Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C73145DAAE6011EF87865E9F762E951A.roa
File: C73145DAAE6011EF87865E9F762E951A.roa (raw, json)
Hash identifier: 33IK7YfC+cxnGSmrIBpCkl0cjTmfFoKiFVJttN+QQ48=
Subject key identifier: 3B:A7:86:53:DF:91:DB:0F:F2:B9:16:67:46:6B:FA:D9:0A:4F:76:31
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B34
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C73145DAAE6011EF87865E9F762E951A.roa
Signing time: Fri 29 Nov 2024 14:46:55 +0000
ROA not before: Fri 29 Nov 2024 14:46:52 +0000
ROA not after: Wed 29 Nov 2034 14:46:52 +0000
asID: 6202
IP address blocks: 192.142.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 08:17:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2868 (0xb34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Nov 29 14:46:52 2024 GMT
Not After : Nov 29 14:46:52 2034 GMT
Subject: CN=6749d3df-9576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6c:f4:80:19:98:b5:77:c1:67:c9:9b:3c:9e:
85:ec:70:51:ee:bf:18:c0:1e:3f:05:35:3c:99:f5:
c5:06:ea:53:53:47:5d:a8:38:03:97:d0:02:8a:02:
62:0a:f7:bd:42:59:af:1a:20:71:40:ca:ac:92:70:
0b:8a:1f:56:35:71:20:f7:f3:64:33:8c:91:88:1b:
9b:32:c9:4f:52:0b:52:ff:bd:87:a2:fc:9a:44:c0:
e6:8d:6d:b1:b8:13:cd:2c:28:89:db:22:c3:23:46:
2f:0d:1e:c9:db:e2:11:91:13:e9:2c:f9:6f:89:39:
51:2a:2e:e2:ad:eb:f1:ec:1f:ff:18:b7:af:a3:c1:
38:b7:eb:81:27:f0:1e:ed:84:c6:31:52:a9:af:03:
5c:ce:ad:b0:75:1f:7e:e9:7a:0a:b5:32:6c:c4:b4:
05:68:f4:18:d6:6b:e0:62:09:04:22:69:34:8e:38:
80:79:6c:12:c9:f4:de:a2:40:12:2a:c3:d0:b8:36:
e0:5f:03:1d:ee:d9:d9:bc:0c:e3:fe:40:15:18:fa:
7d:10:fd:d5:a4:36:c4:22:f8:4a:5b:69:0f:f5:cb:
ca:d5:ab:cf:df:ed:10:68:34:75:a2:cf:7b:f9:c5:
b7:7d:fe:13:7f:42:5b:e5:f4:ce:ab:bf:9f:48:a2:
e5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A7:86:53:DF:91:DB:0F:F2:B9:16:67:46:6B:FA:D9:0A:4F:76:31
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C73145DAAE6011EF87865E9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.65.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:b0:65:1d:7e:11:b8:9a:fb:1c:25:b4:71:3c:16:6f:58:73:
35:29:66:85:ca:cc:8e:af:3c:b3:b0:11:c0:bb:66:9c:aa:56:
4e:6c:fd:0c:58:7a:6b:0b:ff:2f:1e:c1:48:1a:79:ae:34:9d:
a1:cb:0e:8c:78:48:ba:7d:48:1c:7a:a2:03:b5:df:4b:8e:55:
94:c0:e5:1d:23:d9:a3:1b:6e:43:99:c0:96:a7:be:2e:c2:7f:
dd:51:62:9f:ca:00:9e:41:aa:ce:9e:4e:54:97:1c:32:84:ec:
e7:8c:93:47:cd:f7:f9:6b:7b:70:d3:7f:b0:d5:09:11:af:a1:
ad:cd:3a:7c:8a:4b:c6:af:90:8c:6e:10:3d:67:e7:22:cb:54:
a9:1a:38:00:02:6d:2f:e2:ac:b4:96:53:cb:91:9f:3f:a5:10:
33:ed:c9:b7:fe:4e:ed:f1:0b:c8:12:bf:39:0f:d0:57:54:cd:
f4:0a:e2:d7:ef:91:8f:af:3b:01:3d:98:fa:0e:ca:4b:a9:c3:
0e:9c:c3:ce:8e:a9:4c:e9:8b:bf:f9:82:41:cc:de:73:c1:ac:
4a:a4:ad:aa:bb:b5:14:33:40:c8:23:25:78:cb:88:bc:ab:41:
f2:6e:63:d5:85:1c:44:37:4d:95:e8:53:50:08:13:bd:d6:0a:
99:69:0f:8d
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCzQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNDExMjkxNDQ2NTJaFw0zNDExMjkxNDQ2NTJaMBgxFjAU
BgNVBAMTDTY3NDlkM2RmLTk1NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDabPSAGZi1d8FnyZs8noXscFHuvxjAHj8FNTyZ9cUG6lNTR12oOAOX0AKK
AmIK971CWa8aIHFAyqyScAuKH1Y1cSD382QzjJGIG5syyU9SC1L/vYei/JpEwOaN
bbG4E80sKInbIsMjRi8NHsnb4hGRE+ks+W+JOVEqLuKt6/HsH/8Yt6+jwTi364En
8B7thMYxUqmvA1zOrbB1H37pegq1MmzEtAVo9BjWa+BiCQQiaTSOOIB5bBLJ9N6i
QBIqw9C4NuBfAx3u2dm8DOP+QBUY+n0Q/dWkNsQi+EpbaQ/1y8rVq8/f7RBoNHWi
z3v5xbd9/hN/Qlvl9M6rv59IouUPAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUO6eG
U9+R2w/yuRZnRmv62QpPdjEwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4L0M3MzE0NURBQUU2MDExRUY4Nzg2NUU5Rjc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAjkEwDQYJKoZIhvcNAQELBQAD
ggEBAF2wZR1+Ebia+xwltHE8Fm9YczUpZoXKzI6vPLOwEcC7ZpyqVk5s/QxYemsL
/y8ewUgaea40naHLDox4SLp9SBx6ogO130uOVZTA5R0j2aMbbkOZwJanvi7Cf91R
Yp/KAJ5Bqs6eTlSXHDKE7OeMk0fN9/lre3DTf7DVCRGvoa3NOnyKS8avkIxuED1n
5yLLVKkaOAACbS/irLSWU8uRnz+lEDPtybf+Tu3xC8gSvzkP0FdUzfQK4tfvkY+v
OwE9mPoOykupww6cw86OqUzpi7/5gkHM3nPBrEqkraq7tRQzQMgjJXjLiLyrQfJu
Y9WFHEQ3TZXoU1AIE73WCplpD40=
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:19:48 2025 by rpki-client