Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9532A28E8B6411ED9BFFF1BEF1222468.roa
File: 9532A28E8B6411ED9BFFF1BEF1222468.roa (raw, json)
Hash identifier: dxCkkCnWgdX6sdVlTGLzaZxvuzpel0v2yJz4xIxkzkA=
Subject key identifier: 2B:D0:7B:25:63:1E:DA:66:A6:47:97:EF:CA:7B:44:FE:69:A2:67:D4
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 060A
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9532A28E8B6411ED9BFFF1BEF1222468.roa
Signing time: Tue 03 Jan 2023 12:46:04 +0000
ROA not before: Tue 03 Jan 2023 12:45:59 +0000
ROA not after: Tue 04 Jan 2033 12:45:59 +0000
asID: 61317
IP address blocks: 192.142.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Feb 2023 10:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1546 (0x60a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jan 3 12:45:59 2023 GMT
Not After : Jan 4 12:45:59 2033 GMT
Subject: CN=63b4238b-57eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:53:2a:0a:3b:9b:8f:94:6d:db:3d:e9:7b:d0:
92:ba:42:83:76:59:bc:6d:df:be:4a:1e:f6:1a:9f:
87:76:b9:f2:84:13:89:75:47:5d:66:02:4b:44:4a:
07:de:4a:d4:ca:79:a2:47:47:28:6f:ab:f3:b8:89:
31:51:6e:7f:07:07:2a:79:fb:4f:bb:3b:5c:c6:f7:
f4:39:ee:77:d1:09:27:4c:f7:cc:e0:1e:16:55:69:
36:e1:2b:3e:70:c1:bf:e8:d6:3f:10:70:34:56:ee:
c3:e4:c7:27:d7:81:3a:26:75:b8:2e:10:3d:05:43:
e4:ea:2c:45:03:77:1f:af:8d:c4:47:f0:d3:a8:33:
6a:67:0a:01:eb:a4:23:91:47:d3:0c:f2:41:3b:01:
b0:36:67:43:cd:01:13:c2:21:a2:ea:44:10:c4:55:
49:48:82:29:bf:52:39:86:26:3f:b7:bd:10:8e:ad:
39:c7:4b:a7:6c:02:9b:86:dc:b1:53:19:06:de:aa:
e6:13:47:96:b9:14:8e:61:38:97:21:95:cb:ce:b3:
21:57:92:05:1b:3c:96:8e:f6:f6:db:96:a3:e7:13:
84:ab:3b:e4:8f:a8:bd:4c:e2:ae:4e:21:e9:b5:c1:
b0:14:0b:b2:52:91:85:b4:88:34:c1:04:68:bf:3b:
f0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D0:7B:25:63:1E:DA:66:A6:47:97:EF:CA:7B:44:FE:69:A2:67:D4
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9532A28E8B6411ED9BFFF1BEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.192.0/22
Signature Algorithm: sha256WithRSAEncryption
75:27:e8:1a:e5:d4:9f:d0:24:59:13:aa:36:f3:c9:0a:f5:b2:
31:d8:48:ec:eb:e1:ff:c2:3d:03:59:5b:60:a9:90:04:16:dd:
e1:ae:3c:89:17:8b:f8:56:c3:07:ea:41:fb:42:6c:9b:59:f2:
0c:1a:af:5c:5f:b8:47:3d:81:93:36:5a:68:d3:93:54:a8:52:
e8:ad:ec:65:47:93:54:4b:95:ca:7d:c8:10:9b:5b:2a:3f:f6:
31:c2:fd:fc:40:ba:82:14:53:ac:2d:b1:09:b4:87:75:73:be:
00:89:34:99:d6:2c:35:3c:eb:77:4d:74:87:4b:1c:85:4a:e4:
a1:f0:07:4e:06:7c:71:d6:28:e9:ce:b9:63:83:30:96:ac:73:
a5:17:6d:4e:0b:67:af:42:98:15:69:4f:c5:2c:6b:70:34:90:
81:69:6b:87:28:e8:bd:06:71:4b:d9:00:e3:ac:4d:70:2f:13:
ac:a3:d2:00:fc:14:82:4f:1b:27:7a:3e:f1:00:2f:58:cc:e2:
44:8b:78:59:06:0b:92:72:83:75:05:92:7d:d7:67:78:37:b2:
c5:07:48:1f:10:43:41:a7:c2:8f:9f:ea:f0:14:08:44:ed:91:
6c:6f:c1:9a:50:66:cf:27:ca:4f:89:7f:90:47:d5:75:df:a7:
ee:f0:9b:83
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBgowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMzAxMDMxMjQ1NTlaFw0zMzAxMDQxMjQ1NTlaMBgxFjAU
BgNVBAMMDTYzYjQyMzhiLTU3ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCeUyoKO5uPlG3bPel70JK6QoN2Wbxt375KHvYan4d2ufKEE4l1R11mAktE
SgfeStTKeaJHRyhvq/O4iTFRbn8HByp5+0+7O1zG9/Q57nfRCSdM98zgHhZVaTbh
Kz5wwb/o1j8QcDRW7sPkxyfXgTomdbguED0FQ+TqLEUDdx+vjcRH8NOoM2pnCgHr
pCORR9MM8kE7AbA2Z0PNARPCIaLqRBDEVUlIgim/UjmGJj+3vRCOrTnHS6dsApuG
3LFTGQbequYTR5a5FI5hOJchlcvOsyFXkgUbPJaO9vbblqPnE4SrO+SPqL1M4q5O
Iem1wbAUC7JSkYW0iDTBBGi/O/D/AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUK9B7
JWMe2mamR5fvyntE/mmiZ9QwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4Lzk1MzJBMjhFOEI2NDExRUQ5QkZGRjFCRUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALAjsAwDQYJKoZIhvcNAQELBQAD
ggEBAHUn6Brl1J/QJFkTqjbzyQr1sjHYSOzr4f/CPQNZW2CpkAQW3eGuPIkXi/hW
wwfqQftCbJtZ8gwar1xfuEc9gZM2WmjTk1SoUuit7GVHk1RLlcp9yBCbWyo/9jHC
/fxAuoIUU6wtsQm0h3VzvgCJNJnWLDU863dNdIdLHIVK5KHwB04GfHHWKOnOuWOD
MJasc6UXbU4LZ69CmBVpT8Usa3A0kIFpa4co6L0GcUvZAOOsTXAvE6yj0gD8FIJP
Gyd6PvEAL1jM4kSLeFkGC5Jyg3UFkn3XZ3g3ssUHSB8QQ0Gnwo+f6vAUCETtkWxv
wZpQZs8nyk+Jf5BH1XXfp+7wm4M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org