Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/3FA65D8A124511EDBD8473B7F1222468.roa
File: 3FA65D8A124511EDBD8473B7F1222468.roa (raw, json)
Hash identifier: zuqGrrty/t1AhUh7rOpBzLCg3xmz0wH3OisN+80CTV8=
Subject key identifier: AD:BE:7B:DD:9D:47:73:9D:9F:49:F3:71:FA:BB:03:0E:7C:53:7B:CC
Certificate issuer: /CN=F3671DBDAR/serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
Certificate serial: 02
Authority key identifier: C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
Authority info access: rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/3FA65D8A124511EDBD8473B7F1222468.roa
Signing time: Tue 02 Aug 2022 09:26:55 +0000
ROA not before: Tue 02 Aug 2022 09:26:51 +0000
ROA not after: Mon 02 Aug 2032 09:26:51 +0000
asID: 327896
IP address blocks: 169.255.240.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Aug 2022 12:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3671DBDAR
Validity
Not Before: Aug 2 09:26:51 2022 GMT
Not After : Aug 2 09:26:51 2032 GMT
Subject: CN=62e8eddf-79b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0a:33:42:34:c9:72:d0:41:67:e8:e2:7f:1d:
f1:8d:cb:84:6e:a3:5e:ed:80:08:b7:98:a4:14:8b:
71:6b:ee:64:a1:02:cd:e6:29:8c:f4:be:d6:5d:c1:
23:9e:32:5e:bc:68:65:41:11:c1:7b:5a:e0:ec:3d:
01:8a:0f:ec:28:ea:65:e2:42:73:5c:4d:af:ad:9e:
f2:42:b3:ff:0f:5b:32:02:5b:1f:94:bf:4c:30:32:
25:b0:36:7e:95:c2:b1:13:4b:48:f1:a2:5b:a0:1e:
43:70:89:7d:3c:21:ee:d7:e4:3d:ea:80:da:f0:47:
fd:f8:94:86:13:8d:1e:97:f0:8e:99:93:a8:b6:f0:
29:ee:8b:b7:6f:b9:82:cc:d9:ac:c4:b6:d5:62:aa:
db:95:7b:ba:c6:e3:d6:fe:4a:1d:eb:77:af:51:8d:
ed:f2:c3:8c:3a:91:75:11:00:c3:f7:93:27:a5:48:
8b:a2:9b:66:eb:ea:0d:68:f4:7d:62:f9:7a:3b:cf:
46:af:56:43:af:d7:6f:82:10:08:70:66:0d:e7:21:
64:0e:96:bb:bb:29:fa:f8:92:c8:f1:27:be:73:d4:
60:b1:45:62:c2:a8:0c:82:3e:fd:64:57:2f:b6:f2:
c1:a7:75:ca:36:56:8a:00:9f:bc:85:39:50:7d:14:
23:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BE:7B:DD:9D:47:73:9D:9F:49:F3:71:FA:BB:03:0E:7C:53:7B:CC
X509v3 Authority Key Identifier:
keyid:C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/3FA65D8A124511EDBD8473B7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.255.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:52:18:ca:a1:4f:71:6f:3c:07:76:b3:cb:f8:37:a5:cb:e0:
04:77:98:d4:f8:be:92:2e:dd:25:0c:46:c7:3f:bf:8f:5b:1b:
