Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/47A7E9C2B95D11ECA287D9C75A40D577.roa
File: 47A7E9C2B95D11ECA287D9C75A40D577.roa (raw, json)
Hash identifier: dSTu9fJvldTfliDeozk71mjZih9uXhF3r8xCm8TuDUU=
Subject key identifier: 2B:FE:24:16:C2:76:95:AF:65:1A:EF:E6:CA:16:BD:57:8E:39:0D:A1
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0490
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/47A7E9C2B95D11ECA287D9C75A40D577.roa
Signing time: Mon 11 Apr 2022 06:04:43 +0000
ROA not before: Mon 11 Apr 2022 06:04:39 +0000
ROA not after: Mon 10 Apr 2028 06:04:39 +0000
asID: 210619
IP address blocks: 192.142.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 May 2022 06:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1168 (0x490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Apr 11 06:04:39 2022 GMT
Not After : Apr 10 06:04:39 2028 GMT
Subject: CN=6253c4fb-3a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:61:19:a6:b7:e1:db:84:0b:fe:47:e5:8f:cd:
85:ff:a0:22:ab:1f:f5:32:c2:fb:1b:c7:35:2c:7c:
a9:1c:64:4b:ba:ed:b3:2a:6d:19:2a:73:7c:95:25:
d1:26:c1:12:60:8c:55:f2:04:f3:7c:64:a9:3a:b1:
52:35:8f:bf:34:c9:19:bb:a3:a7:30:3a:c3:08:5c:
68:48:e4:8e:67:3a:87:8e:c8:75:a2:c5:3f:2c:17:
9d:59:20:8d:b2:4c:e3:2e:e3:f2:db:08:9e:03:ef:
7a:27:11:c9:4c:8c:7a:80:3d:c6:90:32:1b:79:cb:
08:e0:fb:ed:0c:c9:e1:6d:28:8f:19:5e:f3:6c:da:
6a:76:0a:6e:43:14:72:2a:15:91:dd:fb:5a:0d:c4:
cb:97:87:c9:02:bf:39:33:ad:ad:86:7a:e3:84:9e:
b7:32:c9:1c:25:8c:c2:28:39:7b:f1:ea:9c:b3:2d:
39:c4:7a:dd:2d:54:68:59:04:3e:d6:7f:1b:e3:bc:
77:36:0a:79:21:02:51:d0:43:3f:e4:ec:c3:36:6c:
2a:0f:57:b8:aa:b8:f6:6f:7b:bf:67:73:4d:d1:ed:
f6:92:59:dc:2c:d7:5a:25:79:40:72:0e:51:f6:6a:
74:34:2a:36:d7:8a:28:0b:c7:54:7e:28:08:8e:a5:
63:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FE:24:16:C2:76:95:AF:65:1A:EF:E6:CA:16:BD:57:8E:39:0D:A1
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/47A7E9C2B95D11ECA287D9C75A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.107.0/24
Signature Algorithm: sha256WithRSAEncryption
be:de:8f:2d:bf:cf:3e:d4:3c:b8:4c:60:3b:01:bd:5a:46:6e:
a5:16:14:06:54:07:6c:55:55:b6:12:0b:dd:32:cb:ba:14:cb:
db:70:c3:92:c4:75:f1:4a:43:30:cd:f2:d9:7a:85:e6:0e:93:
85:ef:0d:70:55:6d:c3:c0:2a:fd:14:f7:d7:4b:f6:6a:e0:d2:
c6:11:c3:e9:f2:2f:c6:74:2e:e2:c5:41:65:d9:5f:7f:f8:b2:
f8:b3:a4:8a:87:88:48:c3:20:91:98:66:74:1f:6d:7e:32:ab:
74:a5:1b:08:bf:f1:90:27:eb:12:76:a2:ab:14:01:26:99:45:
72:2a:97:37:f0:70:af:b7:91:0b:10:b2:ca:c3:26:8f:4b:00:
7e:31:23:d0:c8:12:ec:ab:b5:95:45:5d:f3:bc:8a:a0:99:73:
ed:08:ff:c8:58:dc:e7:f0:7e:cb:62:86:60:8c:38:40:3e:c3:
f4:db:32:bd:38:e0:74:2b:e3:ce:4c:ec:d9:d3:0e:af:03:5a:
bc:d8:13:20:aa:3f:1a:e0:a4:73:dd:ab:14:8f:53:06:98:fc:
9a:93:a7:6b:87:5f:ba:98:9d:20:94:aa:fd:a5:a1:08:f9:c3:
fe:71:8e:83:0f:00:8f:42:8e:54:58:57:f4:bc:b9:84:69:25:
c1:3c:34:6c
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMjA0MTEwNjA0MzlaFw0yODA0MTAwNjA0MzlaMBgxFjAU
BgNVBAMMDTYyNTNjNGZiLTNhNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDfYRmmt+HbhAv+R+WPzYX/oCKrH/UywvsbxzUsfKkcZEu67bMqbRkqc3yV
JdEmwRJgjFXyBPN8ZKk6sVI1j780yRm7o6cwOsMIXGhI5I5nOoeOyHWixT8sF51Z
II2yTOMu4/LbCJ4D73onEclMjHqAPcaQMht5ywjg++0MyeFtKI8ZXvNs2mp2Cm5D
FHIqFZHd+1oNxMuXh8kCvzkzra2GeuOEnrcyyRwljMIoOXvx6pyzLTnEet0tVGhZ
BD7WfxvjvHc2CnkhAlHQQz/k7MM2bCoPV7iquPZve79nc03R7faSWdws11oleUBy
DlH2anQ0KjbXiigLx1R+KAiOpWNpAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUK/4k
FsJ2la9lGu/myha9V445DaEwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzQ3QTdFOUMyQjk1RDExRUNBMjg3RDlDNzVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAjmswDQYJKoZIhvcNAQELBQAD
ggEBAL7ejy2/zz7UPLhMYDsBvVpGbqUWFAZUB2xVVbYSC90yy7oUy9tww5LEdfFK
QzDN8tl6heYOk4XvDXBVbcPAKv0U99dL9mrg0sYRw+nyL8Z0LuLFQWXZX3/4sviz
pIqHiEjDIJGYZnQfbX4yq3SlGwi/8ZAn6xJ2oqsUASaZRXIqlzfwcK+3kQsQssrD
Jo9LAH4xI9DIEuyrtZVFXfO8iqCZc+0I/8hY3OfwfstihmCMOEA+w/TbMr044HQr
485M7NnTDq8DWrzYEyCqPxrgpHPdqxSPUwaY/JqTp2uHX7qYnSCUqv2loQj5w/5x
joMPAI9CjlRYV/S8uYRpJcE8NGw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org