Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A5F41CAE036611EE880D1A734AD9E6FC.roa
File: A5F41CAE036611EE880D1A734AD9E6FC.roa (raw, json)
Hash identifier: /HRNJQwqoe9n/HuNbR00Ltc6vMz5aj2rEUV2Vfyw9rk=
Subject key identifier: 09:F3:B7:A5:81:F1:82:8D:01:33:8D:9D:98:C5:13:06:DD:2C:10:1A
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0702
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A5F41CAE036611EE880D1A734AD9E6FC.roa
Signing time: Mon 05 Jun 2023 06:03:10 +0000
ROA not before: Mon 05 Jun 2023 06:03:04 +0000
ROA not after: Tue 07 Jun 2033 06:03:04 +0000
asID: 60707
IP address blocks: 192.142.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 06:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1794 (0x702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jun 5 06:03:04 2023 GMT
Not After : Jun 7 06:03:04 2033 GMT
Subject: CN=647d7a9e-ed9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:62:50:74:7c:d8:da:90:d3:7e:ae:84:cf:ec:
50:ee:e1:79:a7:ae:89:f5:93:7c:11:01:92:a6:85:
82:82:31:ea:7b:aa:24:e7:a1:94:f9:9c:9f:00:bd:
6f:92:a5:f4:e7:00:d1:71:41:29:24:72:1e:76:fe:
99:18:83:79:2f:41:6c:4b:ca:15:bd:16:75:5f:b8:
21:b4:45:49:58:e6:1c:15:4f:58:1c:4d:f4:97:43:
06:8a:80:e3:7f:96:b6:32:0a:e7:a7:00:6c:05:11:
ac:42:c3:23:ec:a1:a2:11:3e:5a:25:8b:cc:f3:b9:
dc:e7:11:a5:64:c2:c7:d7:a2:c3:95:35:4a:c7:f2:
bb:30:a5:66:76:cb:6d:77:7f:f5:ea:d7:43:fb:bb:
72:44:a9:5f:13:0f:3d:8b:50:0b:85:33:b3:49:bb:
4c:a1:b3:3a:72:16:66:3e:4e:1d:6a:3f:46:70:be:
58:74:db:4a:cc:ba:d3:33:6f:ac:c2:02:6f:25:98:
31:51:53:51:26:ea:d8:ea:27:ed:0c:1b:67:5c:49:
c4:cb:54:b5:ed:f4:4f:81:d4:12:87:5e:2d:3c:d9:
20:3e:1b:7c:23:a4:30:dd:ae:82:f9:a9:95:28:29:
31:4a:56:16:93:50:6a:8f:a8:60:7b:21:e3:87:e8:
85:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F3:B7:A5:81:F1:82:8D:01:33:8D:9D:98:C5:13:06:DD:2C:10:1A
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A5F41CAE036611EE880D1A734AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.192.0/22
Signature Algorithm: sha256WithRSAEncryption
71:a1:bd:b1:40:b0:d4:cf:96:60:16:dc:32:57:9e:d8:76:fe:
e4:31:65:5e:58:11:9b:1a:43:b8:a9:96:c9:f6:bd:c6:07:83:
41:51:2c:b5:09:68:1b:4f:f2:e5:d1:0c:51:3f:3e:bb:d1:83:
8c:ec:69:92:0d:eb:62:54:7b:f8:5f:a6:1f:69:78:8a:f7:d4:
42:14:6c:4c:8a:c4:e9:3e:92:e1:6a:c2:d9:da:f1:f3:94:8b:
10:27:05:76:77:47:89:3d:8e:cb:61:ed:16:84:c5:a2:2e:58:
c8:11:34:93:54:52:53:fe:05:3f:21:57:07:fd:0f:62:42:5b:
57:e9:41:68:45:cb:b7:7d:f6:72:0a:76:65:ab:3b:2d:18:06:
29:0f:71:5f:da:7c:b0:b6:0e:0c:cc:2f:54:8e:91:c7:60:60:
8d:ea:f2:db:aa:a7:14:48:b8:50:e6:b0:91:fb:7c:0c:d6:6e:
2f:f9:17:e8:40:07:a2:3d:0b:ae:b1:7d:97:5b:09:e2:55:f2:
25:b2:e8:88:7b:38:d0:93:2a:4f:21:81:97:a7:b0:91:ee:be:
83:0e:f4:99:4b:19:a8:a4:09:47:1a:d8:50:66:57:a1:8c:85:
20:a0:75:a9:f0:38:7c:50:61:f6:b9:df:8d:98:ce:a4:79:ef:
ce:d9:54:a8
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBwIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMzA2MDUwNjAzMDRaFw0zMzA2MDcwNjAzMDRaMBgxFjAU
BgNVBAMTDTY0N2Q3YTllLWVkOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCWYlB0fNjakNN+roTP7FDu4Xmnron1k3wRAZKmhYKCMep7qiTnoZT5nJ8A
vW+SpfTnANFxQSkkch52/pkYg3kvQWxLyhW9FnVfuCG0RUlY5hwVT1gcTfSXQwaK
gON/lrYyCuenAGwFEaxCwyPsoaIRPloli8zzudznEaVkwsfXosOVNUrH8rswpWZ2
y213f/Xq10P7u3JEqV8TDz2LUAuFM7NJu0yhszpyFmY+Th1qP0Zwvlh020rMutMz
b6zCAm8lmDFRU1Em6tjqJ+0MG2dcScTLVLXt9E+B1BKHXi082SA+G3wjpDDdroL5
qZUoKTFKVhaTUGqPqGB7IeOH6IWFAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUCfO3
pYHxgo0BM42dmMUTBt0sEBowHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4L0E1RjQxQ0FFMDM2NjExRUU4ODBEMUE3MzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALAjsAwDQYJKoZIhvcNAQELBQAD
ggEBAHGhvbFAsNTPlmAW3DJXnth2/uQxZV5YEZsaQ7iplsn2vcYHg0FRLLUJaBtP
8uXRDFE/PrvRg4zsaZIN62JUe/hfph9peIr31EIUbEyKxOk+kuFqwtna8fOUixAn
BXZ3R4k9jsth7RaExaIuWMgRNJNUUlP+BT8hVwf9D2JCW1fpQWhFy7d99nIKdmWr
Oy0YBikPcV/afLC2DgzML1SOkcdgYI3q8tuqpxRIuFDmsJH7fAzWbi/5F+hAB6I9
C66xfZdbCeJV8iWy6Ih7ONCTKk8hgZensJHuvoMO9JlLGaikCUca2FBmV6GMhSCg
danwOHxQYfa5342YzqR5787ZVKg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org