Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4884D650F3AB11EDB2E4C11B4AD9E6FC.roa
File: 4884D650F3AB11EDB2E4C11B4AD9E6FC.roa (raw, json)
Hash identifier: ly6rfAhvjXJvgMxbaxVLmho7VTHPQfGEqBTyFRJj6b4=
Subject key identifier: E7:2D:85:63:C7:19:23:65:E0:A8:37:5B:B2:11:FB:BE:71:DA:40:3C
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 06E3
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4884D650F3AB11EDB2E4C11B4AD9E6FC.roa
Signing time: Tue 16 May 2023 05:34:10 +0000
ROA not before: Tue 16 May 2023 05:34:07 +0000
ROA not after: Tue 17 May 2033 05:34:07 +0000
asID: 206092
IP address blocks: 192.142.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 May 2023 05:41:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1763 (0x6e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 16 05:34:07 2023 GMT
Not After : May 17 05:34:07 2033 GMT
Subject: CN=646315d2-b94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fd:8c:b4:50:fd:5e:4a:19:7d:36:bc:33:36:
d7:a4:f1:09:8b:6a:90:21:2f:b7:e8:2b:4d:88:34:
a2:18:8c:68:c1:02:7c:79:1c:80:16:bd:4f:c5:e6:
69:8a:93:57:bc:75:f3:85:2c:5b:42:53:00:7b:ef:
4e:cd:d4:f9:d5:69:95:1f:ef:4c:5d:9f:8b:3c:c9:
a8:5c:1d:08:41:b8:e4:4e:eb:98:18:4c:be:c0:43:
93:b3:dd:0b:91:bb:27:11:b4:cc:cc:af:54:bc:49:
68:9f:88:b8:39:ad:4b:23:ca:b8:3a:65:8b:9c:a6:
ef:f2:63:1e:f2:d8:96:7c:e6:8b:08:8c:18:0f:52:
8e:5e:c3:e3:86:83:3a:8c:7a:85:92:90:99:16:5e:
43:1e:84:8c:19:e5:39:e9:31:dd:f8:aa:f9:c2:62:
1c:fb:b0:6d:28:ac:6d:5b:37:18:59:6b:fc:bb:ff:
64:70:98:e5:53:75:22:d5:c1:65:b0:ac:73:ab:8b:
a0:7e:3a:3b:ed:d2:93:7d:d4:65:07:3a:b0:9d:97:
90:35:f7:b8:b7:06:2e:d2:b4:ae:44:bc:bb:56:da:
66:32:e6:0b:ea:dc:d8:31:60:31:be:ad:64:fc:ab:
07:13:e3:fa:2e:05:03:c8:97:ce:9e:ec:be:62:69:
09:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2D:85:63:C7:19:23:65:E0:A8:37:5B:B2:11:FB:BE:71:DA:40:3C
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4884D650F3AB11EDB2E4C11B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.5.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ab:3d:df:7f:29:bd:fd:10:e0:84:45:64:59:fc:c3:eb:3c:
25:0a:18:d0:a5:66:19:e2:c3:3a:67:81:fd:59:eb:7a:d0:ba:
98:96:13:fd:57:e2:32:6c:32:1f:76:17:51:b6:ac:b7:99:58:
3a:60:96:af:f7:95:ea:2a:c9:54:21:9b:37:32:29:41:d5:71:
9d:c8:4f:37:4b:eb:7e:d0:8b:23:7c:5b:ad:01:0e:de:5a:57:
37:9a:e5:ea:ff:ed:62:9d:f1:59:8f:04:cf:b2:0d:56:2d:a1:
52:3a:cf:e1:7a:c1:12:1e:48:7d:4b:9f:86:10:5f:ae:d9:0e:
17:49:2f:96:67:18:aa:4e:0c:56:31:79:b3:37:32:35:67:90:
28:6d:b8:5a:f4:63:49:f6:b5:93:65:b4:d4:f3:cd:6c:ec:f4:
11:80:52:76:50:02:91:5e:9f:4a:7b:e7:b6:62:b6:9a:24:4e:
9f:55:60:6c:cc:93:b6:da:3b:fb:8b:cb:22:cb:3c:0a:d6:9b:
d3:27:0b:63:c2:60:b1:a5:e7:2c:83:e6:93:79:04:be:44:72:
69:b4:a3:1d:2b:99:3a:f1:a1:a1:15:01:36:65:c2:77:ca:5a:
be:a8:7b:63:1c:e2:4c:f6:a4:7f:52:96:c8:d7:a1:1e:b3:d9:
79:76:29:55
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBuMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMzA1MTYwNTM0MDdaFw0zMzA1MTcwNTM0MDdaMBgxFjAU
BgNVBAMTDTY0NjMxNWQyLWI5NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDk/Yy0UP1eShl9NrwzNtek8QmLapAhL7foK02INKIYjGjBAnx5HIAWvU/F
5mmKk1e8dfOFLFtCUwB7707N1PnVaZUf70xdn4s8yahcHQhBuORO65gYTL7AQ5Oz
3QuRuycRtMzMr1S8SWifiLg5rUsjyrg6ZYucpu/yYx7y2JZ85osIjBgPUo5ew+OG
gzqMeoWSkJkWXkMehIwZ5TnpMd34qvnCYhz7sG0orG1bNxhZa/y7/2RwmOVTdSLV
wWWwrHOri6B+Ojvt0pN91GUHOrCdl5A197i3Bi7StK5EvLtW2mYy5gvq3NgxYDG+
rWT8qwcT4/ouBQPIl86e7L5iaQkdAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU5y2F
Y8cZI2XgqDdbshH7vnHaQDwwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzQ4ODRENjUwRjNBQjExRURCMkU0QzExQjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAjgUwDQYJKoZIhvcNAQELBQAD
ggEBAHurPd9/Kb39EOCERWRZ/MPrPCUKGNClZhniwzpngf1Z63rQupiWE/1X4jJs
Mh92F1G2rLeZWDpglq/3leoqyVQhmzcyKUHVcZ3ITzdL637QiyN8W60BDt5aVzea
5er/7WKd8VmPBM+yDVYtoVI6z+F6wRIeSH1Ln4YQX67ZDhdJL5ZnGKpODFYxebM3
MjVnkChtuFr0Y0n2tZNltNTzzWzs9BGAUnZQApFen0p757ZitpokTp9VYGzMk7ba
O/uLyyLLPArWm9MnC2PCYLGl5yyD5pN5BL5Ecmm0ox0rmTrxoaEVATZlwnfKWr6o
e2Mc4kz2pH9SlsjXoR6z2Xl2KVU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org