Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/B2CECFB6517A11EE848790844AD9E6FC.roa
File: B2CECFB6517A11EE848790844AD9E6FC.roa (raw, json)
Hash identifier: cZZjYGGU2oqzSvIVRsO375y/3sh9VZcZ0rMCV+RQK+o=
Subject key identifier: 23:51:8A:BC:51:90:EE:A0:9B:CC:77:CC:F0:FF:65:38:7E:DF:58:97
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0175
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/B2CECFB6517A11EE848790844AD9E6FC.roa
Signing time: Tue 12 Sep 2023 14:43:12 +0000
ROA not before: Tue 12 Sep 2023 14:43:09 +0000
ROA not after: Wed 11 Sep 2024 14:43:09 +0000
asID: 53356
IP address blocks: 66.251.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 12:34:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Sep 12 14:43:09 2023 GMT
Not After : Sep 11 14:43:09 2024 GMT
Subject: CN=65007900-200c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:a1:6b:04:a6:9b:3e:23:c0:9a:73:02:93:
81:4e:99:1d:02:89:c0:ef:68:57:ab:8a:5f:e2:00:
e5:a3:8d:d4:24:cb:00:1c:c9:7d:92:ef:35:f3:75:
27:a7:26:98:63:60:cf:83:ee:12:95:23:b4:58:c0:
91:9b:1f:49:56:5e:c7:4b:db:ca:19:45:85:ab:c1:
94:ff:59:42:9b:11:48:0d:2e:24:b1:ce:7f:bf:f2:
12:64:53:dd:c4:c2:1c:4f:2d:1e:08:b1:1f:81:a8:
7f:b6:da:82:a8:0c:28:14:76:6d:fd:32:81:92:7e:
5b:19:61:a2:83:b4:d6:81:ef:07:37:49:5d:de:1c:
ff:dd:3d:f1:43:15:51:0c:cb:b3:f2:c0:61:52:c4:
93:6e:dd:d0:d8:39:9c:e4:e0:45:51:75:4c:a9:cd:
d7:71:a0:af:40:b8:c8:74:38:52:f1:f7:0a:71:d5:
80:bc:81:0e:df:11:67:a1:f8:ab:fd:6a:37:af:39:
48:11:ae:19:e7:2b:26:c4:de:f5:23:c0:27:46:7e:
25:1d:b2:da:c6:06:2a:c8:7f:11:47:17:7d:a7:33:
d2:57:d8:15:0e:85:b3:c3:5a:c6:2a:7e:64:2d:7e:
87:ee:0f:9d:b3:55:d6:50:6a:3f:78:28:42:6f:85:
61:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:51:8A:BC:51:90:EE:A0:9B:CC:77:CC:F0:FF:65:38:7E:DF:58:97
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/B2CECFB6517A11EE848790844AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.185.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:e2:c1:29:90:5e:b6:b1:4e:fb:44:76:6f:78:8d:cb:52:2e:
ad:b6:fb:61:27:fd:e7:7a:49:d7:f2:dc:bc:6b:06:ab:da:7a:
ac:05:a0:aa:e6:50:97:58:98:45:e6:96:be:04:dd:7f:1d:f7:
91:9a:d3:2d:2e:8c:96:6b:4e:f1:13:86:5d:01:39:26:cb:3b:
e7:65:fc:53:68:24:38:d5:14:c5:2e:dc:60:79:40:4c:c8:ab:
55:c2:0d:4c:73:c6:0d:91:69:0e:c3:83:47:44:ea:f0:af:a2:
a9:14:4b:f0:9b:18:73:a7:d8:97:ca:f8:62:f8:fb:3b:50:20:
80:65:8d:f7:59:35:03:e2:bf:95:fe:55:3f:c2:cb:2e:a6:b3:
de:66:5a:f0:f1:de:b9:8b:d6:68:37:f3:4c:a3:76:76:aa:ae:
59:0b:6a:ab:d0:c8:d8:2a:d4:0a:7f:31:26:84:2e:a1:09:7d:
2b:7a:d1:58:57:d7:3d:49:0b:7f:ae:6f:ba:f0:4e:fe:ef:4b:
fa:c1:ca:00:5d:5e:6f:76:0a:2e:66:00:b8:00:a5:a7:14:1d:
ba:ec:96:2b:fa:c3:f4:d5:c2:26:32:84:25:36:24:10:88:52:
af:cc:25:3b:94:31:a8:59:d8:71:66:31:1f:53:52:aa:1a:bf:
85:40:df:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 17:46:23 2024 by rpki-client on console-fra.rpki-client.org