Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1C9A0076959411ED889F89EFF1222468.roa
File: 1C9A0076959411ED889F89EFF1222468.roa (raw, json)
Hash identifier: +BIcgy7d0deITGgSUiPTHKJVjVJxtb23/FVqJDX5rOs=
Subject key identifier: 5A:87:5C:60:D5:86:A6:7A:BC:52:B7:A0:97:A8:62:82:BD:07:66:F8
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 061E
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1C9A0076959411ED889F89EFF1222468.roa
Signing time: Mon 16 Jan 2023 11:51:29 +0000
ROA not before: Mon 16 Jan 2023 11:51:23 +0000
ROA not after: Mon 10 Jan 2033 11:51:23 +0000
asID: 398465
IP address blocks: 192.142.248.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Sep 2023 05:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1566 (0x61e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jan 16 11:51:23 2023 GMT
Not After : Jan 10 11:51:23 2033 GMT
Subject: CN=63c53a41-593d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9b:d1:8e:4e:5d:9e:3c:7a:13:7a:30:23:33:
ff:1c:65:d9:7a:64:6c:71:90:1f:b0:00:ec:1d:28:
9a:a3:95:2b:44:03:f5:f2:c7:5a:bf:45:3f:e4:bf:
35:2d:74:54:88:fc:5f:3b:86:9c:23:96:ab:e6:c3:
be:22:28:8b:3e:49:1d:dd:e7:ed:dc:a2:3b:91:43:
46:37:d3:a3:62:cf:66:32:df:80:0a:64:f1:66:37:
8b:f5:44:cc:96:63:d9:ce:34:c3:5a:f3:7a:33:63:
d7:c7:4c:f1:f1:3c:95:88:2f:ed:ad:2d:74:7b:3a:
0b:49:89:5a:eb:10:9f:22:b6:d9:3d:9a:6a:4f:80:
4b:2c:28:3f:c9:c7:48:47:4f:13:f1:bb:42:e5:2f:
1e:20:5d:34:ea:af:01:eb:b9:19:23:7a:cf:66:fd:
5f:b9:27:33:00:af:41:8a:9d:ca:3f:48:d5:e5:43:
98:e6:07:9a:9f:24:49:53:c8:34:fb:b6:f3:ea:cb:
ed:b6:de:97:5a:f3:1f:4e:04:e1:70:94:71:4b:fb:
7f:b6:5d:63:c4:95:3f:29:62:8c:2f:9c:c8:ee:40:
30:30:8f:c6:4a:a1:89:83:f1:c1:5a:93:1d:1f:ed:
bb:4a:ea:c6:99:17:e1:15:7e:dd:39:a1:ab:79:73:
53:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:87:5C:60:D5:86:A6:7A:BC:52:B7:A0:97:A8:62:82:BD:07:66:F8
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1C9A0076959411ED889F89EFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.248.0/21
Signature Algorithm: sha256WithRSAEncryption
96:38:0d:df:28:0a:36:18:83:eb:56:1d:4e:e6:27:9c:90:86:
b0:79:b7:65:90:cd:9d:7c:3a:89:10:67:4e:4f:0e:96:1b:d4:
52:14:b6:20:4e:24:15:10:72:f5:84:55:8c:94:03:68:b1:6d:
11:39:6b:db:58:13:33:a2:3c:23:16:b8:38:af:20:01:99:31:
1d:8d:1e:82:6f:82:21:d2:23:fa:a2:1c:c6:e8:ea:e4:50:0d:
2a:f8:e4:ce:87:97:72:c7:ab:91:de:a1:e9:f4:4e:5f:10:54:
f1:ef:2d:19:59:e5:f9:d5:f6:53:36:e1:05:75:72:fc:65:6e:
a9:43:30:6e:55:e1:cc:83:58:d4:c4:ad:33:8e:38:7f:42:f3:
cb:86:99:0b:32:e6:31:6a:90:3e:f0:5f:59:3a:98:57:f6:07:
63:53:c1:14:1e:3f:6f:76:89:0f:38:fe:f7:d8:5b:33:c5:87:
cb:9f:09:dd:e6:3c:5c:2e:55:c8:f1:e0:fb:bc:e3:05:ed:32:
73:d8:f8:c0:15:b6:0e:e6:e1:b4:54:50:48:a7:f8:63:ed:4c:
40:af:bb:93:fc:7e:e3:eb:98:58:7b:77:b6:85:bf:b6:21:c7:
6d:49:fc:68:33:06:b7:27:aa:ad:71:1f:c5:fa:52:38:02:c0:
b8:6b:ad:cc
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMzAxMTYxMTUxMjNaFw0zMzAxMTAxMTUxMjNaMBgxFjAU
BgNVBAMMDTYzYzUzYTQxLTU5M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4m9GOTl2ePHoTejAjM/8cZdl6ZGxxkB+wAOwdKJqjlStEA/Xyx1q/RT/k
vzUtdFSI/F87hpwjlqvmw74iKIs+SR3d5+3cojuRQ0Y306Niz2Yy34AKZPFmN4v1
RMyWY9nONMNa83ozY9fHTPHxPJWIL+2tLXR7OgtJiVrrEJ8ittk9mmpPgEssKD/J
x0hHTxPxu0LlLx4gXTTqrwHruRkjes9m/V+5JzMAr0GKnco/SNXlQ5jmB5qfJElT
yDT7tvPqy+223pda8x9OBOFwlHFL+3+2XWPElT8pYowvnMjuQDAwj8ZKoYmD8cFa
kx0f7btK6saZF+EVft05oat5c1NfAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUWodc
YNWGpnq8Uregl6higr0HZvgwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzFDOUEwMDc2OTU5NDExRUQ4ODlGODlFRkYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPAjvgwDQYJKoZIhvcNAQELBQAD
ggEBAJY4Dd8oCjYYg+tWHU7mJ5yQhrB5t2WQzZ18OokQZ05PDpYb1FIUtiBOJBUQ
cvWEVYyUA2ixbRE5a9tYEzOiPCMWuDivIAGZMR2NHoJvgiHSI/qiHMbo6uRQDSr4
5M6Hl3LHq5Heoen0Tl8QVPHvLRlZ5fnV9lM24QV1cvxlbqlDMG5V4cyDWNTErTOO
OH9C88uGmQsy5jFqkD7wX1k6mFf2B2NTwRQeP292iQ84/vfYWzPFh8ufCd3mPFwu
Vcjx4Pu84wXtMnPY+MAVtg7m4bRUUEin+GPtTECvu5P8fuPrmFh7d7aFv7Yhx21J
/GgzBrcnqq1xH8X6UjgCwLhrrcw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org