Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/2E8DCCD47C8B11EEB54D1A624AD9E6FC.roa
File: 2E8DCCD47C8B11EEB54D1A624AD9E6FC.roa (raw, json)
Hash identifier: XHYaowMFuWZS06UtuSvgQtIi2LRWjiTayPJRWfYBGyA=
Subject key identifier: 1A:E9:92:D7:E6:0F:6C:21:92:F8:B1:AC:B7:B1:51:80:80:B5:22:90
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 01C3
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/2E8DCCD47C8B11EEB54D1A624AD9E6FC.roa
Signing time: Mon 06 Nov 2023 09:59:32 +0000
ROA not before: Mon 06 Nov 2023 09:59:29 +0000
ROA not after: Tue 05 Nov 2024 09:59:29 +0000
asID: 53356
IP address blocks: 66.251.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 12:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Nov 6 09:59:29 2023 GMT
Not After : Nov 5 09:59:29 2024 GMT
Subject: CN=6548b904-8191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f6:3f:4f:92:83:32:55:50:d8:47:2d:2d:5a:
78:b1:9d:09:6d:e8:f8:0d:87:83:76:1d:3b:86:87:
a7:df:0a:ec:cb:a1:27:8c:5b:b0:b4:5c:06:da:b4:
77:27:f4:95:94:7b:6b:34:3d:2d:02:2e:78:86:60:
5c:8b:8b:7d:85:43:8a:97:bc:48:b6:6f:84:02:e3:
23:b4:92:0f:f3:b4:13:78:1a:f7:1e:1c:3f:76:87:
a3:82:24:e7:da:98:fc:c9:28:65:08:60:a0:5d:3c:
d8:28:59:09:db:e7:a3:03:55:48:5f:31:73:04:3c:
5a:1c:ff:5a:47:fe:52:b7:96:1a:2e:c0:8c:51:a0:
ef:7e:39:b3:d3:44:57:8d:08:cd:fc:83:bd:ed:83:
ac:c7:4e:43:83:10:25:9b:f9:7d:25:a8:16:82:6e:
3f:47:14:df:39:c5:3c:71:9b:a3:ac:18:ff:01:b0:
46:a8:1e:d9:c9:44:41:db:99:b1:9c:f4:d8:99:68:
43:b4:e4:2f:2c:14:d4:ea:00:53:2a:39:f2:a4:2b:
bc:17:2d:19:10:b8:fb:fe:1f:b5:31:72:f9:60:f0:
35:20:96:83:6d:cc:e5:e1:db:d3:8e:77:a2:dd:50:
69:e9:b2:84:0a:d9:34:2e:dc:58:76:c6:88:96:2f:
46:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E9:92:D7:E6:0F:6C:21:92:F8:B1:AC:B7:B1:51:80:80:B5:22:90
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/2E8DCCD47C8B11EEB54D1A624AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.164.0/24
Signature Algorithm: sha256WithRSAEncryption
93:85:98:51:a2:cd:19:c8:41:63:72:9b:dc:fc:49:cf:99:25:
59:97:7f:74:d2:92:5c:6d:c6:db:be:94:b4:99:c4:b7:09:c3:
c5:08:28:7e:69:d8:c4:27:d7:d2:d2:84:09:2c:11:03:31:10:
da:e2:77:ab:3e:af:55:f9:c5:c8:80:d2:5f:7a:d3:82:83:9f:
b4:49:f7:ea:e6:6e:44:79:2a:76:a7:25:f9:3e:97:bb:ff:4b:
4b:1f:fc:4b:e6:c1:5e:67:b5:31:81:ac:02:84:72:5d:d9:f6:
48:1f:91:1f:65:71:af:d0:cd:08:c0:13:2c:cd:0e:48:d7:9a:
34:09:9f:02:24:ae:0a:67:6a:ee:20:6d:f7:58:be:5d:b9:e5:
c5:b7:dc:e5:9b:35:9e:da:81:81:d4:4d:d6:35:fe:bc:72:6c:
a9:5f:37:9b:bb:3c:7b:b5:12:71:33:ee:9e:c9:05:86:14:ff:
ef:b9:c8:32:43:a0:29:74:a9:da:f0:ca:c2:ce:e3:89:88:6c:
d2:49:de:4c:cc:35:bc:8c:79:d4:25:9a:78:a0:3d:c7:85:c2:
91:eb:43:92:cb:e1:e1:18:7b:fe:6b:e9:d2:02:c8:77:18:fb:
63:d0:8e:f0:b7:f8:de:15:71:ba:1b:77:a7:3f:1d:22:5a:df:
b1:03:83:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org