Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/DAA09F8EBF1B11EDBAE0678FF1222468.roa
File: DAA09F8EBF1B11EDBAE0678FF1222468.roa (raw, json)
Hash identifier: d4pxKCLJrOEk6SLIdlEdFT6o6PHgXCgblUi/kinZj34=
Subject key identifier: D8:61:D3:CC:52:7D:A0:5A:EC:6C:EF:FD:C9:99:F2:22:66:18:8B:AB
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0672
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/DAA09F8EBF1B11EDBAE0678FF1222468.roa
Signing time: Fri 10 Mar 2023 08:16:27 +0000
ROA not before: Fri 10 Mar 2023 08:16:23 +0000
ROA not after: Wed 09 Mar 2033 08:16:23 +0000
asID: 64286
IP address blocks: 192.142.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 10:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1650 (0x672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Mar 10 08:16:23 2023 GMT
Not After : Mar 9 08:16:23 2033 GMT
Subject: CN=640ae75b-34eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:49:87:39:00:77:26:0c:ec:bd:d8:98:1c:
b1:2e:f0:3b:12:ba:5e:69:fe:23:d0:9c:ce:35:da:
eb:91:9f:3e:0a:10:e6:91:64:7e:89:75:35:f0:89:
37:53:42:5a:73:c5:40:12:23:06:3b:36:8c:8c:27:
93:17:b0:4b:cf:9c:65:0b:aa:22:7a:64:cb:ca:93:
b1:db:31:eb:ad:78:90:31:93:22:24:d0:38:89:3b:
89:57:75:c1:06:ce:1e:8e:22:41:48:68:ee:67:44:
02:52:d2:10:f1:96:d0:4f:7b:b9:8a:29:36:3c:2a:
27:80:82:16:e9:58:d7:b6:a3:a6:7b:4f:53:ba:4f:
97:b6:8e:f4:ec:fa:ac:3e:50:08:ba:3a:5f:03:62:
f9:8c:9d:d6:bc:fe:50:27:55:c9:9b:e1:78:83:d5:
57:f1:31:84:19:ec:d8:20:d4:21:9a:38:92:a5:ba:
53:f7:74:0c:a8:2f:c2:3a:96:dc:c7:f2:44:8e:10:
60:30:f9:41:02:41:e7:e4:b1:b0:bd:44:0c:f4:24:
89:ec:8c:93:ff:d3:cc:8b:75:b8:fc:14:05:0c:55:
05:25:bf:6d:e0:1b:f9:14:ab:26:ca:bd:b3:11:86:
63:a5:97:58:16:95:be:6d:3b:2d:04:a6:c3:73:82:
84:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:61:D3:CC:52:7D:A0:5A:EC:6C:EF:FD:C9:99:F2:22:66:18:8B:AB
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/DAA09F8EBF1B11EDBAE0678FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.105.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:30:d5:ff:a2:86:e2:0e:a6:ba:bd:04:00:76:51:e8:88:d9:
6a:09:7d:40:74:4b:ec:6e:d9:80:d4:6b:7e:cf:de:37:4f:8d:
4d:c3:ad:af:a8:8e:31:fd:76:2c:f7:9e:06:25:60:2e:28:d1:
64:b6:51:e4:56:98:6a:89:6d:64:dd:ae:6d:c3:08:95:64:57:
c2:4f:a1:da:b0:38:a4:45:dc:6b:40:25:33:5b:69:e1:b6:22:
85:d7:7c:6b:e7:16:db:86:88:7b:e8:36:74:ae:87:ca:04:9a:
52:72:70:34:55:70:2f:ce:9d:12:62:3c:25:29:f6:74:94:b9:
55:f5:17:c1:d1:45:8b:de:55:5a:e3:94:1c:a8:20:ef:2f:e5:
3b:a4:70:c9:89:75:7a:f5:f9:11:d2:03:de:1a:b9:09:49:43:
fe:b7:ce:5d:31:74:aa:0a:d0:15:1a:ca:45:63:02:23:7b:1f:
c8:9e:16:cc:b0:67:8c:b8:2b:e3:26:09:73:06:87:6a:0d:7d:
da:42:85:08:11:df:1b:ef:b8:60:63:0f:9b:ac:d6:d5:c2:19:
6b:3d:23:35:08:44:3a:3d:ae:0e:b9:1e:10:8f:21:46:94:f2:
ef:b0:ad:e0:5a:82:ed:f0:6f:6c:06:22:4e:63:45:d8:11:be:
25:db:53:ff
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMzAzMTAwODE2MjNaFw0zMzAzMDkwODE2MjNaMBgxFjAU
BgNVBAMMDTY0MGFlNzViLTM0ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrjEmHOQB3JgzsvdiYHLEu8DsSul5p/iPQnM412uuRnz4KEOaRZH6JdTXw
iTdTQlpzxUASIwY7NoyMJ5MXsEvPnGULqiJ6ZMvKk7HbMeuteJAxkyIk0DiJO4lX
dcEGzh6OIkFIaO5nRAJS0hDxltBPe7mKKTY8KieAghbpWNe2o6Z7T1O6T5e2jvTs
+qw+UAi6Ol8DYvmMnda8/lAnVcmb4XiD1VfxMYQZ7Ngg1CGaOJKlulP3dAyoL8I6
ltzH8kSOEGAw+UECQefksbC9RAz0JInsjJP/08yLdbj8FAUMVQUlv23gG/kUqybK
vbMRhmOll1gWlb5tOy0EpsNzgoSvAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU2GHT
zFJ9oFrsbO/9yZnyImYYi6swHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4L0RBQTA5RjhFQkYxQjExRURCQUUwNjc4RkYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAjmkwDQYJKoZIhvcNAQELBQAD
ggEBAMUw1f+ihuIOprq9BAB2UeiI2WoJfUB0S+xu2YDUa37P3jdPjU3Dra+ojjH9
diz3ngYlYC4o0WS2UeRWmGqJbWTdrm3DCJVkV8JPodqwOKRF3GtAJTNbaeG2IoXX
fGvnFtuGiHvoNnSuh8oEmlJycDRVcC/OnRJiPCUp9nSUuVX1F8HRRYveVVrjlByo
IO8v5TukcMmJdXr1+RHSA94auQlJQ/63zl0xdKoK0BUaykVjAiN7H8ieFsywZ4y4
K+MmCXMGh2oNfdpChQgR3xvvuGBjD5us1tXCGWs9IzUIRDo9rg65HhCPIUaU8u+w
reBagu3wb2wGIk5jRdgRviXbU/8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:09 2024 by rpki-client on console-fra.rpki-client.org