33:64:86:0C:05:63:E9:73:76:B9:DA:7C:EB:2A:08
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0412
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/0C1E8A68743511EC907BAFBF5A40D577.roa
Signing time: Thu 13 Jan 2022 05:52:53 +0000
ROA not before: Thu 13 Jan 2022 05:52:49 +0000
ROA not after: Tue 13 Jan 2026 05:52:49 +0000
asID: 3223
IP address blocks: 192.142.176.0/21 maxlen: 24
192.142.248.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Aug 2022 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1042 (0x412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jan 13 05:52:49 2022 GMT
Not After : Jan 13 05:52:49 2026 GMT
Subject: CN=61dfbe35-6c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:6a:2d:62:e9:be:fc:29:36:2d:c3:be:ec:
f2:eb:e7:f5:ae:79:64:7b:d6:d8:a6:f9:fc:19:7a:
ee:c5:c7:47:36:12:90:44:32:dd:3f:b8:32:2f:00:
22:24:c1:0a:61:33:51:dd:1d:c5:93:7b:c3:87:fc:
8a:87:78:2c:1c:58:ae:d7:34:5e:c4:f3:68:1c:72:
08:82:4b:83:d9:b5:56:0c:9d:ce:74:a9:5c:48:f1:
57:a7:6c:74:5f:33:4d:ec:c7:8f:34:48:1a:5b:08:
49:e8:72:3b:2d:6c:34:9b:53:bd:ca:3b:25:6b:3f:
b7:e9:c0:23:c6:72:b6:d1:63:7a:8a:bb:e4:7e:e0:
c0:9a:69:04:02:65:d4:af:07:81:2f:d6:c4:07:4d:
bf:5d:82:f5:d5:0c:2f:61:7b:80:d5:bb:80:df:e1:
a7:cf:91:fb:9d:53:d6:0e:b0:ee:e9:21:f1:04:d9:
ab:ab:29:f6:2c:3c:ce:df:a2:bc:cb:d4:85:ad:e5:
d9:76:fa:8c:55:04:8d:0e:6e:01:2b:e6:bc:8e:ad:
9e:45:cc:f8:3e:ac:45:01:af:fe:c7:ab:85:36:6f:
e8:60:e3:5c:b2:15:f6:0e:b3:8f:c7:29:ed:42:45:
c0:69:ed:63:a6:83:02:2b:ab:cb:9b:a9:c4:b5:40:
a5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1A:44:A5:97:33:64:86:0C:05:63:E9:73:76:B9:DA:7C:EB:2A:08
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/0C1E8A68743511EC907BAFBF5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.176.0/21
192.142.248.0/21
Signature Algorithm: sha256WithRSAEncryption
79:93:de:3a:d0:c5:fd:5f:4e:71:00:61:c4:71:3f:00:a0:22:
e4:21:e6:8e:fb:db:f9:93:fc:58:29:b3:06:f0:c8:21:e8:a4:
14:08:13:d6:69:73:0b:30:0a:8a:57:e3:ce:2d:dd:c0:62:e9:
21:aa:32:fa:9a:8b:1d:06:5d:55:a3:0c:82:bc:1f:9a:dc:0a:
f4:be:99:e9:5b:79:5e:2c:6b:fd:da:7f:c0:17:73:d3:c0:26:
4a:fb:f7:ac:bb:2c:ae:dd:5b:55:21:7b:31:17:76:8f:8e:78:
15:05:41:02:46:c6:08:c1:92:b6:55:11:30:aa:5b:ff:0e:37:
c7:1e:06:6c:40:40:ce:f4:1e:e7:07:8b:fc:b8:1d:25:ff:8c:
03:d0:1a:84:fd:f5:55:51:28:91:2a:24:eb:e6:8b:6b:bc:9c:
b5:14:47:45:5d:c1:24:93:31:a6:dd:fe:83:46:1d:19:67:3b:
3c:dc:23:31:2e:13:37:2b:b5:99:7f:a8:43:fd:82:44:61:5c:
d7:77:30:45:28:6a:3d:f4:83:98:bc:7d:9f:96:f3:e5:96:37:
61:b3:e4:a8:c6:d1:34:7c:49:ca:0f:62:02:b4:63:25:be:77:
d6:7d:f2:3d:a0:a0:0e:35:6d:4b:9b:12:a6:a5:cd:ff:e3:f1:
30:6b:55:5a
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICBBIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMjAxMTMwNTUyNDlaFw0yNjAxMTMwNTUyNDlaMBgxFjAU
BgNVBAMMDTYxZGZiZTM1LTZjNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+NGotYum+/Ck2LcO+7PLr5/WueWR71tim+fwZeu7Fx0c2EpBEMt0/uDIv
ACIkwQphM1HdHcWTe8OH/IqHeCwcWK7XNF7E82gccgiCS4PZtVYMnc50qVxI8Ven
bHRfM03sx480SBpbCEnocjstbDSbU73KOyVrP7fpwCPGcrbRY3qKu+R+4MCaaQQC
ZdSvB4Ev1sQHTb9dgvXVDC9he4DVu4Df4afPkfudU9YOsO7pIfEE2aurKfYsPM7f
orzL1IWt5dl2+oxVBI0ObgEr5ryOrZ5FzPg+rEUBr/7Hq4U2b+hg41yyFfYOs4/H
Ke1CRcBp7WOmgwIrq8ubqcS1QKXxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+BpE
pZczZIYMBWPpc3a52nzrKggwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzBDMUU4QTY4NzQzNTExRUM5MDdCQUZCRjVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
JQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAPAjrADBAPAjvgwDQYJKoZIhvcN
AQELBQADggEBAHmT3jrQxf1fTnEAYcRxPwCgIuQh5o772/mT/FgpswbwyCHopBQI
E9ZpcwswCopX484t3cBi6SGqMvqaix0GXVWjDIK8H5rcCvS+melbeV4sa/3af8AX
c9PAJkr796y7LK7dW1UhezEXdo+OeBUFQQJGxgjBkrZVETCqW/8ON8ceBmxAQM70
HucHi/y4HSX/jAPQGoT99VVRKJEqJOvmi2u8nLUUR0VdwSSTMabd/oNGHRlnOzzc
IzEuEzcrtZl/qEP9gkRhXNd3MEUoaj30g5i8fZ+W8+WWN2Gz5KjG0TR8ScoPYgK0
YyW+d9Z98j2goA41bUubEqalzf/j8TBrVVo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org