Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/33258016B8F511ED858495EBF1222468.roa
File: 33258016B8F511ED858495EBF1222468.roa (raw, json)
Hash identifier: 06HrrJ5jMXHtUA6wGNy2SErPi6lr9A3l7Czd6ZXQtyI=
Subject key identifier: 54:48:CB:9B:AA:30:37:FA:C0:EE:66:98:1D:5C:BC:8A:E1:2B:AF:5F
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 02
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/33258016B8F511ED858495EBF1222468.roa
Signing time: Thu 02 Mar 2023 12:24:38 +0000
ROA not before: Thu 02 Mar 2023 12:24:35 +0000
ROA not after: Tue 10 Mar 2026 12:24:35 +0000
asID: 33763
IP address blocks: 160.242.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Mar 2023 14:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 12:24:35 2023 GMT
Not After : Mar 10 12:24:35 2026 GMT
Subject: CN=64009586-9847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4c:b8:cd:d5:a2:72:0f:ec:db:f8:19:c1:f8:
9c:e8:1b:ea:ac:63:05:7c:f3:eb:45:73:1a:d5:45:
9c:98:13:a5:e9:94:b1:c7:20:cb:84:b8:a5:cd:4d:
8b:92:5c:13:43:c2:cc:6c:72:1b:d3:99:70:d1:f1:
8a:6a:d7:78:29:37:8c:3a:28:82:a0:2c:28:29:34:
5e:8a:02:d4:10:81:4a:45:f0:ce:b8:94:2a:42:7e:
c3:d9:65:6a:26:5e:ae:c3:b8:87:c3:4f:ca:ed:49:
e3:c6:93:62:6c:85:32:b6:94:e2:74:4e:61:97:68:
77:1d:5d:5d:f2:c4:76:7e:5f:3f:79:e4:12:2d:68:
2b:a7:0e:29:d5:5c:f8:e7:88:12:64:b7:08:d6:44:
f4:99:23:e8:5d:a8:69:2e:9c:62:de:e0:6a:fe:68:
18:f3:28:dc:37:1a:06:8f:78:cd:35:2a:4c:ad:eb:
d5:0a:17:f8:94:93:ac:fc:16:5b:9a:fc:45:4c:d6:
2c:85:ef:9d:36:22:db:70:29:23:c7:61:00:f5:3e:
f8:38:11:e5:d8:0b:af:3a:b7:79:7b:bc:33:1e:b9:
5e:ae:5e:2f:8b:1b:3e:bc:cc:96:58:da:36:21:aa:
39:f5:01:29:de:5b:35:7f:74:f4:d2:18:9e:8a:64:
5c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:48:CB:9B:AA:30:37:FA:C0:EE:66:98:1D:5C:BC:8A:E1:2B:AF:5F
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/33258016B8F511ED858495EBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.30.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b9:e4:1a:ee:d1:80:3a:7a:ca:0b:05:63:a2:5c:ab:91:50:
7e:ce:5e:c8:5b:5f:89:87:0a:c1:27:1b:33:59:ca:35:53:fc:
ca:d9:8e:a7:f4:48:41:5c:5f:ac:99:83:a1:dc:25:05:e6:58:
90:3e:36:c2:ef:d4:30:44:17:15:24:ce:e9:f0:f8:b6:fe:26:
e1:fe:e5:96:66:06:81:1b:8d:b1:6e:47:cb:aa:6b:fb:77:4c:
88:f5:11:66:62:d5:b8:e9:f1:05:45:7f:9b:b6:5b:6e:0b:a0:
85:7a:72:f4:59:09:ee:bc:1c:94:5e:9b:ee:67:0d:16:7b:32:
bd:fc:db:25:5f:10:ee:65:7d:68:f4:a3:e4:95:ee:80:aa:d9:
a1:fd:a8:e2:b0:5b:5a:e9:ec:11:5c:b4:4a:5c:0f:55:f6:96:
29:cc:11:49:f0:a1:61:7c:9f:ee:fd:36:36:55:08:c8:aa:36:
51:a5:b2:6a:47:fd:dd:ab:f6:1e:67:d3:ca:dd:fa:f6:c6:b5:
52:00:c5:6c:47:07:02:bb:00:81:d1:4a:bd:4d:d8:2a:6f:6f:
42:29:b9:6d:a0:1e:b0:da:52:73:3e:78:78:4b:0d:f1:6c:40:
cf:24:24:d5:b1:b7:b2:3f:1f:3f:a1:72:3d:d8:52:1a:93:ad:
e8:b8:13:6a
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY4
ODZCM0FSMTEwLwYDVQQFEyhEOUMwQjIzM0FDQjA2MzU0MzU3NEQzRjVGMzI3QkVC
OEIyQjk5MTE4MB4XDTIzMDMwMjEyMjQzNVoXDTI2MDMxMDEyMjQzNVowGDEWMBQG
A1UEAwwNNjQwMDk1ODYtOTg0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANRMuM3VonIP7Nv4GcH4nOgb6qxjBXzz60VzGtVFnJgTpemUsccgy4S4pc1N
i5JcE0PCzGxyG9OZcNHximrXeCk3jDoogqAsKCk0XooC1BCBSkXwzriUKkJ+w9ll
aiZersO4h8NPyu1J48aTYmyFMraU4nROYZdodx1dXfLEdn5fP3nkEi1oK6cOKdVc
+OeIEmS3CNZE9Jkj6F2oaS6cYt7gav5oGPMo3DcaBo94zTUqTK3r1QoX+JSTrPwW
W5r8RUzWLIXvnTYi23ApI8dhAPU++DgR5dgLrzq3eXu8Mx65Xq5eL4sbPrzMllja
NiGqOfUBKd5bNX909NIYnopkXDsCAwEAAaOCAqIwggKeMB0GA1UdDgQWBBRUSMub
qjA3+sDuZpgdXLyK4SuvXzAfBgNVHSMEGDAWgBTZwLIzrLBjVDV00/XzJ764srmR
GDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODg2QjMvNUE0MTFGOUVCOEVGMTFFREE1QjA5RERBRjEyMjI0NjgvMmNDeU02
eXdZMVExZE5QMTh5ZS11TEs1a1JnLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
MmNDeU02eXdZMVExZE5QMTh5ZS11TEs1a1JnLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2ODg2QjMvNUE0MTFGOUVCOEVGMTFFREE1QjA5RERBRjEyMjI0
NjgvMzMyNTgwMTZCOEY1MTFFRDg1ODQ5NUVCRjEyMjI0Njgucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKDyHjANBgkqhkiG9w0BAQsFAAOC
AQEAHbnkGu7RgDp6ygsFY6Jcq5FQfs5eyFtfiYcKwScbM1nKNVP8ytmOp/RIQVxf
rJmDodwlBeZYkD42wu/UMEQXFSTO6fD4tv4m4f7llmYGgRuNsW5Hy6pr+3dMiPUR
ZmLVuOnxBUV/m7ZbbgughXpy9FkJ7rwclF6b7mcNFnsyvfzbJV8Q7mV9aPSj5JXu
gKrZof2o4rBbWunsEVy0SlwPVfaWKcwRSfChYXyf7v02NlUIyKo2UaWyakf93av2
HmfTyt369sa1UgDFbEcHArsAgdFKvU3YKm9vQim5baAesNpScz54eEsN8WxAzyQk
1bG3sj8fP6FyPdhSGpOt6LgTag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:42 2024 by rpki-client on console-ams.rpki-client.org