Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/FFEF9AAE4E3811EEAF0477284AD9E6FC.roa
File: FFEF9AAE4E3811EEAF0477284AD9E6FC.roa (raw, json)
Hash identifier: k94dbFux9vXc9NF6JiPKFoNhieoFjNJhZAIMTiGSbG4=
Subject key identifier: D4:AD:43:64:64:F9:1C:9E:6E:24:F2:B7:C3:13:AB:F1:47:40:E7:5F
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 015C
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/FFEF9AAE4E3811EEAF0477284AD9E6FC.roa
Signing time: Fri 08 Sep 2023 11:15:21 +0000
ROA not before: Fri 08 Sep 2023 11:15:18 +0000
ROA not after: Sat 07 Sep 2024 11:15:18 +0000
asID: 53356
IP address blocks: 66.251.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 12:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Sep 8 11:15:18 2023 GMT
Not After : Sep 7 11:15:18 2024 GMT
Subject: CN=64fb0249-0c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:53:4f:c6:5d:28:81:57:d2:26:85:85:56:d7:
f7:0c:ba:ac:aa:9f:ba:6f:27:da:1a:aa:be:ff:66:
2d:d2:90:d1:48:fe:b7:bb:1a:0a:2c:52:dd:e2:1f:
41:01:cc:0a:73:b0:1e:a9:3d:33:e7:52:54:2b:eb:
58:84:69:ec:58:96:c8:1d:76:df:81:43:2f:c3:eb:
e7:63:43:e4:e0:e9:0f:e9:a0:13:3e:82:1b:89:cf:
85:b6:f5:c0:7d:1b:44:d1:b4:f9:c9:d1:d9:bb:85:
9c:36:33:a4:78:80:0f:69:23:41:ab:24:80:dd:cc:
f6:d2:c8:c2:c0:ad:59:c0:25:ce:cc:ca:82:ce:87:
ab:fa:60:da:97:e9:d2:75:b7:48:03:27:85:e0:bb:
99:4a:2d:1f:52:dd:76:62:35:c5:f0:44:a6:09:e0:
fa:e4:fa:01:72:9b:9f:55:9d:db:e7:a3:37:5b:6d:
b6:ef:ce:bf:7f:77:92:35:cc:2a:3c:70:07:9b:42:
fe:10:0e:63:b5:14:cd:c5:90:83:08:0d:8c:54:b1:
bc:f2:70:c4:4b:61:33:52:3d:69:ab:77:0e:53:52:
7a:91:95:1b:04:df:2a:8b:ce:63:21:da:e9:ee:0b:
22:9d:38:79:41:12:bd:a8:b4:c5:1f:6e:b2:a9:98:
28:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AD:43:64:64:F9:1C:9E:6E:24:F2:B7:C3:13:AB:F1:47:40:E7:5F
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/FFEF9AAE4E3811EEAF0477284AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.156.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:15:66:42:e4:bf:67:dc:de:24:d2:b1:bc:94:9a:0e:3a:8a:
67:b9:d4:f9:8d:18:05:60:03:f1:aa:77:8c:9e:94:38:7c:02:
d8:ba:06:45:35:04:bf:d3:e2:76:8d:8c:d6:d5:a5:4e:af:15:
3c:5a:70:b2:29:ac:d7:32:28:b6:e5:c8:37:4c:10:c9:fb:5f:
df:62:d9:af:a0:35:f4:64:00:ae:44:2e:6c:52:92:38:d6:6d:
3e:09:d7:72:ee:95:5c:87:4a:1c:b7:6b:6f:c1:7b:13:83:59:
11:41:74:3a:57:45:1e:31:aa:a3:3b:1a:10:15:ad:ee:20:22:
02:e1:4a:ea:6b:a7:da:ca:ff:b9:95:ce:e8:c4:f7:1d:05:35:
f2:42:7f:2b:57:33:26:47:7d:69:c0:15:6b:7f:6b:42:df:b1:
7e:0b:1c:6c:c4:1a:23:1d:4f:93:f7:b8:f6:2e:5d:fe:47:80:
2b:76:6b:77:07:04:16:32:58:86:a1:90:34:c0:53:54:f3:70:
e5:0a:ba:00:c2:13:f6:34:21:e9:5d:48:bb:29:32:8f:01:aa:
21:86:f9:46:a8:c3:2a:dd:52:c6:bf:29:c0:43:97:79:27:a0:
a1:06:69:bd:55:c6:ef:0f:36:76:63:8a:77:30:12:c6:c4:f6:
c9:fe:23:d8
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NTlGOUNBUjExMC8GA1UEBRMoMDlGQjMxMzZFQ0Q1RTNEN0NGMDBCMzJDMTIxRjEy
RThBRkQwQTYwMTAeFw0yMzA5MDgxMTE1MThaFw0yNDA5MDcxMTE1MThaMBgxFjAU
BgNVBAMTDTY0ZmIwMjQ5LTBjODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPU0/GXSiBV9ImhYVW1/cMuqyqn7pvJ9oaqr7/Zi3SkNFI/re7GgosUt3i
H0EBzApzsB6pPTPnUlQr61iEaexYlsgddt+BQy/D6+djQ+Tg6Q/poBM+ghuJz4W2
9cB9G0TRtPnJ0dm7hZw2M6R4gA9pI0GrJIDdzPbSyMLArVnAJc7MyoLOh6v6YNqX
6dJ1t0gDJ4Xgu5lKLR9S3XZiNcXwRKYJ4Prk+gFym59Vndvnozdbbbbvzr9/d5I1
zCo8cAebQv4QDmO1FM3FkIMIDYxUsbzycMRLYTNSPWmrdw5TUnqRlRsE3yqLzmMh
2unuCyKdOHlBEr2otMUfbrKpmCg5AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU1K1D
ZGT5HJ5uJPK3wxOr8UdA518wHwYDVR0jBBgwFoAUCfsxNuzV49fPALMsEh8S6K/Q
pgEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIyNDY4L0Nmc3hO
dXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0Nmc3hOdXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIy
NDY4L0ZGRUY5QUFFNEUzODExRUVBRjA0NzcyODRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABC+5wwDQYJKoZIhvcNAQELBQAD
ggEBAAsVZkLkv2fc3iTSsbyUmg46ime51PmNGAVgA/Gqd4yelDh8Ati6BkU1BL/T
4naNjNbVpU6vFTxacLIprNcyKLblyDdMEMn7X99i2a+gNfRkAK5ELmxSkjjWbT4J
13LulVyHShy3a2/BexODWRFBdDpXRR4xqqM7GhAVre4gIgLhSuprp9rK/7mVzujE
9x0FNfJCfytXMyZHfWnAFWt/a0LfsX4LHGzEGiMdT5P3uPYuXf5HgCt2a3cHBBYy
WIahkDTAU1TzcOUKugDCE/Y0IeldSLspMo8BqiGG+UaowyrdUsa/KcBDl3knoKEG
ab1Vxu8PNnZjincwEsbE9sn+I9g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org