Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/58952D80B30111EF9A87F555762E951A.roa
File: 58952D80B30111EF9A87F555762E951A.roa (raw, json)
Hash identifier: r/hgldq0W+qQGcUtvgH2XTq8oyr0Q35HGK2Oe/6PWdY=
Subject key identifier: 56:61:02:11:A4:0D:DD:2C:5F:FD:52:05:FB:2F:D1:FA:26:96:EC:47
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B5C
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/58952D80B30111EF9A87F555762E951A.roa
Signing time: Thu 05 Dec 2024 12:06:23 +0000
ROA not before: Thu 05 Dec 2024 12:06:20 +0000
ROA not after: Tue 05 Dec 2034 12:06:20 +0000
asID: 6206
IP address blocks: 192.142.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Mar 2025 13:39:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2908 (0xb5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Dec 5 12:06:20 2024 GMT
Not After : Dec 5 12:06:20 2034 GMT
Subject: CN=6751973f-8d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:76:c0:b7:f9:40:bf:55:50:f0:98:3f:a5:6c:
e8:69:70:67:9e:7f:ec:e1:83:bf:ef:99:63:91:af:
99:fb:58:66:21:07:db:32:5a:14:f8:dd:f3:ca:ae:
50:df:e3:29:d2:56:37:51:e9:61:b8:3f:2d:b0:68:
71:18:4e:51:4c:ca:b8:95:db:56:0f:25:1e:8d:47:
cc:b2:d9:2d:b6:47:9a:a6:10:61:9e:8c:8c:be:b8:
c3:da:b1:1d:d0:71:2c:0b:5b:cb:36:64:0f:ab:ac:
1e:ac:8d:19:1f:1c:b4:2c:c1:85:2e:85:59:d9:08:
5e:a9:21:3b:f6:a5:07:78:77:15:63:10:73:d5:fd:
e7:f4:f7:f0:2e:d9:10:f1:5a:6f:76:4f:34:bc:a0:
79:e1:01:4d:c6:06:88:ac:10:b9:64:a1:c3:cc:62:
28:1f:fb:20:05:6d:7f:36:70:67:90:6c:6a:3f:31:
2a:23:fe:d0:53:71:a0:56:22:13:69:da:4a:e5:61:
71:b1:48:55:cf:38:b7:1f:8f:89:0c:cd:ac:3e:d3:
06:2e:b9:a9:f3:e9:cc:fa:71:2a:31:1f:cc:6c:1d:
1a:fd:7c:95:ad:65:9d:97:7f:72:d9:72:23:a9:47:
ee:83:95:9f:de:a2:86:a4:e0:34:d9:4a:6e:a2:94:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:61:02:11:A4:0D:DD:2C:5F:FD:52:05:FB:2F:D1:FA:26:96:EC:47
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/58952D80B30111EF9A87F555762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.36.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:87:01:ba:ba:59:76:fa:9c:41:e9:5b:88:3e:5e:fd:eb:c5:
20:67:00:a2:71:30:51:d1:05:29:81:3d:02:2f:93:80:9a:7f:
d3:87:f1:4f:8b:67:b0:58:15:16:98:f1:78:a8:c8:f6:6d:35:
9f:87:b0:84:05:36:e2:c6:da:88:cb:e6:97:f4:47:20:3b:11:
f8:84:74:ca:dc:e3:2f:7f:12:df:9a:92:1c:51:47:a2:e9:37:
b9:d1:26:47:a2:c1:a0:7e:31:27:f6:4d:02:2a:67:4b:16:81:
ed:33:e1:ec:52:78:a6:ac:c8:30:5b:1d:58:36:4c:5d:42:ab:
b9:03:11:de:f6:fe:0b:14:e0:ad:e4:2e:fd:ff:2a:f8:11:51:
8a:fb:8a:74:ee:48:ae:bc:b2:40:55:56:6e:f3:ec:2f:e4:fa:
f0:e8:ae:bc:f7:06:77:84:c8:f9:22:e9:92:32:04:95:aa:32:
2e:80:5a:dc:f5:bb:f0:93:3e:a6:27:94:64:1f:d6:26:a3:ca:
d3:0c:a4:eb:df:95:2e:11:61:d9:11:35:e5:54:5f:39:b1:5f:
d7:ce:e4:29:1b:02:e2:b2:a2:71:67:aa:27:fe:5b:a3:6f:cf:
a2:ad:2e:f1:18:9e:66:41:4f:a1:e9:33:62:fb:2e:f3:19:0d:
31:13:76:84
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC1wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNDEyMDUxMjA2MjBaFw0zNDEyMDUxMjA2MjBaMBgxFjAU
BgNVBAMTDTY3NTE5NzNmLThkM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPdsC3+UC/VVDwmD+lbOhpcGeef+zhg7/vmWORr5n7WGYhB9syWhT43fPK
rlDf4ynSVjdR6WG4Py2waHEYTlFMyriV21YPJR6NR8yy2S22R5qmEGGejIy+uMPa
sR3QcSwLW8s2ZA+rrB6sjRkfHLQswYUuhVnZCF6pITv2pQd4dxVjEHPV/ef09/Au
2RDxWm92TzS8oHnhAU3GBoisELlkocPMYigf+yAFbX82cGeQbGo/MSoj/tBTcaBW
IhNp2krlYXGxSFXPOLcfj4kMzaw+0wYuuanz6cz6cSoxH8xsHRr9fJWtZZ2Xf3LZ
ciOpR+6DlZ/eooak4DTZSm6ilKX9AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUVmEC
EaQN3Sxf/VIF+y/R+iaW7EcwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzU4OTUyRDgwQjMwMTExRUY5QTg3RjU1NTc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAjiQwDQYJKoZIhvcNAQELBQAD
ggEBAD6HAbq6WXb6nEHpW4g+Xv3rxSBnAKJxMFHRBSmBPQIvk4Caf9OH8U+LZ7BY
FRaY8XioyPZtNZ+HsIQFNuLG2ojL5pf0RyA7EfiEdMrc4y9/Et+akhxRR6LpN7nR
JkeiwaB+MSf2TQIqZ0sWge0z4exSeKasyDBbHVg2TF1Cq7kDEd72/gsU4K3kLv3/
KvgRUYr7inTuSK68skBVVm7z7C/k+vDorrz3BneEyPki6ZIyBJWqMi6AWtz1u/CT
PqYnlGQf1iajytMMpOvflS4RYdkRNeVUXzmxX9fO5CkbAuKyonFnqif+W6Nvz6Kt
LvEYnmZBT6HpM2L7LvMZDTETdoQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:18:25 2025 by rpki-client