Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1E9FEF14054411EEB058A1164AD9E6FC.roa
File: 1E9FEF14054411EEB058A1164AD9E6FC.roa (raw, json)
Hash identifier: 6Vpw1MLgp2spZP2B2Plr+/pb4XT5HCPeSbV8eMbrE/0=
Subject key identifier: 98:BB:B2:DC:9C:82:28:70:67:15:1A:0C:D2:77:D1:4B:96:8E:9F:FC
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 070B
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1E9FEF14054411EEB058A1164AD9E6FC.roa
Signing time: Wed 07 Jun 2023 15:01:02 +0000
ROA not before: Wed 07 Jun 2023 15:00:59 +0000
ROA not after: Wed 08 Jun 2033 15:00:59 +0000
asID: 207459
IP address blocks: 192.142.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Sep 2023 05:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1803 (0x70b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jun 7 15:00:59 2023 GMT
Not After : Jun 8 15:00:59 2033 GMT
Subject: CN=64809bae-df6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ad:25:ab:6d:e4:dc:d1:4c:4d:3d:0d:5e:c4:
f0:0b:77:f5:6c:1e:72:a4:f9:5b:13:65:68:1d:01:
90:2d:9d:c7:f8:d4:18:61:47:b1:ea:a3:15:a9:c0:
8f:9a:76:b9:46:46:71:a5:bc:16:75:30:65:07:ae:
04:a2:38:65:4b:3f:00:a8:e7:81:06:ad:4f:ac:b4:
ef:c1:0f:c1:67:78:1f:8f:02:3e:af:50:5e:6f:ca:
73:b6:52:bb:e8:4c:12:5e:4c:93:ec:a8:22:c7:55:
80:5c:5a:66:3f:06:65:32:4d:61:19:c3:1b:68:62:
e8:4e:d8:9a:1c:5a:b3:e4:b6:aa:05:d2:b0:35:9e:
87:13:f6:29:7f:fc:cc:88:97:0f:fa:19:f1:04:fc:
f2:93:2b:65:72:b0:9e:3c:96:08:73:ce:23:a8:05:
3c:b0:ab:d4:ce:89:ad:56:0e:19:a9:2f:af:00:3c:
94:d1:83:fb:14:74:40:f5:8b:4b:bd:ee:76:7e:07:
a4:3a:39:5e:5a:30:64:74:a5:89:cd:3b:8b:b8:43:
a8:b7:4c:e8:b3:68:ee:17:29:7f:e3:1e:97:73:55:
3c:29:cb:fc:82:37:2b:dc:f0:b2:61:2e:65:11:56:
bd:ae:4a:af:dd:91:ad:d0:16:56:b6:38:a6:15:e5:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BB:B2:DC:9C:82:28:70:67:15:1A:0C:D2:77:D1:4B:96:8E:9F:FC
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1E9FEF14054411EEB058A1164AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.104.0/24
Signature Algorithm: sha256WithRSAEncryption
55:99:d8:90:c2:64:15:fd:41:da:dd:23:e3:ad:6c:22:dd:59:
d9:b8:00:2c:6a:f8:52:b8:af:28:57:fd:63:99:68:1e:16:4c:
d3:5b:f8:79:79:42:2c:22:cd:6c:8e:a0:4f:79:ce:83:ad:1d:
fb:b0:6e:a2:98:83:40:a6:b7:d9:bf:6d:f8:fb:a7:1a:2a:1c:
3f:ce:52:3d:66:fb:8f:73:8c:81:f3:88:77:0a:8a:de:3f:27:
f4:d1:3f:3a:8c:07:6a:78:9e:bc:cd:9f:90:ea:e4:be:02:71:
84:46:84:d3:c5:f9:8c:b3:22:ef:f5:10:4c:f4:fa:b6:b4:40:
3f:ed:24:8d:e7:54:33:af:c6:6b:81:79:16:f8:d8:49:1d:76:
2b:dc:fe:a9:68:d8:37:bd:56:56:07:bf:a6:ef:8c:ab:1a:f7:
de:56:fb:31:f6:a3:f4:cd:6c:29:54:32:4c:74:98:b1:c4:fe:
aa:9d:ae:ef:72:14:26:96:0b:38:d3:8d:af:40:d6:78:4f:62:
21:ba:10:18:90:c9:b7:56:1b:cf:3a:b3:ea:c7:cf:a0:3b:e2:
df:30:35:71:bd:b5:14:77:dd:58:a2:c1:61:23:d7:23:ed:c3:
52:27:51:c0:e4:0a:2c:3d:53:49:91:2f:24:b9:3b:16:fc:12:
87:21:4e:24
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBwswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMzA2MDcxNTAwNTlaFw0zMzA2MDgxNTAwNTlaMBgxFjAU
BgNVBAMTDTY0ODA5YmFlLWRmNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDorSWrbeTc0UxNPQ1exPALd/VsHnKk+VsTZWgdAZAtncf41BhhR7HqoxWp
wI+adrlGRnGlvBZ1MGUHrgSiOGVLPwCo54EGrU+stO/BD8FneB+PAj6vUF5vynO2
UrvoTBJeTJPsqCLHVYBcWmY/BmUyTWEZwxtoYuhO2JocWrPktqoF0rA1nocT9il/
/MyIlw/6GfEE/PKTK2VysJ48lghzziOoBTywq9TOia1WDhmpL68APJTRg/sUdED1
i0u97nZ+B6Q6OV5aMGR0pYnNO4u4Q6i3TOizaO4XKX/jHpdzVTwpy/yCNyvc8LJh
LmURVr2uSq/dka3QFla2OKYV5YBxAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUmLuy
3JyCKHBnFRoM0nfRS5aOn/wwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzFFOUZFRjE0MDU0NDExRUVCMDU4QTExNjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAjmgwDQYJKoZIhvcNAQELBQAD
ggEBAFWZ2JDCZBX9QdrdI+OtbCLdWdm4ACxq+FK4ryhX/WOZaB4WTNNb+Hl5Qiwi
zWyOoE95zoOtHfuwbqKYg0Cmt9m/bfj7pxoqHD/OUj1m+49zjIHziHcKit4/J/TR
PzqMB2p4nrzNn5Dq5L4CcYRGhNPF+YyzIu/1EEz0+ra0QD/tJI3nVDOvxmuBeRb4
2Ekddivc/qlo2De9VlYHv6bvjKsa995W+zH2o/TNbClUMkx0mLHE/qqdru9yFCaW
CzjTja9A1nhPYiG6EBiQybdWG886s+rHz6A74t8wNXG9tRR33ViiwWEj1yPtw1In
UcDkCiw9U0mRLyS5Oxb8EochTiQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org