Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1E18BACE1AA111ECB1508F06D8A014CE.roa
File: 1E18BACE1AA111ECB1508F06D8A014CE.roa (raw, json)
Hash identifier: BLCtvyJ57IuO67hHcvDoPZKv+o2Saz66Nq5ufqw+6vI=
Subject key identifier: F1:7A:B1:4E:0D:1F:07:78:A9:C9:99:F4:AB:2E:39:4C:FB:11:08:C3
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0380
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1E18BACE1AA111ECB1508F06D8A014CE.roa
Signing time: Tue 21 Sep 2021 05:59:44 +0000
ROA not before: Tue 21 Sep 2021 05:59:40 +0000
ROA not after: Wed 10 Sep 2025 05:59:40 +0000
asID: 64286
IP address blocks: 192.142.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Sep 2022 07:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896 (0x380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 21 05:59:40 2021 GMT
Not After : Sep 10 05:59:40 2025 GMT
Subject: CN=614974d0-5759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2e:3b:cb:f8:34:64:13:55:b7:0a:81:4f:c2:
24:af:42:37:fe:66:04:b5:ce:c2:c8:a8:fd:56:c5:
f3:c0:10:41:dd:48:ae:95:1e:56:91:5c:ba:51:c0:
11:32:85:4e:f2:58:f9:ec:db:8a:37:0e:42:ea:cc:
d8:49:b1:95:e3:65:e0:fc:15:1d:98:d1:72:91:92:
6b:fd:58:c2:06:c9:78:a3:22:1a:a2:c4:b7:a5:44:
ca:35:cf:48:c4:35:95:ee:9d:0f:e5:cc:85:22:17:
a4:cf:ec:df:2c:51:4d:a9:20:80:88:ac:da:1b:c1:
85:84:3a:2e:62:0e:11:2b:3b:a2:a7:72:8e:e2:a1:
7a:28:a1:41:80:38:87:59:f4:9a:fe:37:38:d9:3a:
be:90:67:7b:a3:c5:e9:a4:2b:38:57:fa:6c:fc:bc:
7a:80:33:ce:c5:5a:ef:af:33:13:b2:b5:2d:74:ce:
1d:7e:06:89:0e:97:dd:fd:0d:2b:9b:ae:ab:7b:d6:
2a:e1:85:54:3e:ea:b6:7c:20:f0:fe:d1:fd:31:ad:
a6:70:18:0b:12:00:59:ac:83:95:8e:81:c2:56:ee:
72:e1:09:61:f5:10:e5:97:ac:92:2b:8a:99:5d:5c:
06:ab:d6:4c:44:19:39:36:eb:ae:3f:b6:8e:3e:74:
18:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7A:B1:4E:0D:1F:07:78:A9:C9:99:F4:AB:2E:39:4C:FB:11:08:C3
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1E18BACE1AA111ECB1508F06D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.170.0/24
Signature Algorithm: sha256WithRSAEncryption
21:92:b5:a7:5e:73:4e:7d:7b:42:a9:74:e4:da:f9:19:2e:fe:
06:19:09:95:f6:88:08:d7:d7:ba:2a:7e:dc:73:45:0c:87:fe:
7e:dc:ab:cf:69:08:44:59:47:cb:28:02:b4:6a:e6:25:a3:9b:
5f:f3:9b:a8:66:5b:63:7b:ad:be:06:27:22:cf:d2:b5:3a:d3:
cf:57:71:78:4b:77:f5:26:88:31:9a:4b:01:82:1b:b0:ef:1d:
29:93:32:9b:cc:14:dd:3a:32:8d:47:ae:e7:9c:43:f8:d1:f6:
1c:c8:42:29:e4:07:2f:91:81:f4:f4:0d:c0:4b:37:48:42:bc:
12:ee:c2:fb:32:f7:5a:ac:6c:91:19:a4:9a:37:2b:73:e5:3e:
26:5d:1e:a6:d6:0e:d7:f3:0c:61:3a:64:c3:8f:73:8a:e8:ab:
d1:9f:24:da:5e:7d:42:47:2c:24:b7:19:3f:08:5d:b7:7b:10:
1e:74:c0:38:ff:8d:72:7a:0f:f8:15:31:98:dc:22:c9:55:c9:
9f:80:ef:1f:1b:d0:55:3d:82:8e:b8:6e:71:49:8d:1b:2a:41:
46:63:7c:95:5b:91:97:f8:9e:b3:14:bf:bf:c5:2d:96:3f:07:
36:8b:3c:b3:76:96:c5:ed:b3:c4:64:32:d7:dd:9e:ab:94:cf:
91:59:86:68
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMTA5MjEwNTU5NDBaFw0yNTA5MTAwNTU5NDBaMBgxFjAU
BgNVBAMMDTYxNDk3NGQwLTU3NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDnLjvL+DRkE1W3CoFPwiSvQjf+ZgS1zsLIqP1WxfPAEEHdSK6VHlaRXLpR
wBEyhU7yWPns24o3DkLqzNhJsZXjZeD8FR2Y0XKRkmv9WMIGyXijIhqixLelRMo1
z0jENZXunQ/lzIUiF6TP7N8sUU2pIICIrNobwYWEOi5iDhErO6Knco7ioXoooUGA
OIdZ9Jr+NzjZOr6QZ3ujxemkKzhX+mz8vHqAM87FWu+vMxOytS10zh1+BokOl939
DSubrqt71irhhVQ+6rZ8IPD+0f0xraZwGAsSAFmsg5WOgcJW7nLhCWH1EOWXrJIr
ipldXAar1kxEGTk2664/to4+dBgbAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU8Xqx
Tg0fB3ipyZn0qy45TPsRCMMwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzFFMThCQUNFMUFBMTExRUNCMTUwOEYwNkQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAjqowDQYJKoZIhvcNAQELBQAD
ggEBACGStadec059e0KpdOTa+Rku/gYZCZX2iAjX17oqftxzRQyH/n7cq89pCERZ
R8soArRq5iWjm1/zm6hmW2N7rb4GJyLP0rU6089XcXhLd/UmiDGaSwGCG7DvHSmT
MpvMFN06Mo1HruecQ/jR9hzIQinkBy+RgfT0DcBLN0hCvBLuwvsy91qsbJEZpJo3
K3PlPiZdHqbWDtfzDGE6ZMOPc4roq9GfJNpefUJHLCS3GT8IXbd7EB50wDj/jXJ6
D/gVMZjcIslVyZ+A7x8b0FU9go64bnFJjRsqQUZjfJVbkZf4nrMUv7/FLZY/BzaL
PLN2lsXts8RkMtfdnquUz5FZhmg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org