Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9D77370A03C811F08EAB8149762E951A.roa
File: 9D77370A03C811F08EAB8149762E951A.roa (raw, json)
Hash identifier: yaBeYhrzacAW9POiqZ5RtYfspV7bhnzC3VrRkXV4A2c=
Subject key identifier: A1:E8:71:65:20:4E:67:00:89:82:38:31:1C:72:A0:F1:4D:C6:6B:0D
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C19
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9D77370A03C811F08EAB8149762E951A.roa
Signing time: Tue 18 Mar 2025 07:14:22 +0000
ROA not before: Tue 18 Mar 2025 07:14:18 +0000
ROA not after: Wed 21 Mar 2035 07:14:18 +0000
asID: 36916
IP address blocks: 192.142.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 12:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3097 (0xc19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 18 07:14:18 2025 GMT
Not After : Mar 21 07:14:18 2035 GMT
Subject: CN=67d91d4e-25dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:0a:6d:8f:36:27:ff:76:96:2c:e4:10:aa:
55:0e:1c:5a:12:87:76:c2:d2:ad:26:88:42:f9:f1:
ee:c7:6b:63:99:62:74:af:2d:8f:84:8c:e2:6a:20:
d0:ed:41:d6:1b:b6:38:48:bd:3b:96:4e:d2:03:be:
1d:d2:04:01:56:e4:83:83:00:0d:04:13:b8:ed:4e:
35:30:23:48:b6:99:f3:ca:59:d3:08:04:09:13:cb:
63:5e:d6:f6:24:05:39:ef:14:ca:e8:6c:bc:4a:b6:
a7:69:de:e4:2a:61:78:72:8b:cb:8a:fa:f3:ab:dd:
65:8a:1d:76:81:65:4d:83:44:01:94:6d:3e:45:f7:
11:a0:15:de:25:de:02:5c:c9:61:17:30:d8:ee:ce:
46:74:11:d1:f9:d1:3f:40:3d:53:a5:2e:c6:6b:33:
d3:c7:de:f1:b9:ab:9a:d0:3c:8b:d9:9d:18:b4:3f:
a0:5f:23:4b:8b:63:69:f5:73:38:6b:cf:d1:24:2e:
11:d0:c8:a1:6a:2d:17:e3:29:9a:b1:10:ed:05:e8:
65:cd:9e:56:5a:af:38:48:6e:09:b3:f5:17:26:30:
22:2d:3d:06:6d:f7:9c:58:2a:ef:03:a0:d8:79:67:
85:4d:6e:73:83:f9:2c:2a:22:dc:1d:82:78:1d:21:
63:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E8:71:65:20:4E:67:00:89:82:38:31:1C:72:A0:F1:4D:C6:6B:0D
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9D77370A03C811F08EAB8149762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.108.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b9:a5:24:7d:31:fd:f0:15:3d:c4:9d:ca:7e:07:e8:20:eb:
39:95:fa:c9:84:93:6c:0b:ef:e1:10:6a:80:ba:4d:ad:06:94:
b2:67:98:19:41:62:95:a6:ef:31:9b:54:d8:e7:ee:c1:fa:86:
9b:87:d8:2b:61:ab:ab:79:0a:81:cd:e9:84:fe:53:77:9b:e3:
ec:1f:9d:2a:5c:25:f2:9e:8e:2d:ca:bb:fd:bc:39:5a:5e:62:
f9:66:e2:ec:9e:46:e6:ba:95:c2:ce:95:48:62:31:d7:b5:ef:
c6:2e:64:8a:1f:54:59:fa:6c:be:a0:d0:dc:05:ce:93:7f:b1:
9c:84:1c:f7:8d:7d:8e:01:a5:7e:96:aa:6f:a5:ba:8f:0c:fb:
2c:f0:1b:72:18:b1:f5:fb:31:b5:70:cb:e8:a5:4c:0e:0d:d7:
ac:54:9b:51:24:af:13:9c:b1:b2:d9:30:8d:5b:55:3a:2e:17:
6d:09:80:8f:ea:29:e0:7b:3c:ae:a1:2e:87:1d:65:8b:a9:36:
9d:16:43:e4:b0:e3:dd:d3:5f:e0:f8:1c:76:c3:0a:80:f6:f9:
8f:3e:27:f2:6a:4a:93:99:ad:f0:05:3c:2d:99:df:8e:8e:e2:
1e:18:10:b9:3e:8c:39:70:54:cf:0f:0c:d8:91:c7:6d:7a:5b:
dd:d8:29:19
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDBkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNTAzMTgwNzE0MThaFw0zNTAzMjEwNzE0MThaMBgxFjAU
BgNVBAMTDTY3ZDkxZDRlLTI1ZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIggptjzYn/3aWLOQQqlUOHFoSh3bC0q0miEL58e7Ha2OZYnSvLY+EjOJq
INDtQdYbtjhIvTuWTtIDvh3SBAFW5IODAA0EE7jtTjUwI0i2mfPKWdMIBAkTy2Ne
1vYkBTnvFMrobLxKtqdp3uQqYXhyi8uK+vOr3WWKHXaBZU2DRAGUbT5F9xGgFd4l
3gJcyWEXMNjuzkZ0EdH50T9APVOlLsZrM9PH3vG5q5rQPIvZnRi0P6BfI0uLY2n1
czhrz9EkLhHQyKFqLRfjKZqxEO0F6GXNnlZarzhIbgmz9RcmMCItPQZt95xYKu8D
oNh5Z4VNbnOD+SwqItwdgngdIWOxAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUoehx
ZSBOZwCJgjgxHHKg8U3Gaw0wHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzlENzczNzBBMDNDODExRjA4RUFCODE0OTc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAjmwwDQYJKoZIhvcNAQELBQAD
ggEBAG65pSR9Mf3wFT3Encp+B+gg6zmV+smEk2wL7+EQaoC6Ta0GlLJnmBlBYpWm
7zGbVNjn7sH6hpuH2Cthq6t5CoHN6YT+U3eb4+wfnSpcJfKeji3Ku/28OVpeYvlm
4uyeRua6lcLOlUhiMde178YuZIofVFn6bL6g0NwFzpN/sZyEHPeNfY4BpX6Wqm+l
uo8M+yzwG3IYsfX7MbVwy+ilTA4N16xUm1EkrxOcsbLZMI1bVTouF20JgI/qKeB7
PK6hLocdZYupNp0WQ+Sw493TX+D4HHbDCoD2+Y8+J/JqSpOZrfAFPC2Z346O4h4Y
ELk+jDlwVM8PDNiRx216W93YKRk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:18:28 2025 by rpki-client