Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/E873C8089AB811ECA8F9E5C85A40D577.roa
File: E873C8089AB811ECA8F9E5C85A40D577.roa (raw, json)
Hash identifier: bOhBHWlT+fFaqLzK6nnEH3gbBNcvKUeGkD72MqqX00c=
Subject key identifier: 60:45:9A:A3:32:86:1B:85:1A:4A:29:BB:FF:ED:E4:C8:FA:1D:BE:F8
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0455
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/E873C8089AB811ECA8F9E5C85A40D577.roa
Signing time: Thu 03 Mar 2022 06:12:31 +0000
ROA not before: Thu 03 Mar 2022 06:12:27 +0000
ROA not after: Tue 07 Mar 2028 06:12:27 +0000
asID: 64286
IP address blocks: 192.142.0.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 06:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1109 (0x455)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Mar 3 06:12:27 2022 GMT
Not After : Mar 7 06:12:27 2028 GMT
Subject: CN=62205c4f-34be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:52:2d:8e:f6:43:ba:c5:72:72:06:48:27:
2f:d0:a2:51:8c:09:1d:2f:b1:f6:11:ec:97:a1:f9:
a4:50:9b:bd:04:eb:18:f1:24:db:d0:ef:30:84:c6:
3f:df:41:97:82:a0:6c:fa:7f:69:fc:25:07:a6:d1:
20:f7:f3:f1:28:ac:7a:1e:5c:c6:d4:ec:c1:b8:68:
0e:ae:3b:9e:c7:4a:d1:3e:1a:2c:bf:df:64:20:31:
49:78:7d:5e:37:fa:29:95:81:62:d3:ed:60:a0:12:
77:d2:38:36:69:11:2a:06:8d:82:c3:96:27:7d:af:
8d:a1:00:71:d3:40:d8:73:4b:49:77:b5:af:26:d5:
89:5c:da:ed:bf:fb:95:13:fb:42:91:d4:15:c4:7c:
fd:fb:71:05:8a:7b:26:f7:b0:8d:76:de:70:d8:58:
4e:bb:1e:dd:c1:9b:20:18:cf:9d:54:af:1d:cf:9c:
30:5b:38:36:75:14:e9:8b:4a:68:bc:0a:bd:2b:e9:
8b:9f:87:d2:79:14:12:8a:27:65:cc:ec:1d:b4:dd:
05:b4:c9:7b:b7:00:b9:d9:9d:2e:8c:ab:c8:43:fc:
f1:c2:0d:63:a5:20:eb:13:8f:6e:2b:69:8d:9a:f8:
d4:90:9e:67:ae:d5:88:b2:2d:de:ac:42:9f:f5:0d:
4c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:45:9A:A3:32:86:1B:85:1A:4A:29:BB:FF:ED:E4:C8:FA:1D:BE:F8
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/E873C8089AB811ECA8F9E5C85A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7d:9f:33:6c:fd:65:70:50:9e:90:cc:aa:4f:e0:1e:7f:2c:d8:
d8:61:62:88:77:8e:3d:f2:9b:47:21:b2:f6:e0:ef:c9:59:1b:
cd:d6:43:8f:f8:c9:05:94:d0:0b:77:d0:05:8a:60:93:f7:8c:
46:59:e5:75:8b:a0:71:20:7e:31:3c:eb:2a:42:fc:3d:d2:6f:
78:ad:67:59:52:9b:0f:32:95:36:e3:91:f0:7c:fe:32:6a:df:
fc:2f:c1:53:aa:3b:a7:02:2d:1f:79:58:56:cb:90:c7:95:28:
92:63:ca:13:ce:47:13:89:3d:66:39:37:d2:c8:0e:be:20:be:
35:cd:7c:05:3d:ce:bd:64:46:9d:81:e9:a4:a4:6a:1f:6e:15:
c5:8c:09:bb:5d:2a:81:1a:b8:a0:19:b9:d7:19:df:3f:a8:68:
e3:61:6e:76:e3:26:4b:a5:2e:a2:7d:b5:b7:e1:82:66:00:6d:
86:c3:01:7d:21:79:1a:ab:7f:b3:04:2d:85:f0:6e:71:d8:8c:
8c:4c:40:ec:38:01:85:54:ef:c6:ab:82:6f:46:fe:d6:ef:b8:
83:fb:de:21:b3:59:b1:01:58:81:7f:44:53:74:71:34:8c:c5:
db:8c:21:95:70:d9:7c:37:fa:00:b2:f7:fb:c5:c9:62:8c:59:
cf:94:42:d3
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBFUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMjAzMDMwNjEyMjdaFw0yODAzMDcwNjEyMjdaMBgxFjAU
BgNVBAMMDTYyMjA1YzRmLTM0YmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCoNlItjvZDusVycgZIJy/QolGMCR0vsfYR7Jeh+aRQm70E6xjxJNvQ7zCE
xj/fQZeCoGz6f2n8JQem0SD38/EorHoeXMbU7MG4aA6uO57HStE+Giy/32QgMUl4
fV43+imVgWLT7WCgEnfSODZpESoGjYLDlid9r42hAHHTQNhzS0l3ta8m1Ylc2u2/
+5UT+0KR1BXEfP37cQWKeyb3sI123nDYWE67Ht3BmyAYz51Urx3PnDBbODZ1FOmL
Smi8Cr0r6Yufh9J5FBKKJ2XM7B203QW0yXu3ALnZnS6Mq8hD/PHCDWOlIOsTj24r
aY2a+NSQnmeu1YiyLd6sQp/1DUyvAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUYEWa
ozKGG4UaSim7/+3kyPodvvgwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4L0U4NzNDODA4OUFCODExRUNBOEY5RTVDODVBNDBENTc3LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXAjgAwDQYJKoZIhvcNAQELBQAD
ggEBAH2fM2z9ZXBQnpDMqk/gHn8s2NhhYoh3jj3ym0chsvbg78lZG83WQ4/4yQWU
0At30AWKYJP3jEZZ5XWLoHEgfjE86ypC/D3Sb3itZ1lSmw8ylTbjkfB8/jJq3/wv
wVOqO6cCLR95WFbLkMeVKJJjyhPORxOJPWY5N9LIDr4gvjXNfAU9zr1kRp2B6aSk
ah9uFcWMCbtdKoEauKAZudcZ3z+oaONhbnbjJkulLqJ9tbfhgmYAbYbDAX0heRqr
f7MELYXwbnHYjIxMQOw4AYVU78argm9G/tbvuIP73iGzWbEBWIF/RFN0cTSMxduM
IZVw2Xw3+gCy9/vFyWKMWc+UQtM=
-----END CERTIFICATE-----
Generated at Mon Nov 4 09:05:00 2024 by rpki-client on console-ams.rpki-client.org