Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/E767399C2ACA11EE91366C2C4AD9E6FC.roa
File: E767399C2ACA11EE91366C2C4AD9E6FC.roa (raw, json)
Hash identifier: lVF3Ond1yuh9wUFMtcODfSpTaq4wR+5N3k6ZR9f7Iec=
Subject key identifier: 56:5D:02:EE:A7:21:6B:2A:AC:E3:82:0B:C9:A0:BB:CE:7C:F8:E1:10
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 011D
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/E767399C2ACA11EE91366C2C4AD9E6FC.roa
Signing time: Tue 25 Jul 2023 09:09:05 +0000
ROA not before: Tue 25 Jul 2023 09:09:00 +0000
ROA not after: Wed 24 Jul 2024 09:09:00 +0000
asID: 35913
IP address blocks: 66.251.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Sep 2023 10:57:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jul 25 09:09:00 2023 GMT
Not After : Jul 24 09:09:00 2024 GMT
Subject: CN=64bf9131-22bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:63:3e:26:fa:e7:b2:e9:56:10:17:3c:e9:17:
f5:75:f2:1f:58:a4:39:10:2b:5d:c3:8b:39:4f:72:
7c:14:be:73:f6:c4:7d:75:7c:cd:17:77:90:45:08:
bf:a7:29:e9:71:7b:9b:e4:42:08:99:06:ed:d0:8f:
18:78:93:73:2b:70:89:76:d2:84:56:99:f5:4c:08:
a7:63:aa:78:cc:f8:94:f7:fb:ad:02:ae:d5:83:69:
6c:b9:e4:d5:c6:4b:66:51:cd:f7:26:03:31:ed:a7:
7f:47:b9:26:98:c5:9d:dc:16:db:77:7e:e9:05:41:
5a:2a:f8:24:1c:81:69:a6:34:6e:fd:75:32:dd:5c:
57:89:28:c4:d4:b2:3c:3a:7a:a8:05:e7:8d:0c:68:
b5:ea:53:69:8c:70:f3:02:8a:26:5f:58:df:a5:a3:
fc:46:3c:cc:20:d6:4c:29:d8:4d:19:93:40:5f:e4:
cb:0d:c8:b6:31:f1:5f:4a:4e:d2:58:9c:fe:58:77:
e7:3b:52:41:42:d0:41:35:1a:0a:bf:4b:38:a1:4f:
be:2b:2d:c9:a5:c8:c5:be:17:ef:55:11:c3:15:04:
b5:21:33:28:09:90:30:a2:3b:b5:81:1c:6e:6b:5e:
d5:57:5d:a7:b5:82:d2:90:c2:ee:e5:d7:85:52:ef:
b4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5D:02:EE:A7:21:6B:2A:AC:E3:82:0B:C9:A0:BB:CE:7C:F8:E1:10
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/E767399C2ACA11EE91366C2C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.151.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:59:f3:86:b9:f8:20:5e:e0:4a:9f:ae:9b:f3:b0:63:b8:1e:
74:fe:ab:a5:15:5a:c9:2d:19:92:8b:0a:f1:92:13:82:08:74:
d6:7c:86:bc:b4:10:14:3c:1e:d9:82:07:70:63:14:09:ed:ee:
fd:69:2a:50:b9:2e:58:f1:4f:a7:db:2c:a7:8d:48:ea:27:67:
4b:0f:77:ab:05:2e:bd:b4:62:8a:90:f5:e2:ed:b6:54:40:56:
5d:c8:b7:07:cb:54:f2:a3:19:f0:6f:b6:26:ad:e5:c3:ee:ce:
d6:f0:5f:8a:58:4b:83:50:66:37:7c:95:64:78:67:c3:69:95:
85:b6:e1:6a:51:29:6e:a4:0e:97:ea:54:38:37:66:59:a0:31:
5b:3b:28:b6:aa:0e:20:81:86:5c:0b:f9:34:cc:7a:12:3b:2c:
11:55:d1:c7:fa:20:02:81:d9:da:cb:cf:79:8d:fa:49:27:d4:
3c:fa:71:dd:cd:47:1b:23:d5:e2:8a:47:00:5e:c8:91:07:76:
b7:cb:d4:47:9a:4c:e0:06:42:7f:82:15:78:86:fa:5d:4b:96:
9d:e0:71:d4:cd:b1:0a:9f:10:17:6d:9a:1b:a0:51:a4:27:ba:
f9:e7:1f:ff:80:ad:e1:cb:86:fc:b0:e5:89:c7:be:4c:d2:9c:
c2:3a:f1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org