Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/DE7885A6531111EEBB134A164AD9E6FC.roa
File: DE7885A6531111EEBB134A164AD9E6FC.roa (raw, json)
Hash identifier: Z4UGlmPW5QduwIpFz8FmlZ20cFFkIoNK8FcuR+izNNk=
Subject key identifier: 9F:08:14:24:31:49:82:DB:6F:BD:F2:B8:C8:FC:6A:A7:B4:AE:0A:08
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0182
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/DE7885A6531111EEBB134A164AD9E6FC.roa
Signing time: Thu 14 Sep 2023 15:17:51 +0000
ROA not before: Thu 14 Sep 2023 15:17:48 +0000
ROA not after: Fri 13 Sep 2024 15:17:48 +0000
asID: 328013
IP address blocks: 66.251.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Sep 14 15:17:48 2023 GMT
Not After : Sep 13 15:17:48 2024 GMT
Subject: CN=6503241f-2b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4c:5f:a4:89:94:4c:ca:70:b5:81:c3:99:01:
a0:91:91:af:91:b1:b5:e2:68:75:26:d0:38:e2:c6:
ad:a4:1e:e4:67:8b:37:d9:db:43:de:d3:5e:2e:c1:
1b:20:5b:66:ca:b8:30:37:1c:ac:80:91:ca:58:77:
c4:d1:33:6a:82:f1:51:41:df:41:5c:3d:c6:f8:62:
98:69:0e:44:b4:54:61:41:49:c2:7d:67:8d:61:95:
8b:50:d5:cb:64:34:c5:0e:f0:93:d7:bb:42:90:e2:
50:39:cf:1f:ac:71:fa:6c:cf:af:6f:f4:43:40:0b:
07:e7:e0:c6:f1:ff:55:9c:e4:54:73:d5:89:a8:4e:
fa:47:05:0e:49:8c:c6:8b:3a:e0:63:7a:f3:3c:3c:
1c:35:25:12:ea:10:87:b8:21:10:de:fb:f8:d3:b0:
da:11:c2:94:b8:95:ae:b1:a4:48:49:61:3f:4c:e0:
78:14:0d:70:56:55:1a:6c:f3:e2:a9:d8:c7:9d:2e:
e3:0c:c8:5e:ed:b2:f7:73:84:29:23:dc:ff:6c:45:
38:31:ec:5c:41:a2:4b:5b:63:e1:3b:66:3f:34:db:
26:25:9b:40:83:24:51:73:50:69:b5:93:f2:9a:75:
0e:1f:18:b7:c9:2e:5f:37:7c:80:21:5e:16:1e:8b:
46:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:08:14:24:31:49:82:DB:6F:BD:F2:B8:C8:FC:6A:A7:B4:AE:0A:08
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/DE7885A6531111EEBB134A164AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.147.0/24
Signature Algorithm: sha256WithRSAEncryption
46:60:42:21:e8:11:c4:99:60:34:0b:aa:b5:6f:1d:d7:bc:76:
fd:b9:cc:d5:aa:a5:c2:ab:6d:11:59:15:cd:36:35:d5:76:9e:
63:c4:22:3e:48:a4:b2:c1:ff:04:a7:21:d0:2e:63:44:0b:fe:
97:88:ba:ff:db:26:51:cc:b2:be:48:2b:34:ff:82:dd:8f:28:
c2:b8:7e:0b:e8:2f:0e:f8:d4:df:06:71:ab:79:81:c2:25:30:
34:09:81:09:de:5f:f8:70:b8:33:a0:7a:af:f0:74:7d:07:7f:
f8:0f:fa:e2:9b:f1:bc:48:68:66:e7:4b:00:ad:15:4a:c3:b9:
40:52:0b:a9:1c:19:db:4f:21:66:67:8c:52:ee:7f:b7:f1:b9:
bb:e9:2f:4b:de:61:d5:0e:7b:75:49:e0:97:b7:64:f8:10:5b:
4c:bd:76:af:11:7c:fd:57:eb:ea:6e:b4:9d:33:e7:a1:b8:4f:
8a:6a:52:ed:68:2e:11:b8:58:01:a9:ae:95:25:c3:63:a0:a2:
35:72:91:d1:2d:d9:44:e2:64:3a:fb:a7:1a:70:17:f5:a1:e0:
43:68:56:45:76:fb:b2:89:f6:bc:60:53:2a:c5:01:a8:ce:27:
83:6a:fb:ba:49:9a:12:f9:6a:f9:96:61:00:16:5d:07:43:98:
fe:e5:14:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 16:03:48 2023 by rpki-client on console-fra.rpki-client.org