Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/98C9996AD14611EE8FF82470775412E6.roa
File: 98C9996AD14611EE8FF82470775412E6.roa (raw, json)
Hash identifier: M+6qFiwTzU+8xzHb8JfymDQFa5mUlh17q3d9vrJklIE=
Subject key identifier: D3:7E:0A:0A:5C:D9:C4:AB:47:57:62:3C:B9:0E:05:EE:C4:27:5D:24
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 08D6
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/98C9996AD14611EE8FF82470775412E6.roa
Signing time: Thu 22 Feb 2024 05:52:44 +0000
ROA not before: Thu 22 Feb 2024 05:52:40 +0000
ROA not after: Wed 15 Feb 2034 05:52:40 +0000
asID: 60707
IP address blocks: 192.142.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2262 (0x8d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Feb 22 05:52:40 2024 GMT
Not After : Feb 15 05:52:40 2034 GMT
Subject: CN=65d6e12c-2f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:76:b7:86:07:ac:95:2b:98:2f:1f:8f:c6:d0:
af:09:2f:e8:46:45:98:40:97:03:36:ad:14:fb:0c:
4e:04:59:c9:d7:13:8f:6d:ec:7d:78:af:82:5a:a8:
d1:e5:9e:7c:a7:85:f1:51:97:04:f7:98:25:c4:b6:
d2:76:29:57:12:cf:c3:58:4a:64:24:03:6e:ea:c1:
b0:6b:e0:ab:3e:5f:15:d8:3c:90:b6:63:88:b9:ac:
1f:b2:cd:4e:f5:4d:93:54:49:4a:a0:ea:55:d9:72:
a9:ba:61:2c:39:66:97:75:81:b6:23:a6:71:7b:4d:
5a:bd:2d:09:f5:f4:33:af:4c:20:96:e7:2e:a2:28:
d6:72:4b:8c:04:5f:fa:b8:fe:53:1e:d8:49:90:5d:
5a:cb:12:05:dc:0a:9f:21:7b:3d:90:2c:0d:5f:46:
91:98:87:b0:17:2f:cf:aa:cf:42:fb:75:af:b4:53:
75:1c:a0:31:4a:6c:37:69:ed:17:c7:56:0b:4f:e2:
71:30:a3:02:e7:16:43:cb:f9:da:37:ca:2f:50:c8:
45:17:f0:57:52:33:d3:7c:c5:7c:06:56:c6:11:cf:
56:77:e3:83:9d:be:c8:87:30:e3:af:12:bb:5d:44:
5e:e6:9a:6b:11:f7:9a:0c:17:ce:59:9b:ec:03:f0:
cb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7E:0A:0A:5C:D9:C4:AB:47:57:62:3C:B9:0E:05:EE:C4:27:5D:24
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/98C9996AD14611EE8FF82470775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.140.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:ce:9e:54:d1:ef:5a:66:f2:fe:bb:79:8d:fd:1a:0c:30:4b:
5d:92:e8:c0:2a:10:a8:8f:40:e0:da:ba:04:5e:4d:f9:05:86:
18:1b:a1:8b:7e:c9:b5:83:1d:85:e4:ed:94:e8:66:9a:c1:5b:
dc:11:cb:9b:aa:ab:9c:4b:da:3f:14:29:ce:90:ac:3d:54:a8:
77:06:a0:ac:80:fd:53:8f:cc:2d:f7:03:d4:69:a3:67:90:87:
48:28:42:87:09:e7:99:9d:1f:e1:bf:9c:39:af:af:f7:bb:6f:
94:6b:89:79:e6:ee:77:4d:cb:15:80:bb:a1:86:6b:b4:93:4c:
fa:90:16:4f:4c:37:a9:4c:94:0f:01:52:11:23:0c:68:a4:22:
0f:0b:69:12:d7:94:6a:e5:c8:6d:f4:51:57:92:a5:f2:64:8a:
b1:b3:df:e3:bf:f3:c1:85:2a:67:e5:a0:5e:b5:f9:11:75:5b:
27:cb:d4:56:a6:cc:8c:6d:11:f5:5a:62:5e:ac:e1:1d:0f:88:
96:a3:de:83:28:39:2c:90:89:b7:02:d4:5b:db:e9:d4:ce:59:
5a:bc:0f:29:c1:d5:32:a3:af:27:21:e8:5c:53:1a:21:1e:ff:
b9:f5:24:1c:87:19:9c:28:b7:76:7a:e7:04:e3:bc:db:1c:6c:
32:34:7c:5c
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCNYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNDAyMjIwNTUyNDBaFw0zNDAyMTUwNTUyNDBaMBgxFjAU
BgNVBAMTDTY1ZDZlMTJjLTJmMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDxdreGB6yVK5gvH4/G0K8JL+hGRZhAlwM2rRT7DE4EWcnXE49t7H14r4Ja
qNHlnnynhfFRlwT3mCXEttJ2KVcSz8NYSmQkA27qwbBr4Ks+XxXYPJC2Y4i5rB+y
zU71TZNUSUqg6lXZcqm6YSw5Zpd1gbYjpnF7TVq9LQn19DOvTCCW5y6iKNZyS4wE
X/q4/lMe2EmQXVrLEgXcCp8hez2QLA1fRpGYh7AXL8+qz0L7da+0U3UcoDFKbDdp
7RfHVgtP4nEwowLnFkPL+do3yi9QyEUX8FdSM9N8xXwGVsYRz1Z344OdvsiHMOOv
ErtdRF7mmmsR95oMF85Zm+wD8MvPAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU034K
ClzZxKtHV2I8uQ4F7sQnXSQwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4Lzk4Qzk5OTZBRDE0NjExRUU4RkY4MjQ3MDc3NTQxMkU2LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALAjowwDQYJKoZIhvcNAQELBQAD
ggEBAKTOnlTR71pm8v67eY39GgwwS12S6MAqEKiPQODaugReTfkFhhgboYt+ybWD
HYXk7ZToZprBW9wRy5uqq5xL2j8UKc6QrD1UqHcGoKyA/VOPzC33A9Rpo2eQh0go
QocJ55mdH+G/nDmvr/e7b5RriXnm7ndNyxWAu6GGa7STTPqQFk9MN6lMlA8BUhEj
DGikIg8LaRLXlGrlyG30UVeSpfJkirGz3+O/88GFKmfloF61+RF1WyfL1FamzIxt
EfVaYl6s4R0PiJaj3oMoOSyQibcC1Fvb6dTOWVq8DynB1TKjrych6FxTGiEe/7n1
JByHGZwot3Z65wTjvNscbDI0fFw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org