Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/ED33BBAC47C111EEA01B6E144AD9E6FC.roa
File: ED33BBAC47C111EEA01B6E144AD9E6FC.roa (raw, json)
Hash identifier: eC1zN/cf8DgTqRhJqb2CKWANzYhTJyVBRRdqLdkdCko=
Subject key identifier: D0:EB:1A:45:19:67:9A:92:A2:8D:65:D4:B6:B9:58:F6:3E:8E:FA:73
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0789
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/ED33BBAC47C111EEA01B6E144AD9E6FC.roa
Signing time: Thu 31 Aug 2023 05:47:53 +0000
ROA not before: Thu 31 Aug 2023 05:47:50 +0000
ROA not after: Wed 24 Aug 2033 05:47:50 +0000
asID: 49645
IP address blocks: 192.142.102.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jan 2024 08:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1929 (0x789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 31 05:47:50 2023 GMT
Not After : Aug 24 05:47:50 2033 GMT
Subject: CN=64f02989-3ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:08:14:27:6c:b6:e4:f1:a9:cc:ba:9e:a6:
36:3c:bc:1d:9e:ef:f2:8a:46:df:d7:1d:6a:1e:0f:
19:5d:b6:38:a5:f7:e0:a2:63:5c:13:3c:8b:5b:7f:
d0:49:c8:f6:88:57:0d:5e:81:0b:3c:a9:50:5d:84:
87:88:b5:e8:a2:5c:b7:3e:12:b8:d7:93:1a:e7:55:
46:3e:03:53:30:f8:93:f0:54:28:84:9f:45:e3:38:
65:2a:d6:b2:64:62:f1:2f:c9:b2:04:0f:82:df:29:
2d:f6:7e:f3:b3:d2:30:b5:02:f0:2e:1f:7f:bf:77:
6a:4d:f1:42:44:05:c8:d1:87:f3:b4:cc:54:04:2c:
4e:5b:22:16:5f:73:56:d6:57:86:75:b6:d6:f4:21:
69:11:01:74:c2:a5:33:78:45:d2:ff:c2:83:79:d2:
45:4c:f1:1e:d6:6a:ac:e5:c8:32:60:2f:df:a5:58:
99:d8:da:84:b7:70:e1:91:67:61:6a:86:82:a8:f4:
6d:e6:81:2a:10:2e:a0:85:29:1e:dd:86:5a:2b:7e:
1f:97:53:02:af:c3:91:81:86:f0:44:85:5c:08:8b:
a4:9e:37:69:d4:dd:d7:db:8d:a3:d3:f8:0c:02:dd:
a9:26:e2:c4:da:98:61:d9:09:8d:f7:7b:a8:88:e4:
d0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EB:1A:45:19:67:9A:92:A2:8D:65:D4:B6:B9:58:F6:3E:8E:FA:73
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/ED33BBAC47C111EEA01B6E144AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.102.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:20:0f:ec:23:21:14:14:01:6f:7a:a4:5c:78:81:3d:10:4f:
f8:62:05:e2:42:12:6f:40:2c:f7:ac:89:07:ca:9c:24:8b:a8:
fe:5f:84:58:39:0d:c8:88:49:b3:49:79:17:79:aa:66:3d:8e:
ec:db:bd:c6:da:fa:32:18:91:7b:f1:15:6b:f3:95:3f:c6:84:
08:09:47:5e:be:4d:5b:de:27:95:8a:c1:4b:0c:06:2f:59:03:
25:37:64:a1:9d:82:d2:78:d0:1c:a8:df:54:51:cf:d9:ad:15:
26:f5:00:2e:67:9c:b4:d1:fb:49:06:16:5d:a4:6b:ee:1a:1d:
90:05:63:3d:99:57:8f:a3:d8:1e:d2:11:f9:5f:e9:86:71:d8:
d9:c4:f6:0f:52:e1:af:1c:f3:34:2e:ac:d4:57:af:d8:96:4f:
f5:8b:17:5a:6a:44:0b:86:4d:3a:f4:01:ec:14:b7:41:c9:8f:
0e:bd:e1:a0:df:ca:e7:f7:27:fa:4f:e3:30:fa:24:61:3f:48:
1e:95:9c:b1:62:e6:6e:40:f2:9f:76:a9:d1:45:85:34:e9:73:
76:a0:b3:c8:d8:ee:5d:7f:a7:b4:71:bd:7e:5b:36:4e:5a:74:
da:b1:86:62:75:39:12:46:01:2b:e3:94:bc:70:3d:af:b6:74:
8b:a6:35:14
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMzA4MzEwNTQ3NTBaFw0zMzA4MjQwNTQ3NTBaMBgxFjAU
BgNVBAMTDTY0ZjAyOTg5LTNmZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuFggUJ2y25PGpzLqepjY8vB2e7/KKRt/XHWoeDxldtjil9+CiY1wTPItb
f9BJyPaIVw1egQs8qVBdhIeIteiiXLc+ErjXkxrnVUY+A1Mw+JPwVCiEn0XjOGUq
1rJkYvEvybIED4LfKS32fvOz0jC1AvAuH3+/d2pN8UJEBcjRh/O0zFQELE5bIhZf
c1bWV4Z1ttb0IWkRAXTCpTN4RdL/woN50kVM8R7WaqzlyDJgL9+lWJnY2oS3cOGR
Z2FqhoKo9G3mgSoQLqCFKR7dhlorfh+XUwKvw5GBhvBEhVwIi6SeN2nU3dfbjaPT
+AwC3akm4sTamGHZCY33e6iI5NAlAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU0Osa
RRlnmpKijWXUtrlY9j6O+nMwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4L0VEMzNCQkFDNDdDMTExRUVBMDFCNkUxNDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHAjmYwDQYJKoZIhvcNAQELBQAD
ggEBACogD+wjIRQUAW96pFx4gT0QT/hiBeJCEm9ALPesiQfKnCSLqP5fhFg5DciI
SbNJeRd5qmY9juzbvcba+jIYkXvxFWvzlT/GhAgJR16+TVveJ5WKwUsMBi9ZAyU3
ZKGdgtJ40Byo31RRz9mtFSb1AC5nnLTR+0kGFl2ka+4aHZAFYz2ZV4+j2B7SEflf
6YZx2NnE9g9S4a8c8zQurNRXr9iWT/WLF1pqRAuGTTr0AewUt0HJjw694aDfyuf3
J/pP4zD6JGE/SB6VnLFi5m5A8p92qdFFhTTpc3ags8jY7l1/p7RxvX5bNk5adNqx
hmJ1ORJGASvjlLxwPa+2dIumNRQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org