Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/36FE7796517B11EEB05452864AD9E6FC.roa
File: 36FE7796517B11EEB05452864AD9E6FC.roa (raw, json)
Hash identifier: byzPfGgPifNGsxZwFI+z4yhnYP6lKZCI1zlMnpJBKSg=
Subject key identifier: ED:A7:93:1B:B8:0F:54:D6:7C:60:EE:91:CB:2C:91:A2:D1:05:16:BD
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0179
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/36FE7796517B11EEB05452864AD9E6FC.roa
Signing time: Tue 12 Sep 2023 14:46:54 +0000
ROA not before: Tue 12 Sep 2023 14:46:51 +0000
ROA not after: Wed 11 Sep 2024 14:46:51 +0000
asID: 53356
IP address blocks: 66.251.136.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 12:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377 (0x179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Sep 12 14:46:51 2023 GMT
Not After : Sep 11 14:46:51 2024 GMT
Subject: CN=650079de-8f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b6:76:61:4d:73:6b:78:57:ba:20:44:e9:fe:
67:26:8d:94:e9:e7:3c:d1:16:fd:c7:c9:0d:08:80:
21:e9:23:08:02:9b:3a:1c:66:84:59:2a:1b:77:37:
4e:2b:6d:28:16:7d:fe:57:0c:f1:05:cf:56:46:c9:
e6:ab:84:bc:ff:17:4e:48:2c:34:45:a4:4d:c7:87:
bb:6f:8f:af:3e:43:45:e3:9b:25:54:0f:91:c3:aa:
d2:49:8c:f9:4b:36:8a:8f:06:1c:3d:c4:af:5d:fe:
74:8b:bf:d6:9e:ce:8b:3f:44:98:e4:09:83:b2:29:
91:77:ec:46:28:09:b9:87:34:89:41:15:98:82:4a:
f2:d0:31:06:3a:08:b6:b8:a7:17:13:85:ab:a6:22:
9a:ce:46:d6:e7:49:43:d2:6c:64:0c:b3:99:90:35:
0f:c0:e3:51:7e:e4:e5:c4:bf:cb:3e:f4:f5:7b:aa:
d8:00:b4:c9:1b:ca:b6:b2:76:2a:b4:04:57:5c:04:
66:23:8d:90:c8:d5:67:c5:61:30:3f:5e:58:e2:97:
17:70:2f:24:97:2f:67:bd:e7:e6:32:88:82:d5:46:
1b:e8:db:60:07:ef:50:b7:e2:3d:1b:82:ac:61:20:
46:26:d0:bd:10:1d:1f:76:4c:b5:55:c7:97:ee:3f:
db:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A7:93:1B:B8:0F:54:D6:7C:60:EE:91:CB:2C:91:A2:D1:05:16:BD
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/36FE7796517B11EEB05452864AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.136.0/22
Signature Algorithm: sha256WithRSAEncryption
21:95:c5:0f:3d:bf:7a:ba:01:54:8a:09:1a:cf:ec:8d:ac:4d:
0d:28:4a:c1:a6:a3:af:1d:7c:81:ef:10:3e:a4:b8:e6:49:65:
0a:1f:a3:ae:e2:ac:c5:46:31:31:f6:16:b8:6f:19:9e:fe:73:
9a:48:88:8b:e2:0b:e6:01:8f:3a:3c:32:ed:8b:86:f4:ee:db:
52:64:43:77:44:7e:65:59:8e:73:c5:c4:54:c7:e7:43:18:5c:
e8:21:8c:d9:a3:bb:e0:46:cd:11:a5:9e:46:f5:b9:d5:9e:d0:
37:e5:8b:44:02:85:15:97:17:87:d8:70:5e:4d:c1:32:a6:9e:
60:11:7e:42:a4:58:a4:55:7d:71:33:b5:1e:cd:76:88:37:c8:
cd:cb:4f:26:69:30:99:3c:fe:11:f0:a6:f8:0d:32:82:da:d7:
11:01:98:95:55:25:49:6e:59:30:f5:8c:eb:89:67:98:40:77:
e8:1d:8f:7a:88:79:56:3b:e1:50:da:eb:24:76:d7:57:91:6c:
29:41:47:f8:09:be:b0:33:31:fe:29:c7:96:1d:25:79:90:bb:
91:ae:2b:08:0a:eb:be:56:37:c5:fe:2a:09:b5:08:34:ef:00:
c9:94:42:b5:bb:d5:16:6f:c1:5e:32:27:ca:a9:50:c2:1a:59:
d7:a9:c2:4f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NTlGOUNBUjExMC8GA1UEBRMoMDlGQjMxMzZFQ0Q1RTNEN0NGMDBCMzJDMTIxRjEy
RThBRkQwQTYwMTAeFw0yMzA5MTIxNDQ2NTFaFw0yNDA5MTExNDQ2NTFaMBgxFjAU
BgNVBAMTDTY1MDA3OWRlLThmNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDftnZhTXNreFe6IETp/mcmjZTp5zzRFv3HyQ0IgCHpIwgCmzocZoRZKht3
N04rbSgWff5XDPEFz1ZGyearhLz/F05ILDRFpE3Hh7tvj68+Q0XjmyVUD5HDqtJJ
jPlLNoqPBhw9xK9d/nSLv9aezos/RJjkCYOyKZF37EYoCbmHNIlBFZiCSvLQMQY6
CLa4pxcThaumIprORtbnSUPSbGQMs5mQNQ/A41F+5OXEv8s+9PV7qtgAtMkbyray
diq0BFdcBGYjjZDI1WfFYTA/XljilxdwLySXL2e95+YyiILVRhvo22AH71C34j0b
gqxhIEYm0L0QHR92TLVVx5fuP9vdAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU7aeT
G7gPVNZ8YO6RyyyRotEFFr0wHwYDVR0jBBgwFoAUCfsxNuzV49fPALMsEh8S6K/Q
pgEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIyNDY4L0Nmc3hO
dXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0Nmc3hOdXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIy
NDY4LzM2RkU3Nzk2NTE3QjExRUVCMDU0NTI4NjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJC+4gwDQYJKoZIhvcNAQELBQAD
ggEBACGVxQ89v3q6AVSKCRrP7I2sTQ0oSsGmo68dfIHvED6kuOZJZQofo67irMVG
MTH2FrhvGZ7+c5pIiIviC+YBjzo8Mu2LhvTu21JkQ3dEfmVZjnPFxFTH50MYXOgh
jNmju+BGzRGlnkb1udWe0Dfli0QChRWXF4fYcF5NwTKmnmARfkKkWKRVfXEztR7N
dog3yM3LTyZpMJk8/hHwpvgNMoLa1xEBmJVVJUluWTD1jOuJZ5hAd+gdj3qIeVY7
4VDa6yR211eRbClBR/gJvrAzMf4px5YdJXmQu5GuKwgK675WN8X+Kgm1CDTvAMmU
QrW71RZvwV4yJ8qpUMIaWdepwk8=
-----END CERTIFICATE-----
Generated at Tue Jan 23 17:52:28 2024 by rpki-client on console-ams.rpki-client.org