Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/93811D5453B711EFB8E4D3B1762E951A.roa
File: 93811D5453B711EFB8E4D3B1762E951A.roa (raw, json)
Hash identifier: i2x1b8j7AFf0mI80rgsH6tbQ5Kmvqhm7XXjx//wjXvI=
Subject key identifier: 27:FF:BF:21:80:7A:1B:30:51:83:36:05:54:51:C4:02:B6:97:2C:7D
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 09E3
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/93811D5453B711EFB8E4D3B1762E951A.roa
Signing time: Tue 06 Aug 2024 05:48:59 +0000
ROA not before: Tue 06 Aug 2024 05:48:54 +0000
ROA not after: Wed 09 Aug 2034 05:48:54 +0000
asID: 43260
IP address blocks: 192.142.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 05:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2531 (0x9e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 6 05:48:54 2024 GMT
Not After : Aug 9 05:48:54 2034 GMT
Subject: CN=66b1b94b-c2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:91:59:53:ba:85:00:bc:8a:31:e8:19:47:
cb:95:0a:0f:d3:c1:e3:db:41:e1:ca:54:19:87:6c:
e7:2a:05:56:81:04:e2:a2:52:ea:61:3e:a2:c1:2b:
be:c7:39:18:f5:b5:cf:27:41:96:55:ca:d1:d4:11:
15:9a:d3:b9:44:63:06:ff:76:9b:39:c4:45:5f:55:
ff:d7:33:02:01:a7:d9:3a:b0:00:ab:e9:89:46:2c:
ac:13:32:88:91:59:3a:2d:1c:f0:fc:fd:46:0c:91:
c6:f4:35:26:00:f5:53:5f:d4:2a:c7:05:0e:0e:9f:
0b:97:de:df:75:da:dd:c5:be:4c:ce:20:8e:81:a1:
31:e1:11:57:22:9b:5c:30:55:ec:ef:c7:d6:3f:ea:
b3:07:87:f8:b5:4d:f8:b5:c3:de:86:d7:1d:b3:58:
03:ab:b3:29:aa:1f:c1:c6:c8:08:4f:62:3f:4e:0a:
00:e4:e0:c4:10:06:74:48:14:55:3a:b9:ff:b4:03:
56:44:d1:f3:1b:54:1b:cb:de:70:41:12:ff:87:a2:
aa:1c:72:60:88:2d:8d:9d:5e:48:a7:9f:09:53:a2:
3e:7c:d9:82:73:b1:b1:2f:58:1f:1e:c2:40:25:55:
71:4c:17:0b:51:40:31:4b:9d:c3:3f:e4:52:2d:23:
96:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FF:BF:21:80:7A:1B:30:51:83:36:05:54:51:C4:02:B6:97:2C:7D
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/93811D5453B711EFB8E4D3B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.134.0/24
Signature Algorithm: sha256WithRSAEncryption
68:60:55:93:87:3d:5f:67:00:3f:e0:ee:37:0c:69:ad:ab:54:
58:0e:17:0b:b1:97:b8:5b:d4:e4:1a:e0:51:c0:f8:39:03:8b:
f9:88:dd:33:12:3d:0a:63:96:ac:0b:88:46:b1:a3:36:2b:fa:
6d:34:ce:eb:78:ea:18:c8:5a:c2:ba:cb:fb:e3:12:ec:54:03:
5e:c2:47:9b:24:61:d0:13:3f:ea:02:a6:7c:b5:78:62:b2:12:
74:2b:38:79:2b:66:01:3e:2a:3e:1f:5f:5d:2c:87:27:11:a7:
a9:03:a2:a6:dd:ec:e4:88:bd:a8:fa:e2:49:e3:ec:49:a0:68:
6f:ff:ac:49:22:1f:46:87:97:e6:99:bd:34:45:c9:4a:f6:35:
fc:0d:eb:90:91:11:14:e1:92:4a:dc:5d:e6:b0:12:19:af:0f:
05:e4:59:b1:aa:66:09:b1:e2:b6:e2:03:d2:d1:23:92:2d:b8:
d7:5c:0e:08:58:c1:72:ee:c4:f1:30:44:f6:4b:cb:44:4a:3c:
92:9d:06:43:07:8e:67:df:35:c5:98:5b:ac:cd:ce:a9:65:8e:
a8:66:22:cd:43:6a:86:37:1b:45:cd:1c:ac:36:7b:af:07:c2:
fe:01:27:a8:0b:c7:da:a3:23:e0:a4:82:4a:9d:ca:27:e7:10:
be:16:9b:f7
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCeMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNDA4MDYwNTQ4NTRaFw0zNDA4MDkwNTQ4NTRaMBgxFjAU
BgNVBAMTDTY2YjFiOTRiLWMyZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKIZFZU7qFALyKMegZR8uVCg/TwePbQeHKVBmHbOcqBVaBBOKiUuphPqLB
K77HORj1tc8nQZZVytHUERWa07lEYwb/dps5xEVfVf/XMwIBp9k6sACr6YlGLKwT
MoiRWTotHPD8/UYMkcb0NSYA9VNf1CrHBQ4OnwuX3t912t3FvkzOII6BoTHhEVci
m1wwVezvx9Y/6rMHh/i1Tfi1w96G1x2zWAOrsymqH8HGyAhPYj9OCgDk4MQQBnRI
FFU6uf+0A1ZE0fMbVBvL3nBBEv+HoqoccmCILY2dXkinnwlToj582YJzsbEvWB8e
wkAlVXFMFwtRQDFLncM/5FItI5brAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUJ/+/
IYB6GzBRgzYFVFHEAraXLH0wHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzkzODExRDU0NTNCNzExRUZCOEU0RDNCMTc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAjoYwDQYJKoZIhvcNAQELBQAD
ggEBAGhgVZOHPV9nAD/g7jcMaa2rVFgOFwuxl7hb1OQa4FHA+DkDi/mI3TMSPQpj
lqwLiEaxozYr+m00zut46hjIWsK6y/vjEuxUA17CR5skYdATP+oCpny1eGKyEnQr
OHkrZgE+Kj4fX10shycRp6kDoqbd7OSIvaj64knj7EmgaG//rEkiH0aHl+aZvTRF
yUr2NfwN65CRERThkkrcXeawEhmvDwXkWbGqZgmx4rbiA9LRI5ItuNdcDghYwXLu
xPEwRPZLy0RKPJKdBkMHjmffNcWYW6zNzqlljqhmIs1DaoY3G0XNHKw2e68Hwv4B
J6gLx9qjI+CkgkqdyifnEL4Wm/c=
-----END CERTIFICATE-----
Generated at Fri Aug 30 07:31:20 2024 by rpki-client on console-fra.rpki-client.org