Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/54D3E272BD7111ED90E965FAF1222468.roa
File: 54D3E272BD7111ED90E965FAF1222468.roa (raw, json)
Hash identifier: OLNNr8jHvNPArZ86nYOkvGxN+GA0DKVFf8Hk30L0LVY=
Subject key identifier: 66:10:64:49:DC:CE:2C:B0:6C:EF:85:4A:FB:32:96:13:0B:74:3F:CC
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 066D
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/54D3E272BD7111ED90E965FAF1222468.roa
Signing time: Wed 08 Mar 2023 05:23:17 +0000
ROA not before: Wed 08 Mar 2023 05:23:12 +0000
ROA not after: Wed 09 Mar 2033 05:23:12 +0000
asID: 208068
IP address blocks: 192.142.208.0/20 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jan 2024 08:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1645 (0x66d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Mar 8 05:23:12 2023 GMT
Not After : Mar 9 05:23:12 2033 GMT
Subject: CN=64081bc5-9105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:3b:46:9a:1a:53:26:39:13:7a:9e:4a:fd:
6b:ae:e5:a0:a5:2a:a8:b2:c6:c3:fd:08:ce:5c:74:
4e:ec:3f:cc:7c:91:c2:98:ad:83:b1:dd:85:ce:c5:
7f:8d:7d:ef:88:1f:2e:6a:b1:aa:a7:99:b9:ef:91:
7c:a3:f2:d8:2a:02:c9:ff:f2:9b:5b:f4:2b:32:0e:
cf:ae:6a:d3:fb:eb:5a:f5:f7:0a:35:4c:34:64:a0:
67:e0:15:b0:be:e5:7c:55:2a:51:3b:9d:c3:f5:f9:
59:86:b0:9a:b9:c7:6d:7e:92:d3:b0:3b:91:f1:ad:
b1:93:99:7e:75:3e:18:2a:75:ee:b8:50:7a:03:8f:
23:95:54:ec:7b:ed:a1:a7:bd:f9:6c:bf:e1:a7:db:
d3:07:0b:91:62:49:36:d5:42:30:b2:ce:a5:c1:34:
95:3d:25:c2:ca:3f:fc:77:f4:c0:49:73:a9:61:69:
b4:4a:af:45:e3:c2:67:b4:e5:24:66:63:1b:13:69:
66:46:75:7c:f4:54:7f:ad:27:5e:8e:c9:bf:a1:08:
01:ae:3a:55:b7:a7:05:6a:c4:53:16:10:5b:b2:fc:
94:a9:58:cb:8a:5e:5d:9a:2b:51:8f:7a:a1:fa:09:
05:18:72:6b:be:81:07:9f:e5:b7:99:a6:d7:15:5a:
4d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:10:64:49:DC:CE:2C:B0:6C:EF:85:4A:FB:32:96:13:0B:74:3F:CC
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/54D3E272BD7111ED90E965FAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.208.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:ea:89:ff:e1:41:da:88:27:c0:05:f6:10:d1:09:ba:cc:41:
cd:40:7c:4f:42:7c:ff:1b:cf:1c:52:5b:92:bd:99:16:d5:5d:
2d:38:67:45:f9:36:56:30:ac:ed:aa:d0:0f:1b:bb:a6:c6:44:
03:46:15:d7:97:8e:5e:62:b9:f9:f2:2f:05:84:bf:12:b4:3d:
9a:59:de:da:54:79:5d:66:57:7a:6e:aa:fa:0a:90:ca:ba:fe:
ed:f9:67:ec:bd:d6:9d:21:17:48:49:64:3a:90:11:8c:00:d0:
f5:6c:a3:33:13:3d:7f:d4:c2:82:42:2c:b1:05:15:c0:b6:33:
34:d8:05:9f:45:9f:4f:db:9a:ca:c7:9f:c9:fb:58:cc:a0:77:
9a:f1:51:8e:64:2e:8b:1e:75:91:29:d5:06:99:54:20:a6:df:
2c:74:fd:81:17:a7:f8:43:00:da:10:26:04:eb:c7:22:52:b0:
8a:3f:b5:51:0d:65:6f:b0:4f:cc:8c:6e:1b:b2:f5:02:61:d2:
17:23:58:fe:c5:2b:78:6e:b0:db:5b:a5:ae:bd:73:d4:89:37:
25:3a:dc:6b:f4:4d:97:89:54:9e:d6:e4:d7:2e:12:27:d8:7f:
8a:e0:f1:d6:60:d1:1a:13:0f:4b:95:cb:a1:da:91:82:17:c9:
b6:77:72:2d
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMzAzMDgwNTIzMTJaFw0zMzAzMDkwNTIzMTJaMBgxFjAU
BgNVBAMMDTY0MDgxYmM1LTkxMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1IztGmhpTJjkTep5K/Wuu5aClKqiyxsP9CM5cdE7sP8x8kcKYrYOx3YXO
xX+Nfe+IHy5qsaqnmbnvkXyj8tgqAsn/8ptb9CsyDs+uatP761r19wo1TDRkoGfg
FbC+5XxVKlE7ncP1+VmGsJq5x21+ktOwO5HxrbGTmX51Phgqde64UHoDjyOVVOx7
7aGnvflsv+Gn29MHC5FiSTbVQjCyzqXBNJU9JcLKP/x39MBJc6lhabRKr0Xjwme0
5SRmYxsTaWZGdXz0VH+tJ16Oyb+hCAGuOlW3pwVqxFMWEFuy/JSpWMuKXl2aK1GP
eqH6CQUYcmu+gQef5beZptcVWk2tAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUZhBk
SdzOLLBs74VK+zKWEwt0P8wwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzU0RDNFMjcyQkQ3MTExRUQ5MEU5NjVGQUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATAjtAwDQYJKoZIhvcNAQELBQAD
ggEBAD3qif/hQdqIJ8AF9hDRCbrMQc1AfE9CfP8bzxxSW5K9mRbVXS04Z0X5NlYw
rO2q0A8bu6bGRANGFdeXjl5iufnyLwWEvxK0PZpZ3tpUeV1mV3puqvoKkMq6/u35
Z+y91p0hF0hJZDqQEYwA0PVsozMTPX/UwoJCLLEFFcC2MzTYBZ9Fn0/bmsrHn8n7
WMygd5rxUY5kLosedZEp1QaZVCCm3yx0/YEXp/hDANoQJgTrxyJSsIo/tVENZW+w
T8yMbhuy9QJh0hcjWP7FK3husNtbpa69c9SJNyU63Gv0TZeJVJ7W5NcuEifYf4rg
8dZg0RoTD0uVy6HakYIXybZ3ci0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org