Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/5B7352407F8911EEB0E05E174AD9E6FC.roa
File: 5B7352407F8911EEB0E05E174AD9E6FC.roa (raw, json)
Hash identifier: ty2O6rgHHKPsGdd5L4xARHlVpXJHxOamTBVdRc8BBBc=
Subject key identifier: 28:50:E1:B7:9C:4A:07:1C:06:1D:8A:FC:FF:6F:2B:B3:E7:99:21:E4
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 01C9
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/5B7352407F8911EEB0E05E174AD9E6FC.roa
Signing time: Fri 10 Nov 2023 05:24:02 +0000
ROA not before: Fri 10 Nov 2023 05:23:58 +0000
ROA not after: Sat 09 Nov 2024 05:23:58 +0000
asID: 212238
IP address blocks: 66.251.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 07:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Nov 10 05:23:58 2023 GMT
Not After : Nov 9 05:23:58 2024 GMT
Subject: CN=654dbe72-1513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:93:be:f7:f9:25:b2:43:2c:f7:81:2c:e0:
e5:08:86:1b:82:23:b1:f0:42:93:b9:3f:11:48:99:
28:b3:cf:93:fb:f3:28:b1:dc:dd:32:1e:79:ec:84:
0b:25:f4:7c:8e:61:29:fd:85:cc:b8:74:a6:0a:c3:
24:17:cf:ca:75:41:cf:ce:c5:78:dd:4d:3d:b5:d0:
b3:a0:df:a0:9e:5f:88:6f:4d:3b:ed:4e:9f:57:13:
a8:8e:54:5b:17:21:4e:5e:da:92:a6:4d:9b:64:bd:
bc:15:db:8c:8a:65:68:49:50:10:23:66:43:a5:bc:
21:6c:ba:6f:8e:b7:5d:a7:ec:01:c0:e5:25:f3:91:
0a:f2:97:97:7b:17:64:03:83:58:e4:a3:b2:53:86:
d4:8a:83:15:3b:94:26:f7:7d:61:7e:e1:bb:85:95:
a7:e7:5f:d8:ee:b5:86:15:c2:99:77:1c:56:59:6f:
91:48:9a:69:06:9a:95:57:fc:01:f0:9c:9b:e1:c0:
68:e1:0e:fe:03:97:68:b9:53:e4:21:63:ff:0f:9b:
cd:77:59:97:4e:7a:38:79:5b:63:5a:2e:48:c1:cc:
d3:5f:9c:ea:c9:61:a7:d1:c7:b3:18:21:84:a4:3e:
93:64:75:05:85:38:8b:3c:bd:3d:3c:81:91:15:ca:
97:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:50:E1:B7:9C:4A:07:1C:06:1D:8A:FC:FF:6F:2B:B3:E7:99:21:E4
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/5B7352407F8911EEB0E05E174AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.128.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:bc:4c:6b:6b:78:0e:f8:65:d7:7a:3e:9a:f0:7a:43:4c:2e:
10:7c:03:14:85:40:ed:b9:53:9d:6b:11:4c:9e:ef:1f:5b:65:
54:04:54:3d:61:cd:a4:a1:04:91:2e:08:01:9b:38:c7:85:8e:
6e:4b:ce:50:be:be:a8:65:e0:ea:76:d5:55:16:0e:37:ca:89:
bb:92:cb:0f:06:60:bc:9d:cc:13:21:3d:78:9c:42:11:c0:34:
41:36:d8:f7:a3:80:29:1f:f3:36:bc:4c:87:75:b8:31:58:cb:
3e:fe:5d:bd:7a:26:d0:d1:57:91:f6:f3:e9:09:da:44:30:ab:
f6:a0:5e:ba:11:fe:9c:ae:bc:db:96:43:48:fb:67:f6:cf:69:
87:0a:f3:ab:9e:36:db:11:01:19:0d:1c:7c:dc:65:4c:bc:c5:
30:92:0d:38:4d:c3:cd:7f:35:9f:f9:fc:d8:64:6b:c7:62:00:
28:e8:87:e5:e6:1a:9e:67:c8:c7:f1:7c:6e:93:0e:31:b5:6d:
11:fe:37:b4:56:95:a3:79:84:22:61:12:c3:3f:2e:56:9f:16:
0d:ec:a4:16:a2:e7:87:e3:27:3f:df:b4:2c:7b:7c:d3:3f:91:
07:3a:c8:86:bc:44:77:bb:35:d6:a7:f5:43:9b:a2:eb:3d:c3:
3d:0c:c7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 11:57:57 2024 by rpki-client on console-ams.rpki-client.org