Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5D2D73B6B32811EBACAA9811F8AEA228.roa
File: 5D2D73B6B32811EBACAA9811F8AEA228.roa (raw, json)
Hash identifier: FZ9y7VqLRHtBXktYCoep2RUTLxtM3eiApvuHnSyz6vo=
Subject key identifier: 13:48:FE:68:F0:13:2A:ED:59:1F:09:C7:C2:86:FA:2F:E1:1F:E7:6F
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 02E6
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5D2D73B6B32811EBACAA9811F8AEA228.roa
Signing time: Wed 12 May 2021 13:45:51 +0000
ROA not before: Wed 12 May 2021 13:45:44 +0000
ROA not after: Tue 13 May 2025 13:45:44 +0000
asID: 133847
IP address blocks: 192.142.32.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 742 (0x2e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 12 13:45:44 2021 GMT
Not After : May 13 13:45:44 2025 GMT
Subject: CN=609bdc0f-0be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:36:09:b2:2a:ff:9f:3f:98:22:6e:12:df:a6:
79:f6:cb:07:31:a9:0a:b8:c6:2e:c4:7a:f6:8c:c0:
60:f6:61:e4:8f:73:8a:3d:31:5f:59:95:62:72:8a:
0e:44:53:dd:d3:e0:88:89:99:40:40:44:be:31:7f:
b0:7e:e1:2d:c0:e1:50:7e:8b:9d:9e:dd:56:22:2a:
b1:81:18:5f:06:99:73:fc:d0:49:ff:8a:04:f5:ed:
2c:35:ff:d7:54:4c:5b:69:d5:6c:f5:dd:fc:aa:d4:
0a:9f:fe:6c:93:23:7b:a9:bf:b9:d1:44:aa:50:16:
8b:36:8b:5d:02:68:b2:fb:e4:33:a2:a0:fa:53:af:
e6:29:96:c0:5b:b0:52:57:8b:ce:d7:ea:da:b2:39:
b7:1d:b5:e9:8e:75:e0:50:5d:0c:76:38:0d:d4:9a:
80:07:1c:c6:cb:2a:41:ed:0d:30:f6:6e:20:d7:0b:
47:39:90:90:7d:af:2f:63:86:89:ba:3c:04:79:8d:
1b:ee:70:5d:87:4d:81:6d:37:3c:a5:14:90:e9:95:
79:d8:20:0f:c9:86:ea:03:67:c4:52:00:45:7f:58:
8a:7b:45:ed:30:37:91:7f:cf:59:e3:f6:62:c7:30:
9c:44:18:51:26:24:9f:08:9c:fe:8a:2d:bb:e7:91:
be:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:48:FE:68:F0:13:2A:ED:59:1F:09:C7:C2:86:FA:2F:E1:1F:E7:6F
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5D2D73B6B32811EBACAA9811F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.32.0/19
Signature Algorithm: sha256WithRSAEncryption
ad:20:df:5a:78:3a:6c:db:e1:f0:37:fa:3c:33:69:f8:e9:f8:
1e:d0:6d:8e:f1:e7:d6:88:fd:a2:3a:a4:cf:84:a8:70:b8:b5:
c7:d1:bc:cc:1e:b8:42:2e:c7:d6:a4:45:11:83:cc:b9:ee:81:
b1:98:f8:43:de:41:c0:1d:fe:c2:07:53:1a:99:2a:4f:7d:45:
d1:07:25:04:6b:69:13:48:f4:49:9d:75:6a:72:8a:5b:4e:ca:
c3:56:79:37:4e:36:21:d9:91:ae:04:dd:8c:49:e5:37:e5:eb:
e4:6a:7d:c6:90:68:f9:32:e2:17:16:94:5f:e6:10:df:28:6d:
09:a6:e3:26:49:e6:50:25:c5:b4:08:d8:db:93:a4:bc:db:b9:
66:2f:fc:46:4d:a4:4c:f8:f5:ac:e9:94:b2:0a:00:d5:3e:05:
35:e0:0d:df:60:58:05:70:04:fe:cb:86:01:d5:de:f3:95:b8:
fc:8d:e3:2a:f1:3d:ff:c5:20:c2:38:81:28:b5:7c:dc:f2:57:
50:aa:3a:d6:cd:8c:56:a9:36:22:1c:4c:49:bd:3f:d0:6f:67:
a3:6e:0f:c4:56:05:38:be:05:69:ba:d2:3a:13:1f:ec:25:44:
68:dd:62:64:b0:0f:80:22:3f:8f:5a:6b:df:94:dc:2b:e5:de:
84:96:db:56
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAuYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMTA1MTIxMzQ1NDRaFw0yNTA1MTMxMzQ1NDRaMBgxFjAU
BgNVBAMTDTYwOWJkYzBmLTBiZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjNgmyKv+fP5gibhLfpnn2ywcxqQq4xi7EevaMwGD2YeSPc4o9MV9ZlWJy
ig5EU93T4IiJmUBARL4xf7B+4S3A4VB+i52e3VYiKrGBGF8GmXP80En/igT17Sw1
/9dUTFtp1Wz13fyq1Aqf/myTI3upv7nRRKpQFos2i10CaLL75DOioPpTr+YplsBb
sFJXi87X6tqyObcdtemOdeBQXQx2OA3UmoAHHMbLKkHtDTD2biDXC0c5kJB9ry9j
hom6PAR5jRvucF2HTYFtNzylFJDplXnYIA/JhuoDZ8RSAEV/WIp7Re0wN5F/z1nj
9mLHMJxEGFEmJJ8InP6KLbvnkb7JAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUE0j+
aPATKu1ZHwnHwob6L+Ef528wHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzVEMkQ3M0I2QjMyODExRUJBQ0FBOTgxMUY4QUVBMjI4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXAjiAwDQYJKoZIhvcNAQELBQAD
ggEBAK0g31p4Omzb4fA3+jwzafjp+B7QbY7x59aI/aI6pM+EqHC4tcfRvMweuEIu
x9akRRGDzLnugbGY+EPeQcAd/sIHUxqZKk99RdEHJQRraRNI9EmddWpyiltOysNW
eTdONiHZka4E3YxJ5Tfl6+RqfcaQaPky4hcWlF/mEN8obQmm4yZJ5lAlxbQI2NuT
pLzbuWYv/EZNpEz49azplLIKANU+BTXgDd9gWAVwBP7LhgHV3vOVuPyN4yrxPf/F
IMI4gSi1fNzyV1CqOtbNjFapNiIcTEm9P9BvZ6NuD8RWBTi+BWm60joTH+wlRGjd
YmSwD4AiP49aa9+U3Cvl3oSW21Y=
-----END CERTIFICATE-----
Generated at Mon Nov 4 08:26:38 2024 by rpki-client on console-fra.rpki-client.org