Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4AF1A968506711EEBCD8EC1D4AD9E6FC.roa
File: 4AF1A968506711EEBCD8EC1D4AD9E6FC.roa (raw, json)
Hash identifier: mzJGI9ge7A+gZSamjtiCmLaZMfYeG4zedaQJEzQqvXU=
Subject key identifier: 7C:53:62:E0:2B:22:2F:60:E9:C1:67:EE:CC:19:28:B3:E7:0A:21:C4
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 079E
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4AF1A968506711EEBCD8EC1D4AD9E6FC.roa
Signing time: Mon 11 Sep 2023 05:51:46 +0000
ROA not before: Mon 11 Sep 2023 05:51:43 +0000
ROA not after: Tue 13 Sep 2033 05:51:43 +0000
asID: 197555
IP address blocks: 192.142.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 10:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1950 (0x79e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 11 05:51:43 2023 GMT
Not After : Sep 13 05:51:43 2033 GMT
Subject: CN=64feaaf2-9111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:cd:d6:41:8f:d7:e7:5e:73:eb:ca:35:86:
c0:f6:29:51:32:d6:33:59:48:f2:aa:50:31:4e:1d:
a4:e1:f8:c3:45:1a:35:d7:5c:71:01:12:c8:25:be:
d8:4f:66:9b:0e:52:66:6a:9a:72:e8:dd:11:df:cd:
8a:bf:93:c6:cc:b1:7f:49:55:81:d5:5d:07:e0:08:
ff:1f:82:a9:0c:8e:44:6e:c3:dc:35:60:cf:ff:cf:
a9:a3:74:41:91:e7:73:09:0c:e4:71:ef:83:1a:2c:
f6:04:e5:98:66:68:29:77:76:ff:5a:29:6b:a7:da:
42:f8:b8:b0:98:4e:16:b1:a2:43:f3:91:e0:f7:a7:
3e:f7:78:65:83:1d:e6:7f:98:4f:28:11:f3:2e:60:
f5:35:20:b6:0b:4a:51:4c:49:05:5b:94:8c:80:7b:
9f:c7:7c:44:09:bb:c9:cb:52:d6:6c:3a:5f:17:c7:
11:c3:12:c7:f4:eb:f5:67:5e:97:12:1f:88:48:f1:
57:c9:50:5b:15:28:55:66:9f:4b:ae:63:83:1b:fd:
cd:2e:db:80:f8:c3:b5:16:a1:17:52:d3:e1:75:f2:
bf:ee:cf:50:63:9b:be:a7:d4:64:b4:23:7e:b8:af:
5c:62:7a:ef:77:2e:e7:4a:0f:42:fd:e1:aa:f9:8a:
82:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:53:62:E0:2B:22:2F:60:E9:C1:67:EE:CC:19:28:B3:E7:0A:21:C4
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4AF1A968506711EEBCD8EC1D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.93.0/24
Signature Algorithm: sha256WithRSAEncryption
14:5a:73:3b:47:94:ba:76:c5:7d:8b:73:2b:48:0e:28:af:73:
f5:60:a6:e6:90:cb:a6:60:16:1e:06:06:34:1e:18:c4:64:c4:
f0:c9:c8:e2:72:11:b4:24:d1:ae:b1:2e:89:5f:fa:b9:28:93:
6d:e3:d0:79:67:74:f6:34:a4:f5:1a:00:a4:1b:94:76:d3:84:
f9:ea:eb:06:2e:e8:f4:05:68:37:5e:24:22:3e:f0:78:61:39:
3b:d3:68:9d:92:38:76:71:96:b9:07:04:46:7a:a8:15:30:93:
93:d7:5d:ea:b2:8e:7f:77:08:3e:6b:6e:4e:33:65:52:c1:72:
e8:ba:54:27:37:c6:93:df:0a:21:7a:4f:73:ca:72:1a:a5:96:
ae:32:72:46:18:b7:c6:d2:97:53:75:7f:e9:ac:d6:cf:d9:79:
97:d7:49:1f:de:5d:f6:4f:70:ef:8e:6f:0b:c0:21:64:e3:63:
e3:18:c1:99:84:1a:d6:9d:e9:e3:a6:28:d5:55:21:6a:ad:30:
fc:90:72:15:ac:18:1f:bc:ca:9e:82:f3:45:10:66:71:f4:dc:
0d:45:c3:77:80:52:c5:45:82:96:17:bb:67:f5:24:86:06:6e:
3a:94:42:7d:ac:88:41:37:dd:a8:70:1e:f2:2e:be:7c:91:9d:
e7:71:14:85
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB54wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMzA5MTEwNTUxNDNaFw0zMzA5MTMwNTUxNDNaMBgxFjAU
BgNVBAMTDTY0ZmVhYWYyLTkxMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCnD83WQY/X515z68o1hsD2KVEy1jNZSPKqUDFOHaTh+MNFGjXXXHEBEsgl
vthPZpsOUmZqmnLo3RHfzYq/k8bMsX9JVYHVXQfgCP8fgqkMjkRuw9w1YM//z6mj
dEGR53MJDORx74MaLPYE5ZhmaCl3dv9aKWun2kL4uLCYThaxokPzkeD3pz73eGWD
HeZ/mE8oEfMuYPU1ILYLSlFMSQVblIyAe5/HfEQJu8nLUtZsOl8XxxHDEsf06/Vn
XpcSH4hI8VfJUFsVKFVmn0uuY4Mb/c0u24D4w7UWoRdS0+F18r/uz1Bjm76n1GS0
I364r1xieu93LudKD0L94ar5ioIVAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUfFNi
4CsiL2DpwWfuzBkos+cKIcQwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzRBRjFBOTY4NTA2NzExRUVCQ0Q4RUMxRDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAjl0wDQYJKoZIhvcNAQELBQAD
ggEBABRacztHlLp2xX2LcytIDiivc/VgpuaQy6ZgFh4GBjQeGMRkxPDJyOJyEbQk
0a6xLolf+rkok23j0HlndPY0pPUaAKQblHbThPnq6wYu6PQFaDdeJCI+8HhhOTvT
aJ2SOHZxlrkHBEZ6qBUwk5PXXeqyjn93CD5rbk4zZVLBcui6VCc3xpPfCiF6T3PK
chqllq4yckYYt8bSl1N1f+ms1s/ZeZfXSR/eXfZPcO+ObwvAIWTjY+MYwZmEGtad
6eOmKNVVIWqtMPyQchWsGB+8yp6C80UQZnH03A1Fw3eAUsVFgpYXu2f1JIYGbjqU
Qn2siEE33ahwHvIuvnyRnedxFIU=
-----END CERTIFICATE-----
Generated at Fri Nov 1 13:22:29 2024 by rpki-client on console-ams.rpki-client.org