Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4DE1915C9D7311EE8765C906D25BE465.roa
File: 4DE1915C9D7311EE8765C906D25BE465.roa (raw, json)
Hash identifier: UaVCQdWNqwu5bSOdwMSnhjUGU4KYrODsmNdPNpbdksM=
Subject key identifier: 65:77:53:75:35:43:5D:57:E3:93:70:66:41:82:23:A3:B9:01:7F:78
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0858
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4DE1915C9D7311EE8765C906D25BE465.roa
Signing time: Mon 18 Dec 2023 07:01:45 +0000
ROA not before: Mon 18 Dec 2023 07:01:41 +0000
ROA not after: Tue 20 Dec 2033 07:01:41 +0000
asID: 211585
IP address blocks: 192.142.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 10:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2136 (0x858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Dec 18 07:01:41 2023 GMT
Not After : Dec 20 07:01:41 2033 GMT
Subject: CN=657fee59-e1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:96:4b:67:e8:8a:a4:5d:f2:82:09:92:8f:
a7:6a:8f:4d:6e:00:a4:3c:70:5e:67:d2:78:e1:44:
f2:c3:21:58:5a:df:25:e2:fb:50:01:71:80:4e:30:
bf:f2:0f:ea:d7:8a:03:69:59:44:e9:41:41:04:48:
2d:6b:4a:64:ce:da:65:7e:46:12:ab:4b:3c:2e:80:
9c:fb:fd:37:7e:66:4e:d2:e7:f1:cd:55:71:f9:58:
39:f4:15:fb:bf:d1:3f:00:0d:44:ff:ac:ba:96:eb:
e2:e7:21:24:20:1f:d0:63:81:46:01:7a:f0:87:cb:
10:41:c3:b5:26:16:81:92:00:b5:5d:7f:2f:74:d8:
ee:64:60:8f:f9:92:ca:9c:80:5e:f8:8b:1a:e1:5b:
67:f0:41:a7:ce:b0:ef:a8:73:89:26:83:40:9b:35:
6e:ad:fd:57:e7:be:57:5f:6c:a0:a6:8d:e9:4e:87:
cb:c7:3f:2d:31:cd:c7:53:db:6f:10:ff:3e:bb:b7:
32:c2:c6:5c:ea:5b:1a:2b:65:bb:7b:0c:e3:cc:a3:
a2:62:6d:4d:6a:24:b7:6b:bc:b3:71:87:67:3e:76:
e1:e4:50:9c:f5:41:0e:f1:51:9d:e8:c8:b4:b5:0f:
01:c9:90:48:54:d2:79:e8:28:2c:8e:5d:99:85:e7:
b8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:77:53:75:35:43:5D:57:E3:93:70:66:41:82:23:A3:B9:01:7F:78
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4DE1915C9D7311EE8765C906D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.5.0/24
Signature Algorithm: sha256WithRSAEncryption
61:7f:f7:2e:d8:04:f4:46:5d:55:2c:d2:75:fd:46:01:c1:1c:
11:3c:a9:52:57:d4:6c:0f:51:fb:b6:7b:32:a9:2c:d9:f1:74:
6b:b3:18:de:b6:f7:78:78:88:29:27:85:58:44:19:dc:7b:ce:
3f:fc:1e:4c:f6:38:f1:c4:34:6e:8c:5a:03:1b:d2:50:be:45:
66:9b:67:82:b2:ec:f0:f1:63:e3:cc:27:fe:d6:29:80:18:bf:
a3:31:d6:37:69:2c:ec:15:88:c3:48:6b:e8:c8:91:e7:2e:86:
2b:3a:04:81:e4:ec:13:e1:f3:ac:72:b9:20:b4:0a:e0:b3:ba:
c1:f8:bb:64:e8:82:73:1f:57:00:c0:c9:09:89:24:d2:39:16:
45:62:ca:04:53:5d:0f:03:8e:bb:6b:38:25:20:52:ce:e2:6a:
a9:f3:a6:30:b3:1d:6d:0f:c4:bb:d7:f4:ea:4d:cd:27:99:e7:
12:ba:39:9e:e3:fb:8b:dd:e5:e6:a2:52:c0:04:a9:c7:a3:5a:
65:79:7f:d7:ce:ba:33:56:3b:34:67:16:a6:9b:bd:66:c9:16:
63:28:3e:54:8c:ae:8b:8d:a0:81:74:e6:49:9d:b0:1f:bc:ff:
f3:d8:17:fa:a3:5d:d6:01:79:27:07:3a:21:c9:8d:77:0f:04:
91:b6:88:9e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCFgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMzEyMTgwNzAxNDFaFw0zMzEyMjAwNzAxNDFaMBgxFjAU
BgNVBAMTDTY1N2ZlZTU5LWUxYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDD7ZZLZ+iKpF3yggmSj6dqj01uAKQ8cF5n0njhRPLDIVha3yXi+1ABcYBO
ML/yD+rXigNpWUTpQUEESC1rSmTO2mV+RhKrSzwugJz7/Td+Zk7S5/HNVXH5WDn0
Ffu/0T8ADUT/rLqW6+LnISQgH9BjgUYBevCHyxBBw7UmFoGSALVdfy902O5kYI/5
ksqcgF74ixrhW2fwQafOsO+oc4kmg0CbNW6t/VfnvldfbKCmjelOh8vHPy0xzcdT
228Q/z67tzLCxlzqWxorZbt7DOPMo6JibU1qJLdrvLNxh2c+duHkUJz1QQ7xUZ3o
yLS1DwHJkEhU0nnoKCyOXZmF57h3AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUZXdT
dTVDXVfjk3BmQYIjo7kBf3gwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzRERTE5MTVDOUQ3MzExRUU4NzY1QzkwNkQyNUJFNDY1LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAjgUwDQYJKoZIhvcNAQELBQAD
ggEBAGF/9y7YBPRGXVUs0nX9RgHBHBE8qVJX1GwPUfu2ezKpLNnxdGuzGN6293h4
iCknhVhEGdx7zj/8Hkz2OPHENG6MWgMb0lC+RWabZ4Ky7PDxY+PMJ/7WKYAYv6Mx
1jdpLOwViMNIa+jIkecuhis6BIHk7BPh86xyuSC0CuCzusH4u2TognMfVwDAyQmJ
JNI5FkViygRTXQ8DjrtrOCUgUs7iaqnzpjCzHW0PxLvX9OpNzSeZ5xK6OZ7j+4vd
5eaiUsAEqcejWmV5f9fOujNWOzRnFqabvWbJFmMoPlSMrouNoIF05kmdsB+8//PY
F/qjXdYBeScHOiHJjXcPBJG2iJ4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org