Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/8EC9E3F0B32811EB93F6F311F8AEA228.roa
File: 8EC9E3F0B32811EB93F6F311F8AEA228.roa (raw, json)
Hash identifier: nJ4NKM9j+BZs5aWeoc0JeMMU0/q9REvy3WeMMdnVvIU=
Subject key identifier: AD:A6:99:2C:1E:7E:12:0A:38:DF:F6:D5:C2:E1:53:46:3A:E0:E3:C8
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 02E8
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/8EC9E3F0B32811EB93F6F311F8AEA228.roa
Signing time: Wed 12 May 2021 13:47:15 +0000
ROA not before: Wed 12 May 2021 13:47:08 +0000
ROA not after: Tue 13 May 2025 13:47:08 +0000
asID: 133847
IP address blocks: 192.142.96.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 744 (0x2e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 12 13:47:08 2021 GMT
Not After : May 13 13:47:08 2025 GMT
Subject: CN=609bdc62-349b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:03:c8:12:74:7f:27:f8:19:c5:44:ea:7e:
da:cb:32:e8:06:db:41:2a:c3:b9:de:79:81:9f:b3:
ae:d5:4b:e8:ed:8e:0f:b4:70:21:48:b4:3b:0c:15:
11:19:d3:13:d8:3e:b1:00:12:cf:0a:60:4e:8c:54:
cc:5d:ca:93:df:ed:3f:d4:a9:a1:1c:eb:9f:04:d7:
ec:e5:89:17:7f:c6:b1:33:b7:86:de:1f:d5:38:56:
3b:8f:33:d0:ca:cd:e8:31:6e:dd:80:8e:ba:88:a3:
38:c4:dd:91:cf:bd:41:61:b9:5a:81:e7:e0:d6:7a:
f0:86:89:af:b4:63:b5:ad:75:7f:87:80:b6:52:a4:
24:8b:dc:53:59:4f:96:fa:93:20:67:09:6c:26:8f:
82:ba:47:03:42:99:ca:82:b3:e8:28:13:b6:12:a6:
32:9b:70:95:25:79:4e:5d:1e:7d:40:59:cc:97:6b:
ba:36:4d:3b:cc:9f:ce:64:9a:9c:c8:35:3c:98:d4:
88:5f:3d:a5:86:ab:3d:ea:21:26:46:d9:d8:53:94:
c2:d9:c3:33:fd:9b:13:74:29:42:55:4e:39:3f:21:
87:06:05:6e:e1:df:01:db:79:75:4f:18:e2:90:8f:
a8:cb:95:93:9d:47:32:3e:9f:b8:58:7e:55:51:5f:
e2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A6:99:2C:1E:7E:12:0A:38:DF:F6:D5:C2:E1:53:46:3A:E0:E3:C8
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/8EC9E3F0B32811EB93F6F311F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.96.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:d1:67:db:e4:83:92:95:d1:f0:01:8e:9d:dd:06:ea:6a:8d:
a8:65:f6:1c:16:e7:5a:f2:d7:53:8a:ae:55:43:08:91:d4:bc:
1b:c9:c0:bd:4b:c7:df:fc:c3:40:1e:01:64:71:1f:0f:99:4f:
c5:28:be:7f:e8:36:59:8e:70:12:74:7a:b5:c2:97:ed:33:29:
a7:6a:46:67:13:ed:dc:82:e3:12:04:36:8f:3a:fa:9d:6c:b5:
34:d7:2e:14:bf:a6:ef:40:b6:fd:b8:0b:70:5e:a3:b9:ca:f3:
40:6b:a6:7c:7b:5a:dc:30:36:dc:87:b1:98:70:1e:fb:67:38:
1a:f6:58:bb:5a:fa:bb:09:50:45:06:fc:7a:0d:da:a9:35:fb:
6e:4f:8c:9b:30:a5:0e:33:4a:a8:a3:b8:47:f0:bf:42:98:5d:
37:2d:3b:76:92:2e:ce:b1:4b:52:a7:9d:5e:bd:e0:dc:3f:ac:
9e:d5:e7:2e:85:34:4e:5a:57:7e:14:06:3c:38:1b:7e:8a:0e:
ca:a2:4b:91:10:16:66:86:8a:d3:c6:1e:bd:28:aa:8d:0b:90:
b7:cc:e8:1b:df:a6:bb:f6:39:5f:f2:d3:85:e6:78:33:8a:0f:
81:f8:93:33:c8:64:23:ca:56:c1:f9:72:1e:0b:49:95:8b:d5:
17:a1:57:38
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAugwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMTA1MTIxMzQ3MDhaFw0yNTA1MTMxMzQ3MDhaMBgxFjAU
BgNVBAMTDTYwOWJkYzYyLTM0OWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCr1gPIEnR/J/gZxUTqftrLMugG20Eqw7neeYGfs67VS+jtjg+0cCFItDsM
FREZ0xPYPrEAEs8KYE6MVMxdypPf7T/UqaEc658E1+zliRd/xrEzt4beH9U4VjuP
M9DKzegxbt2AjrqIozjE3ZHPvUFhuVqB5+DWevCGia+0Y7WtdX+HgLZSpCSL3FNZ
T5b6kyBnCWwmj4K6RwNCmcqCs+goE7YSpjKbcJUleU5dHn1AWcyXa7o2TTvMn85k
mpzINTyY1IhfPaWGqz3qISZG2dhTlMLZwzP9mxN0KUJVTjk/IYcGBW7h3wHbeXVP
GOKQj6jLlZOdRzI+n7hYflVRX+J/AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUraaZ
LB5+Ego43/bVwuFTRjrg48gwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzhFQzlFM0YwQjMyODExRUI5M0Y2RjMxMUY4QUVBMjI4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALAjmAwDQYJKoZIhvcNAQELBQAD
ggEBAH7RZ9vkg5KV0fABjp3dBupqjahl9hwW51ry11OKrlVDCJHUvBvJwL1Lx9/8
w0AeAWRxHw+ZT8Uovn/oNlmOcBJ0erXCl+0zKadqRmcT7dyC4xIENo86+p1stTTX
LhS/pu9Atv24C3Beo7nK80Brpnx7WtwwNtyHsZhwHvtnOBr2WLta+rsJUEUG/HoN
2qk1+25PjJswpQ4zSqijuEfwv0KYXTctO3aSLs6xS1KnnV694Nw/rJ7V5y6FNE5a
V34UBjw4G36KDsqiS5EQFmaGitPGHr0oqo0LkLfM6Bvfprv2OV/y04XmeDOKD4H4
kzPIZCPKVsH5ch4LSZWL1RehVzg=
-----END CERTIFICATE-----
Generated at Mon Nov 4 08:26:38 2024 by rpki-client on console-fra.rpki-client.org