Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2DB34522EFFB11EDBBD6A93B4AD9E6FC.roa
File: 2DB34522EFFB11EDBBD6A93B4AD9E6FC.roa (raw, json)
Hash identifier: haPhyJtavdAhmOl1jZg5rVr3QvFUDvm1okg5+MiYT6s=
Subject key identifier: D4:F2:E7:91:9C:44:D4:D7:0A:BA:30:11:01:E3:14:48:DE:80:40:56
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 06DA
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2DB34522EFFB11EDBBD6A93B4AD9E6FC.roa
Signing time: Thu 11 May 2023 12:56:00 +0000
ROA not before: Thu 11 May 2023 12:55:57 +0000
ROA not after: Wed 11 May 2033 12:55:57 +0000
asID: 63018
IP address blocks: 192.142.196.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 09:59:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1754 (0x6da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 11 12:55:57 2023 GMT
Not After : May 11 12:55:57 2033 GMT
Subject: CN=645ce5e0-2775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:61:2b:0f:1d:70:47:5e:5e:be:2a:0f:52:
07:f5:2b:43:fc:55:7c:d5:db:61:cc:d9:69:7b:6f:
bc:55:34:f7:16:c1:67:78:25:60:99:37:18:ac:8d:
e9:78:4f:07:fc:5e:2a:f4:9a:4d:d3:54:17:47:19:
84:0e:f3:9f:bc:1d:fa:19:c8:9d:4d:a1:68:75:e3:
13:c7:41:2e:62:00:45:ad:a5:14:22:ea:a2:34:a5:
4b:ed:59:92:e9:24:f3:29:9b:34:59:e0:ba:d7:b3:
2e:b6:58:01:5a:8b:d6:95:67:5b:b5:a9:3d:89:34:
4d:7d:32:3a:aa:4b:30:e3:bf:d2:03:86:83:2a:43:
28:14:4e:c2:b0:a5:6b:e5:be:55:08:da:f8:2d:a5:
ab:42:28:c8:2a:e5:62:6b:f3:74:a0:83:3b:22:56:
4d:a1:9d:8d:ce:40:63:35:b6:7c:3d:2c:42:78:e5:
a4:59:42:31:18:b9:31:fc:63:2f:02:cc:0c:ee:a1:
c6:08:04:38:fb:9b:19:ec:8a:5b:62:8f:4a:bc:f0:
8b:3f:08:f9:48:37:d4:9c:43:7e:df:56:4b:a8:dc:
e3:90:5d:2b:45:65:1d:f3:b3:26:f3:83:a8:d8:7a:
51:2e:5c:21:8d:2b:93:00:40:23:10:73:b7:4a:55:
fe:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F2:E7:91:9C:44:D4:D7:0A:BA:30:11:01:E3:14:48:DE:80:40:56
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2DB34522EFFB11EDBBD6A93B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.196.0/23
Signature Algorithm: sha256WithRSAEncryption
32:d9:69:5c:af:0c:31:a3:63:7d:c0:d7:33:67:5d:c4:37:9a:
04:db:71:7c:3a:64:5d:a6:51:63:0c:d0:25:e5:3b:7f:a4:8a:
6e:f4:6b:30:f0:f0:8c:1b:04:fd:c4:04:49:2a:4f:73:a8:1b:
88:6d:2e:1d:44:a4:42:2f:ed:13:9f:30:05:da:dc:7f:15:de:
25:e9:a4:b5:6a:10:5d:6a:f8:06:fb:75:a2:64:d7:7e:2a:88:
23:6a:9d:0d:32:8d:8d:72:21:f5:df:48:07:d5:7d:a3:ff:6e:
b5:ff:1d:02:e1:17:6f:5f:98:0b:7b:a8:01:2f:4b:b6:dd:c5:
14:42:17:b1:cf:b6:7e:dd:ab:4d:c2:02:15:40:5a:c9:ec:ac:
21:44:fa:42:19:97:b2:e6:7a:8c:ef:17:58:f5:76:bd:98:d3:
4f:1b:24:bb:c7:23:c6:4f:f0:19:94:b7:1c:b6:e9:46:a0:3a:
ec:a6:30:75:ff:11:07:88:e0:5c:3c:58:f0:01:29:a1:fe:9f:
33:1c:88:64:ec:0a:3b:e6:e7:d1:46:a9:36:f4:44:bc:ab:ac:
1c:f5:c0:ed:03:4a:b7:06:65:9d:52:f0:8f:77:cc:e5:ac:71:
3a:94:2a:95:4c:f6:ba:db:74:7e:63:55:d2:0e:91:7e:86:16:
b2:a6:c8:d7
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBtowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMzA1MTExMjU1NTdaFw0zMzA1MTExMjU1NTdaMBgxFjAU
BgNVBAMTDTY0NWNlNWUwLTI3NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLZGErDx1wR15evioPUgf1K0P8VXzV22HM2Wl7b7xVNPcWwWd4JWCZNxis
jel4Twf8Xir0mk3TVBdHGYQO85+8HfoZyJ1NoWh14xPHQS5iAEWtpRQi6qI0pUvt
WZLpJPMpmzRZ4LrXsy62WAFai9aVZ1u1qT2JNE19MjqqSzDjv9IDhoMqQygUTsKw
pWvlvlUI2vgtpatCKMgq5WJr83SggzsiVk2hnY3OQGM1tnw9LEJ45aRZQjEYuTH8
Yy8CzAzuocYIBDj7mxnsiltij0q88Is/CPlIN9ScQ37fVkuo3OOQXStFZR3zsybz
g6jYelEuXCGNK5MAQCMQc7dKVf4TAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU1PLn
kZxE1NcKujARAeMUSN6AQFYwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzJEQjM0NTIyRUZGQjExRURCQkQ2QTkzQjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHAjsQwDQYJKoZIhvcNAQELBQAD
ggEBADLZaVyvDDGjY33A1zNnXcQ3mgTbcXw6ZF2mUWMM0CXlO3+kim70azDw8Iwb
BP3EBEkqT3OoG4htLh1EpEIv7ROfMAXa3H8V3iXppLVqEF1q+Ab7daJk134qiCNq
nQ0yjY1yIfXfSAfVfaP/brX/HQLhF29fmAt7qAEvS7bdxRRCF7HPtn7dq03CAhVA
WsnsrCFE+kIZl7LmeozvF1j1dr2Y008bJLvHI8ZP8BmUtxy26UagOuymMHX/EQeI
4Fw8WPABKaH+nzMciGTsCjvm59FGqTb0RLyrrBz1wO0DSrcGZZ1S8I93zOWscTqU
KpVM9rrbdH5jVdIOkX6GFrKmyNc=
-----END CERTIFICATE-----
Generated at Fri Nov 1 12:52:16 2024 by rpki-client on console-fra.rpki-client.org