Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/FFCF7CE8517A11EEB93B6D854AD9E6FC.roa
File: FFCF7CE8517A11EEB93B6D854AD9E6FC.roa (raw, json)
Hash identifier: fUmunje+FL53IGVMvtDx/ss3qPkpnE7GQzILtCf+M60=
Subject key identifier: 9A:EE:42:2F:7E:5A:C7:FB:74:74:0D:DF:37:F5:D9:7C:98:71:9F:C3
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0177
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/FFCF7CE8517A11EEB93B6D854AD9E6FC.roa
Signing time: Tue 12 Sep 2023 14:45:21 +0000
ROA not before: Tue 12 Sep 2023 14:45:18 +0000
ROA not after: Wed 11 Sep 2024 14:45:18 +0000
asID: 53356
IP address blocks: 66.251.164.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Nov 2023 09:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Sep 12 14:45:18 2023 GMT
Not After : Sep 11 14:45:18 2024 GMT
Subject: CN=65007981-80ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:e1:80:4f:4b:48:ed:7f:02:6e:07:5b:dc:
8b:6f:0c:06:74:82:d2:a0:3c:e0:c7:77:f9:fc:4e:
90:f2:80:f7:de:c7:2e:7c:01:a5:ad:28:96:87:ff:
d8:38:8c:c0:bb:a9:90:f8:ca:8e:59:c8:45:65:fe:
34:fd:ea:72:07:a0:cf:9a:dc:65:72:98:6c:b9:b2:
bb:67:7e:73:b8:8e:4a:a2:cf:63:c2:b1:4b:9b:8e:
15:c5:08:90:c3:05:35:c6:05:b6:19:67:c4:c5:9a:
41:a9:eb:80:5e:13:70:d3:f5:e7:29:0f:e1:8c:3d:
df:79:d4:b1:79:8f:6d:a8:16:62:ff:3f:5d:d1:3d:
65:68:19:f1:0c:25:e9:5e:d9:b5:c8:26:d7:04:3f:
3b:ba:b0:5d:40:1e:27:bf:86:2e:63:1e:c9:96:a2:
35:bb:cd:57:be:f2:e4:98:db:05:04:8d:4a:d9:f9:
07:02:62:ae:2a:39:fd:2e:18:c5:40:5b:97:c0:2c:
f8:c1:78:02:8e:65:35:35:6d:53:93:8d:56:6c:69:
5e:33:94:31:df:a2:07:e2:2e:2c:05:c1:4e:f9:01:
1f:93:5b:27:bd:a5:7c:fe:f5:43:d5:10:52:45:7b:
81:45:87:56:96:01:bc:62:7a:d8:c6:45:1e:f5:4d:
e5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EE:42:2F:7E:5A:C7:FB:74:74:0D:DF:37:F5:D9:7C:98:71:9F:C3
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/FFCF7CE8517A11EEB93B6D854AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.164.0/22
Signature Algorithm: sha256WithRSAEncryption
76:a3:4d:f1:cf:dd:6f:fe:b7:5f:87:fe:ea:06:e4:29:8b:aa:
09:77:34:e3:77:70:ed:fb:21:10:a2:2b:61:cb:84:84:f5:f0:
b1:44:93:54:d1:4f:83:46:0c:1b:47:d5:9a:49:1c:29:2a:00:
f2:cf:f6:fa:be:00:23:47:06:9d:06:15:8d:43:47:f9:d8:d9:
7b:04:5f:e9:ca:a8:d7:3c:ff:fc:34:1d:68:64:bf:39:32:69:
e3:12:2a:f1:3b:0b:02:64:ab:bb:3a:04:92:c4:52:5b:40:89:
1b:e6:42:a7:17:1b:5d:d2:71:c8:21:0c:d6:72:6c:1b:30:17:
81:98:28:d9:9c:18:1f:c9:f5:0d:06:25:a9:1e:e4:68:13:d4:
b6:fa:e3:bc:e1:ba:79:c3:6d:f7:49:38:68:11:79:c4:b3:f9:
b2:1a:b5:38:07:fd:2c:66:56:70:7f:31:2f:1d:c5:4a:53:93:
c0:a0:0a:7b:b9:ff:66:d4:cd:e4:65:68:80:65:0d:4f:6d:bc:
e6:78:d4:fc:26:b6:79:52:92:af:8f:e7:95:dd:2c:98:28:e5:
c8:4d:29:c8:17:d3:79:f6:f1:77:10:74:9c:9b:ba:90:82:fa:
42:59:07:50:51:e0:f2:77:bc:7f:d4:12:15:e2:fb:95:fb:42:
73:e9:c1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org