Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/0EC5276CA51411ECB8CC63B15A40D577.roa
File: 0EC5276CA51411ECB8CC63B15A40D577.roa (raw, json)
Hash identifier: eyNFRPuKwztO6tM+9tfNu7fV9JPbipr8IjdCfYoqF0M=
Subject key identifier: 1B:26:D5:0C:1D:44:EE:A7:FD:F8:CF:F9:F8:B1:26:AE:98:5F:42:1D
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0470
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/0EC5276CA51411ECB8CC63B15A40D577.roa
Signing time: Wed 16 Mar 2022 10:30:11 +0000
ROA not before: Wed 16 Mar 2022 10:30:06 +0000
ROA not after: Wed 15 Mar 2028 10:30:06 +0000
asID: 3223
IP address blocks: 192.142.24.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Aug 2022 08:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1136 (0x470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Mar 16 10:30:06 2022 GMT
Not After : Mar 15 10:30:06 2028 GMT
Subject: CN=6231bc33-4883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:f3:d4:7d:c7:a2:6c:16:b3:ca:02:3a:4b:
5a:20:68:0c:46:24:d1:36:40:d1:0e:3a:aa:d1:c8:
9a:20:d2:8e:99:f4:c0:87:dc:cc:60:3e:89:ca:0f:
54:f2:5a:90:ac:f9:8f:a9:38:7e:fa:6c:05:60:80:
3d:27:37:45:b0:ce:69:90:bd:5d:e2:59:fb:15:7d:
20:c3:36:94:8c:50:d1:75:d8:13:51:d2:86:0f:cd:
e5:36:fa:f1:98:fe:62:1d:96:5b:4f:d7:87:2d:03:
b7:12:d9:29:56:ef:91:3a:ec:c8:12:3e:d9:db:d1:
14:ed:71:61:c0:62:25:19:07:7e:85:f3:53:03:ea:
83:f7:97:76:ee:bd:f8:8b:03:dd:c1:e9:4f:3f:ec:
b2:db:d3:bb:a8:f4:a9:c5:1d:8a:1e:35:99:5f:d3:
13:93:6f:bb:ff:fc:9a:07:d3:64:b8:d8:a1:83:a6:
44:06:bc:3f:e3:22:a8:d1:1a:71:8b:cc:f3:32:7e:
31:6e:e1:cf:96:9f:11:e2:fd:44:b9:84:31:0e:a7:
93:8e:aa:c0:9e:f3:01:53:f8:61:be:a7:6c:8f:2a:
3e:30:87:46:63:be:c5:d7:41:a4:4b:6f:4b:0a:0b:
fe:54:a5:0c:47:af:70:97:f7:e3:3c:56:2a:be:a0:
a9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:26:D5:0C:1D:44:EE:A7:FD:F8:CF:F9:F8:B1:26:AE:98:5F:42:1D
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/0EC5276CA51411ECB8CC63B15A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.24.0/21
Signature Algorithm: sha256WithRSAEncryption
27:30:aa:95:2d:26:23:3e:53:81:ff:92:43:cf:52:a4:d5:c0:
39:8c:f2:13:c0:b5:ee:4d:e9:88:d7:04:81:b4:4e:5d:88:a9:
87:f7:35:3b:f3:d8:27:10:60:39:b9:8b:35:26:57:72:9b:6d:
f7:0b:f4:ca:76:6d:c7:52:92:6e:1f:bd:fd:28:6a:a3:97:0b:
18:32:04:6d:4d:c0:e4:de:f8:65:80:ea:94:bd:e6:34:59:63:
8c:58:c4:15:1c:02:72:ad:7a:ed:f9:7d:9a:f7:4a:b4:1b:c0:
c2:9f:20:25:33:0d:1a:14:f1:c6:2e:ea:4d:de:b8:9d:86:9c:
4e:72:a8:b1:a9:cc:f8:31:f7:1b:aa:83:37:31:62:15:a5:50:
fb:ff:90:16:df:5a:75:d9:ce:85:23:22:7b:de:b2:4b:41:fe:
1d:c5:dc:66:06:2c:d8:d0:f9:e7:fb:fc:a9:32:2e:93:69:12:
0d:8f:48:0e:97:78:49:d3:71:3c:12:18:e0:a0:0f:49:cc:a1:
7a:f0:27:57:db:7a:9f:b0:20:32:be:6e:db:62:5e:9f:2e:84:
3e:c5:41:d4:2d:54:f3:e6:9d:2b:1e:56:37:1c:c6:21:4b:db:
9a:c6:8b:78:11:b0:a6:8a:be:c0:ac:a1:2c:29:22:c6:6e:52:
96:55:74:6b
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBHAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMjAzMTYxMDMwMDZaFw0yODAzMTUxMDMwMDZaMBgxFjAU
BgNVBAMMDTYyMzFiYzMzLTQ4ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCw6vPUfceibBazygI6S1ogaAxGJNE2QNEOOqrRyJog0o6Z9MCH3MxgPonK
D1TyWpCs+Y+pOH76bAVggD0nN0WwzmmQvV3iWfsVfSDDNpSMUNF12BNR0oYPzeU2
+vGY/mIdlltP14ctA7cS2SlW75E67MgSPtnb0RTtcWHAYiUZB36F81MD6oP3l3bu
vfiLA93B6U8/7LLb07uo9KnFHYoeNZlf0xOTb7v//JoH02S42KGDpkQGvD/jIqjR
GnGLzPMyfjFu4c+WnxHi/US5hDEOp5OOqsCe8wFT+GG+p2yPKj4wh0ZjvsXXQaRL
b0sKC/5UpQxHr3CX9+M8Viq+oKljAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUGybV
DB1E7qf9+M/5+LEmrphfQh0wHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzBFQzUyNzZDQTUxNDExRUNCOENDNjNCMTVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPAjhgwDQYJKoZIhvcNAQELBQAD
ggEBACcwqpUtJiM+U4H/kkPPUqTVwDmM8hPAte5N6YjXBIG0Tl2IqYf3NTvz2CcQ
YDm5izUmV3KbbfcL9Mp2bcdSkm4fvf0oaqOXCxgyBG1NwOTe+GWA6pS95jRZY4xY
xBUcAnKteu35fZr3SrQbwMKfICUzDRoU8cYu6k3euJ2GnE5yqLGpzPgx9xuqgzcx
YhWlUPv/kBbfWnXZzoUjInvesktB/h3F3GYGLNjQ+ef7/KkyLpNpEg2PSA6XeEnT
cTwSGOCgD0nMoXrwJ1fbep+wIDK+bttiXp8uhD7FQdQtVPPmnSseVjccxiFL25rG
i3gRsKaKvsCsoSwpIsZuUpZVdGs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org