Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/149F790EB1E711ED829D3CFAF1222468.roa
File: 149F790EB1E711ED829D3CFAF1222468.roa (raw, json)
Hash identifier: aocCmxS6rdgnTaZG618Jx24ILbShSvTFIbzDusooN0g=
Subject key identifier: 44:29:B1:F0:4A:DB:A3:C6:F3:D6:01:63:54:32:30:43:9D:EE:76:48
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 68
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/149F790EB1E711ED829D3CFAF1222468.roa
Signing time: Tue 21 Feb 2023 12:55:56 +0000
ROA not before: Tue 21 Feb 2023 12:55:50 +0000
ROA not after: Tue 20 Feb 2024 12:55:50 +0000
asID: 35913
IP address blocks: 66.251.172.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Feb 21 12:55:50 2023 GMT
Not After : Feb 20 12:55:50 2024 GMT
Subject: CN=63f4bf5c-0aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:19:4a:72:0a:30:0b:97:c8:9e:41:98:7e:b6:
ad:71:cd:fd:2d:6d:40:09:bf:e3:92:31:2b:1f:8d:
2b:75:6d:ea:58:06:1c:7b:26:b0:91:02:c8:5b:84:
29:27:9e:79:2b:49:5c:b1:5a:7e:9a:d5:4f:d8:46:
b5:50:b1:5a:2b:0d:26:cc:04:18:52:da:be:a8:cb:
30:0e:c1:5e:8c:55:ca:ca:bc:ef:aa:77:2b:21:68:
2a:42:b3:06:85:9c:77:d4:ad:8d:3f:5f:86:75:14:
9a:ad:ce:45:7b:d1:34:29:da:a9:51:92:f6:09:1e:
63:24:a1:78:f0:65:ab:ba:11:ad:d0:3b:c3:88:77:
66:ac:6a:0c:49:c2:6a:2d:15:86:d1:90:a4:91:35:
dd:7c:f6:79:64:5c:07:c2:dd:39:db:fe:97:63:5c:
3a:6a:dd:77:f0:99:2b:dd:1f:42:1d:34:02:86:37:
a9:26:91:a2:80:74:ef:d1:42:4a:30:9b:54:fa:7a:
24:aa:bb:0b:d7:b4:87:60:c1:37:28:ec:9d:21:48:
98:dc:1d:2d:d5:b7:55:37:1a:47:69:6d:12:29:41:
07:18:82:3f:d3:55:fb:c2:8d:e1:55:71:37:3f:9a:
d4:8b:03:2b:56:52:e0:5b:0d:2d:f9:ef:11:f3:a9:
dd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:29:B1:F0:4A:DB:A3:C6:F3:D6:01:63:54:32:30:43:9D:EE:76:48
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/149F790EB1E711ED829D3CFAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.172.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:ba:ca:b1:06:4f:86:fd:fc:f9:ea:d5:ef:8a:ad:a7:ca:4f:
a8:70:39:9b:b4:75:23:67:55:0c:5f:ba:e3:30:2b:93:86:67:
86:bc:d5:ad:d5:84:9b:f7:b6:3b:31:25:3a:cf:dc:d2:27:da:
86:52:f0:76:24:34:66:17:a9:7a:74:db:49:21:f8:ab:b2:bc:
39:41:2a:62:07:a4:6c:73:5b:32:bb:cb:4e:eb:75:64:cd:a0:
bb:8d:4a:a5:9f:41:6a:58:9f:0b:da:08:90:0e:67:07:db:a3:
5d:ab:fd:43:50:3b:f8:8a:07:81:35:49:9f:e1:4d:b2:c3:eb:
6d:cb:41:96:93:6a:a9:82:48:12:36:0d:1b:d5:38:5b:34:eb:
21:20:f9:45:eb:56:5d:77:fd:df:12:67:be:6a:ae:79:b6:95:
b7:6e:8b:d7:eb:cb:67:61:23:8e:f2:c0:2f:ba:86:9f:5b:77:
e0:83:25:5e:b9:eb:64:ee:ec:75:2c:6f:94:ac:f9:b0:b0:35:
ac:15:cc:54:07:9a:07:3f:2b:99:0d:a1:25:2d:4a:a9:b3:e1:
6a:f3:fc:a9:fb:2a:5a:5a:06:a2:26:06:60:94:c0:cc:b5:07:
74:a1:f2:14:a3:b7:ee:1c:45:36:e4:e0:59:87:0c:3b:24:14:
06:17:ef:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 11:07:21 2023 by rpki-client on console-ams.rpki-client.org