Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/35C21B36128111EFBE1FB439017001B1.roa
File: 35C21B36128111EFBE1FB439017001B1.roa (raw, json)
Hash identifier: Tpy3MlRKLM29yhjARwpXzRRE/axW5FItRnkBMMr7a5I=
Subject key identifier: 65:E6:FD:60:E9:D6:FC:6A:56:36:EA:48:CC:F0:4E:5C:B8:35:1E:10
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0960
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/35C21B36128111EFBE1FB439017001B1.roa
Signing time: Wed 15 May 2024 06:06:03 +0000
ROA not before: Wed 15 May 2024 06:06:00 +0000
ROA not after: Tue 16 May 2034 06:06:00 +0000
asID: 46488
IP address blocks: 192.142.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 07:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2400 (0x960)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 15 06:06:00 2024 GMT
Not After : May 16 06:06:00 2034 GMT
Subject: CN=664450cb-4450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:01:0f:da:39:34:68:83:93:8a:72:e4:6c:c0:
e4:d3:cf:6e:d0:67:7d:06:4e:d9:1f:84:f3:72:ac:
9c:5f:9e:a9:94:5d:28:44:97:c1:18:f2:fe:00:fe:
5a:69:5d:d2:2f:ec:fe:99:b6:e8:0a:ee:35:f1:b6:
33:9e:6c:ef:3b:1a:c0:ce:36:0f:77:32:9d:c0:31:
22:ea:42:b6:f6:5d:98:5c:c6:60:ab:43:13:dc:4a:
00:35:d1:5c:61:de:53:dd:9c:6e:dd:2c:f4:8e:98:
9c:82:46:26:65:fb:08:bf:14:81:ce:17:32:10:34:
57:92:86:a6:e8:c1:70:f0:d6:2b:f5:ba:ba:62:ee:
53:8d:1e:8b:ae:41:8f:72:b4:f5:0f:71:c7:96:af:
15:d4:42:0e:cc:07:3a:f1:99:b7:6e:08:f3:a8:72:
1c:1c:dd:a2:92:47:0c:d1:ac:71:df:1b:20:45:aa:
ba:c8:3e:5f:1b:39:96:57:23:2a:0d:e9:5c:2f:29:
d0:22:8e:47:7a:2f:45:c6:a9:35:91:dd:bb:c7:17:
8a:71:1c:e9:bb:d0:b0:9b:e4:05:1f:c3:49:8e:fa:
b8:76:69:a2:d4:49:5f:ad:76:3a:83:a1:d0:02:16:
d7:fa:87:d9:48:70:b4:5d:0a:e8:db:43:47:ca:da:
bf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E6:FD:60:E9:D6:FC:6A:56:36:EA:48:CC:F0:4E:5C:B8:35:1E:10
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/35C21B36128111EFBE1FB439017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.8.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:ca:f2:d4:47:62:92:af:e0:40:24:e3:c4:4f:3b:2d:64:9a:
b1:ab:c4:1c:bc:8a:c9:b6:2c:d0:69:4d:13:61:48:be:e7:29:
82:05:a8:59:5b:ae:f1:2d:c9:28:73:2d:1a:2a:b5:51:94:97:
55:a0:cd:26:0f:cf:1a:61:9f:08:79:6c:10:f5:0c:b7:a8:23:
97:db:95:47:bf:57:80:3b:b4:fa:5a:83:80:c5:fb:4c:a3:ca:
1a:56:d7:92:4e:63:13:24:7c:9f:6f:38:83:e9:e9:01:1e:8e:
7c:5c:a4:67:b6:14:c9:6f:7f:68:e6:33:a4:12:79:61:df:94:
ed:9d:bc:4f:29:d1:bd:c7:5c:00:ca:1c:26:14:01:65:67:43:
4b:eb:29:3b:0e:f2:5d:34:c9:8d:39:76:9d:5a:d5:74:b1:ec:
43:01:a0:90:cb:06:59:d0:92:b1:ee:6c:90:a3:58:42:a0:27:
40:21:41:ba:b9:b5:66:99:2b:82:2e:dc:52:b0:59:9b:e8:d3:
c3:c7:20:df:ef:b3:26:01:7f:47:29:9c:f4:f4:cb:e2:28:57:
86:4c:6b:0d:75:6d:61:bc:24:49:0d:2d:89:ee:d2:40:fe:e0:
d5:2b:4e:fa:af:5c:96:20:1a:c6:a4:0e:6d:6d:c4:a7:23:30:
4e:c4:43:2b
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCWAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNDA1MTUwNjA2MDBaFw0zNDA1MTYwNjA2MDBaMBgxFjAU
BgNVBAMTDTY2NDQ1MGNiLTQ0NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVAQ/aOTRog5OKcuRswOTTz27QZ30GTtkfhPNyrJxfnqmUXShEl8EY8v4A
/lppXdIv7P6ZtugK7jXxtjOebO87GsDONg93Mp3AMSLqQrb2XZhcxmCrQxPcSgA1
0Vxh3lPdnG7dLPSOmJyCRiZl+wi/FIHOFzIQNFeShqbowXDw1iv1urpi7lONHouu
QY9ytPUPcceWrxXUQg7MBzrxmbduCPOochwc3aKSRwzRrHHfGyBFqrrIPl8bOZZX
IyoN6VwvKdAijkd6L0XGqTWR3bvHF4pxHOm70LCb5AUfw0mO+rh2aaLUSV+tdjqD
odACFtf6h9lIcLRdCujbQ0fK2r/FAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUZeb9
YOnW/GpWNupIzPBOXLg1HhAwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzM1QzIxQjM2MTI4MTExRUZCRTFGQjQzOTAxNzAwMUIxLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALAjggwDQYJKoZIhvcNAQELBQAD
ggEBAMDK8tRHYpKv4EAk48RPOy1kmrGrxBy8ism2LNBpTRNhSL7nKYIFqFlbrvEt
yShzLRoqtVGUl1WgzSYPzxphnwh5bBD1DLeoI5fblUe/V4A7tPpag4DF+0yjyhpW
15JOYxMkfJ9vOIPp6QEejnxcpGe2FMlvf2jmM6QSeWHflO2dvE8p0b3HXADKHCYU
AWVnQ0vrKTsO8l00yY05dp1a1XSx7EMBoJDLBlnQkrHubJCjWEKgJ0AhQbq5tWaZ
K4Iu3FKwWZvo08PHIN/vsyYBf0cpnPT0y+IoV4ZMaw11bWG8JEkNLYnu0kD+4NUr
TvqvXJYgGsakDm1txKcjME7EQys=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org