48:9c:47:e5:35:87:11:dd:83:b4:ac:12:d1:a7:3d:c6:ad:37:
b8:56:5e:f3:6b:24:8b:a7:72:fd:a1:49:b0:14:c2:ef:f0:85:
13:c1:55:e0:99:62:2f:13:47:cf:01:ae:79:12:de:d6:5f:db:
69:f3:32:44:8c:f1:f5:99:b7:08:19:b8:00:0e:90:7c:42:1b:
34:bb:b9:a6:a5:4c:a0:3d:53:ed:1e:65:fb:fb:dd:e7:27:5a:
e8:b3:0f:13:4c:fe:5b:d3:fe:51:98:03:15:30:0b:04:99:66:
7c:bb:fa:0f:42:41:c2:4b:1f:c5:73:ae:15:93:1e:03:e5:73:
ff:e0:3a:f3:ec:c5:e0:83:f7:55:b3:c6:dd:f8:ee:79:9d:22:
32:2d:38:a4:9c:a9:71:7e:87:28:5b:2b:08:26:9d:11:7f:55:
c3:8e:1b:ed:23:5c:c4:71:0d:ba:77:69:c2:d7:fc:bd:e4:d1:
82:5f:24:74:73:a8:ff:67:e6:e0:fe:17:cd:0a:d1:ed:3f:be:
b2:f7:69:86:75:c0:27:32:3e:6a:03:0d:35:d2:a3:24:49:b4:
1c:5d:bb:3a
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY3
MURCREFSMTEwLwYDVQQFEyhDODNEQzY4Q0UyQkU0MzI1M0FBQTU1MUFBRTIyRjk1
QTFGMURBRDJCMB4XDTIyMDgwMjA5MjY1MVoXDTMyMDgwMjA5MjY1MVowGDEWMBQG
A1UEAwwNNjJlOGVkZGYtNzliMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOcKM0I0yXLQQWfo4n8d8Y3LhG6jXu2ACLeYpBSLcWvuZKECzeYpjPS+1l3B
I54yXrxoZUERwXta4Ow9AYoP7CjqZeJCc1xNr62e8kKz/w9bMgJbH5S/TDAyJbA2
fpXCsRNLSPGiW6AeQ3CJfTwh7tfkPeqA2vBH/fiUhhONHpfwjpmTqLbwKe6Lt2+5
gszZrMS21WKq25V7usbj1v5KHet3r1GN7fLDjDqRdREAw/eTJ6VIi6KbZuvqDWj0
fWL5ejvPRq9WQ6/Xb4IQCHBmDechZA6Wu7sp+viSyPEnvnPUYLFFYsKoDII+/WRX
L7bywad1yjZWigCfvIU5UH0UI1MCAwEAAaOCAqIwggKeMB0GA1UdDgQWBBStvnvd
nUdznZ9J83H6uwMOfFN7zDAfBgNVHSMEGDAWgBTIPcaM4r5DJTqqVRquIvlaHx2t
KzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzFEQkQvM0VFMTAyREUxMjQ0MTFFRDlGNjI2OEI0RjEyMjI0NjgveUQzR2pP
Sy1ReVU2cWxVYXJpTDVXaDhkclNzLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
eUQzR2pPSy1ReVU2cWxVYXJpTDVXaDhkclNzLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NzFEQkQvM0VFMTAyREUxMjQ0MTFFRDlGNjI2OEI0RjEyMjI0
NjgvM0ZBNjVEOEExMjQ1MTFFREJEODQ3M0I3RjEyMjI0Njgucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqn/8DANBgkqhkiG9w0BAQsFAAOC
AQEAolIYyqFPcW88B3azy/g3pcvgBHeY1Pi+ki7dJQxGxz+/j1sbSJxH5TWHEd2D
tKwS0ac9xq03uFZe82ski6dy/aFJsBTC7/CFE8FV4JliLxNHzwGueRLe1l/bafMy
RIzx9Zm3CBm4AA6QfEIbNLu5pqVMoD1T7R5l+/vd5yda6LMPE0z+W9P+UZgDFTAL
BJlmfLv6D0JBwksfxXOuFZMeA+Vz/+A68+zF4IP3VbPG3fjueZ0iMi04pJypcX6H
KFsrCCadEX9Vw44b7SNcxHENundpwtf8veTRgl8kdHOo/2fm4P4XzQrR7T++svdp
hnXAJzI+agMNNdKjJEm0HF27Og==
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:56:13 2025 by rpki-client