Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/3D93F0A6B1E711EDBD5BBFFAF1222468.roa
File: 3D93F0A6B1E711EDBD5BBFFAF1222468.roa (raw, json)
Hash identifier: 9HECo7En91foOwF2lTez+QsaQrl3xGFWwyDqNWbkzLc=
Subject key identifier: C4:8D:26:D8:86:5A:C2:44:E3:82:B1:63:B6:31:28:BC:09:7E:32:AB
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 6A
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/3D93F0A6B1E711EDBD5BBFFAF1222468.roa
Signing time: Tue 21 Feb 2023 12:57:05 +0000
ROA not before: Tue 21 Feb 2023 12:57:01 +0000
ROA not after: Tue 20 Feb 2024 12:57:01 +0000
asID: 35913
IP address blocks: 66.251.180.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Feb 21 12:57:01 2023 GMT
Not After : Feb 20 12:57:01 2024 GMT
Subject: CN=63f4bfa1-219b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:ab:cb:5b:2d:61:b0:53:76:2e:64:11:e6:
97:83:58:6d:82:33:82:9b:dc:17:d3:25:90:a6:b9:
8e:c7:0c:66:f9:89:6f:33:76:b5:eb:68:47:c7:da:
db:ae:04:0f:85:30:91:30:22:be:00:54:a0:23:ca:
3f:7b:bf:bd:1d:5a:4a:8f:4d:01:66:81:22:12:b2:
2a:6f:d3:48:ba:0f:63:ff:4a:08:b6:9d:5e:82:4c:
69:14:e7:fa:84:82:c8:82:35:82:15:23:52:2f:a7:
91:54:3b:ef:fb:0f:b0:18:b8:07:f4:f7:4d:ef:21:
b2:7c:df:9d:ad:df:79:c1:73:32:fe:c5:09:bd:cb:
ac:74:a9:4b:e8:57:ca:83:cd:f7:9e:39:2c:49:1a:
5e:34:cb:9b:c6:3b:19:a5:fc:c8:fe:3e:10:14:25:
e2:7c:48:d5:7a:92:39:13:4a:0f:38:a7:31:d5:4d:
94:c9:19:72:90:f7:e1:f6:39:30:42:95:9d:88:7c:
06:57:b6:23:80:9a:02:71:b7:41:8b:0b:e1:d1:70:
02:b1:05:c6:df:da:d9:6c:5e:4f:a2:89:5d:c2:54:
36:24:73:29:cd:9f:4d:90:44:47:bf:88:56:81:fc:
de:e2:ec:b8:de:b1:fb:65:ce:db:e9:2a:44:fd:27:
d4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8D:26:D8:86:5A:C2:44:E3:82:B1:63:B6:31:28:BC:09:7E:32:AB
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/3D93F0A6B1E711EDBD5BBFFAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.180.0/22
Signature Algorithm: sha256WithRSAEncryption
71:10:35:ff:81:49:7f:e1:9f:f0:5d:6b:2d:0c:28:2d:1c:7b:
e9:bc:2a:fe:52:5e:93:a3:c8:dd:e4:5c:45:4f:c0:96:40:08:
62:d1:60:37:97:96:6c:b2:fa:09:c9:c9:c0:5c:7b:f2:f8:b8:
80:6b:37:00:ef:e2:f7:2e:c0:1b:d6:29:9d:7a:ea:d1:a8:17:
8d:95:b7:20:ba:e7:8f:0d:43:8e:44:f1:5d:69:e6:cf:34:cc:
e4:76:c0:08:77:bb:50:c3:f8:63:d9:cb:00:74:14:9e:af:35:
40:ac:27:78:68:cb:92:18:dd:76:33:96:c4:fa:0f:99:79:3e:
59:78:63:07:92:f8:b9:06:2b:42:e5:06:fa:cd:3f:c8:13:38:
12:8a:e9:d6:65:f3:80:74:fa:72:e9:34:bb:9c:4f:64:cc:b2:
f5:e2:13:8e:1c:6d:48:5b:46:b0:9c:5f:d0:5f:4a:95:0b:10:
2b:51:9d:1a:52:42:a0:fc:09:77:df:03:c0:64:e8:af:99:45:
a0:fe:45:4c:00:ee:b1:f9:c2:f1:73:45:53:82:ea:1f:a2:47:
19:3e:d9:11:cc:a9:af:de:4f:b1:c8:0f:a0:ed:a8:e6:e3:59:
31:77:7f:70:e1:23:43:f8:42:4e:4b:86:18:27:56:f3:5e:5b:
b6:c0:0c:90
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBajANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY1
OUY5Q0FSMTEwLwYDVQQFEygwOUZCMzEzNkVDRDVFM0Q3Q0YwMEIzMkMxMjFGMTJF
OEFGRDBBNjAxMB4XDTIzMDIyMTEyNTcwMVoXDTI0MDIyMDEyNTcwMVowGDEWMBQG
A1UEAwwNNjNmNGJmYTEtMjE5YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ8aq8tbLWGwU3YuZBHml4NYbYIzgpvcF9MlkKa5jscMZvmJbzN2tetoR8fa
264ED4UwkTAivgBUoCPKP3u/vR1aSo9NAWaBIhKyKm/TSLoPY/9KCLadXoJMaRTn
+oSCyII1ghUjUi+nkVQ77/sPsBi4B/T3Te8hsnzfna3fecFzMv7FCb3LrHSpS+hX
yoPN9545LEkaXjTLm8Y7GaX8yP4+EBQl4nxI1XqSORNKDzinMdVNlMkZcpD34fY5
MEKVnYh8Ble2I4CaAnG3QYsL4dFwArEFxt/a2WxeT6KJXcJUNiRzKc2fTZBER7+I
VoH83uLsuN6x+2XO2+kqRP0n1HkCAwEAAaOCAqIwggKeMB0GA1UdDgQWBBTEjSbY
hlrCROOCsWO2MSi8CX4yqzAfBgNVHSMEGDAWgBQJ+zE27NXj188AsywSHxLor9Cm
ATAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTlGOUMvMUQyMjk5NkU3QTA5MTFFREJENDIyMTg1RjEyMjI0NjgvQ2ZzeE51
elY0OWZQQUxNc0VoOFM2S19RcGdFLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
Q2ZzeE51elY0OWZQQUxNc0VoOFM2S19RcGdFLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NTlGOUMvMUQyMjk5NkU3QTA5MTFFREJENDIyMTg1RjEyMjI0
NjgvM0Q5M0YwQTZCMUU3MTFFREJENUJCRkZBRjEyMjI0Njgucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAkL7tDANBgkqhkiG9w0BAQsFAAOC
AQEAcRA1/4FJf+Gf8F1rLQwoLRx76bwq/lJek6PI3eRcRU/AlkAIYtFgN5eWbLL6
CcnJwFx78vi4gGs3AO/i9y7AG9YpnXrq0agXjZW3ILrnjw1DjkTxXWnmzzTM5HbA
CHe7UMP4Y9nLAHQUnq81QKwneGjLkhjddjOWxPoPmXk+WXhjB5L4uQYrQuUG+s0/
yBM4Eorp1mXzgHT6cuk0u5xPZMyy9eITjhxtSFtGsJxf0F9KlQsQK1GdGlJCoPwJ
d98DwGTor5lFoP5FTADusfnC8XNFU4LqH6JHGT7ZEcypr95PscgPoO2o5uNZMXd/
cOEjQ/hCTkuGGCdW815btsAMkA==
-----END CERTIFICATE-----
Generated at Fri Sep 8 11:44:00 2023 by rpki-client on console-ams.rpki-client.org