Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/3964AB78986211EC88BE9E6A5A40D577.roa
File: 3964AB78986211EC88BE9E6A5A40D577.roa (raw, json)
Hash identifier: 7/Ia9WoNUbfZcEVQWKlwVNSpzxY/Mndt+h/2HKEhn3I=
Subject key identifier: CE:53:EB:88:74:71:33:DE:C6:EB:AB:1C:59:59:39:F3:B2:E9:75:0D
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0449
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/3964AB78986211EC88BE9E6A5A40D577.roa
Signing time: Mon 28 Feb 2022 06:46:58 +0000
ROA not before: Mon 28 Feb 2022 06:46:54 +0000
ROA not after: Tue 08 Feb 2028 06:46:54 +0000
asID: 3223
IP address blocks: 192.142.64.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Oct 2022 06:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1097 (0x449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Feb 28 06:46:54 2022 GMT
Not After : Feb 8 06:46:54 2028 GMT
Subject: CN=621c6fe2-3b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:36:05:ff:d3:8c:eb:46:24:8c:39:fa:a3:86:
8e:09:0d:a0:e9:b7:3b:e5:65:bf:8e:3f:86:35:8c:
a2:59:3f:1a:db:50:ad:d1:86:e0:85:22:27:fb:5f:
6a:a1:58:85:9c:fa:01:59:08:c7:b0:35:53:9c:6d:
89:99:37:83:31:50:af:6d:94:d4:16:98:7b:47:1a:
c9:3a:19:a2:aa:06:48:93:08:b3:46:fc:16:69:91:
1b:fd:2a:38:eb:6d:52:b5:e0:8e:db:74:21:ba:6b:
09:97:11:a7:79:ee:4e:bf:ec:e0:a8:d3:c8:30:0e:
8a:dd:fa:5f:89:85:e3:4b:78:c4:d5:80:d3:79:3a:
fc:de:2d:b8:cc:f3:1f:45:05:77:7e:ed:bc:64:01:
32:02:d3:46:66:71:1c:c4:c1:c1:f3:a4:02:90:18:
4f:bd:f7:4c:aa:da:dd:03:9d:90:4b:10:57:07:4b:
36:75:9e:09:e0:70:03:78:23:ab:19:47:3a:17:57:
82:3a:f9:ee:c6:00:ab:44:f0:9a:22:a0:b3:d0:8f:
3c:c4:97:98:97:3c:3c:f4:60:0f:9d:7e:8c:d2:17:
05:4b:0e:c5:30:af:31:80:88:5d:c6:ef:33:4c:20:
0d:3b:0a:8d:87:95:3c:46:3b:38:97:69:32:2e:bf:
37:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:53:EB:88:74:71:33:DE:C6:EB:AB:1C:59:59:39:F3:B2:E9:75:0D
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/3964AB78986211EC88BE9E6A5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.64.0/19
Signature Algorithm: sha256WithRSAEncryption
a8:fe:61:b6:99:15:2c:11:4f:3b:ea:56:8d:70:07:f3:e6:da:
07:59:a8:e5:55:fe:29:e4:2a:81:f9:6a:0b:8c:ab:94:52:a0:
5f:19:0e:ee:ff:93:8c:27:79:c2:ad:4d:ba:18:d7:74:c0:21:
48:23:15:57:95:6c:82:45:88:45:51:77:0c:da:41:94:7c:c8:
c8:ab:32:2e:ef:2f:bf:70:cb:c0:80:bb:da:51:2c:b4:11:ff:
a1:eb:1a:ce:76:17:5f:69:50:c0:a6:53:06:c9:3d:15:60:7d:
c1:85:cc:61:77:e2:63:50:a7:4d:1b:ee:fb:87:ae:09:37:13:
ee:da:24:98:f6:3e:56:87:e3:7d:db:be:ae:1d:57:cb:df:32:
8d:fd:eb:b6:c9:ae:49:4a:b6:8a:7c:74:47:4c:9c:22:c4:32:
7d:21:79:d5:97:63:e6:f2:e7:eb:ab:bc:ae:81:f9:9c:45:d3:
ef:b1:52:86:57:b3:d7:d6:9c:fc:5e:0b:f5:1c:62:21:5f:a3:
be:c9:3f:db:50:0f:07:1d:47:12:ab:0c:17:4a:87:2d:a3:97:
be:68:01:da:47:db:13:31:68:86:ea:8e:44:08:9c:6a:40:72:
e8:70:ec:d1:f2:0c:11:2a:52:fc:fe:96:44:65:14:a5:bb:f4:
06:93:81:20
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBEkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMjAyMjgwNjQ2NTRaFw0yODAyMDgwNjQ2NTRaMBgxFjAU
BgNVBAMMDTYyMWM2ZmUyLTNiNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDaNgX/04zrRiSMOfqjho4JDaDptzvlZb+OP4Y1jKJZPxrbUK3RhuCFIif7
X2qhWIWc+gFZCMewNVOcbYmZN4MxUK9tlNQWmHtHGsk6GaKqBkiTCLNG/BZpkRv9
KjjrbVK14I7bdCG6awmXEad57k6/7OCo08gwDord+l+JheNLeMTVgNN5OvzeLbjM
8x9FBXd+7bxkATIC00ZmcRzEwcHzpAKQGE+990yq2t0DnZBLEFcHSzZ1ngngcAN4
I6sZRzoXV4I6+e7GAKtE8JoioLPQjzzEl5iXPDz0YA+dfozSFwVLDsUwrzGAiF3G
7zNMIA07Co2HlTxGOziXaTIuvze7AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUzlPr
iHRxM97G66scWVk587LpdQ0wHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzM5NjRBQjc4OTg2MjExRUM4OEJFOUU2QTVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXAjkAwDQYJKoZIhvcNAQELBQAD
ggEBAKj+YbaZFSwRTzvqVo1wB/Pm2gdZqOVV/inkKoH5aguMq5RSoF8ZDu7/k4wn
ecKtTboY13TAIUgjFVeVbIJFiEVRdwzaQZR8yMirMi7vL79wy8CAu9pRLLQR/6Hr
Gs52F19pUMCmUwbJPRVgfcGFzGF34mNQp00b7vuHrgk3E+7aJJj2PlaH433bvq4d
V8vfMo3967bJrklKtop8dEdMnCLEMn0hedWXY+by5+urvK6B+ZxF0++xUoZXs9fW
nPxeC/UcYiFfo77JP9tQDwcdRxKrDBdKhy2jl75oAdpH2xMxaIbqjkQInGpAcuhw
7NHyDBEqUvz+lkRlFKW79AaTgSA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org