Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/0A369E92932A11EDBC8545CBF1222468.roa
File: 0A369E92932A11EDBC8545CBF1222468.roa (raw, json)
Hash identifier: 6SKyPPJ1YM4BRbkYK3YZVykQ8IqfmpNZ4RJAW8ZZoPQ=
Subject key identifier: 4F:4C:AA:66:92:5F:60:47:52:CF:80:DD:E6:9D:F7:C4:63:84:1A:7E
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 35
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/0A369E92932A11EDBC8545CBF1222468.roa
Signing time: Fri 13 Jan 2023 10:07:09 +0000
ROA not before: Fri 13 Jan 2023 10:07:05 +0000
ROA not after: Fri 12 Jan 2024 10:07:05 +0000
asID: 35913
IP address blocks: 66.251.128.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jan 13 10:07:05 2023 GMT
Not After : Jan 12 10:07:05 2024 GMT
Subject: CN=63c12d4d-3382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:a5:38:d4:42:b9:52:4b:9f:27:76:3c:10:
1e:c1:7f:d0:7b:4b:88:6a:82:a3:7e:b7:9b:32:79:
a4:b6:a3:9b:9f:76:dc:6c:78:26:f9:13:da:95:70:
1a:93:d6:56:1d:e1:30:aa:1b:f8:30:ee:b1:29:be:
b2:bb:56:12:51:43:1f:1c:ad:ef:d1:ce:2a:3f:6c:
e4:ba:9d:43:1d:b2:06:e8:08:b5:af:eb:8a:ef:78:
2d:3d:e6:b6:2c:da:e4:ad:c4:5a:bf:13:43:75:d8:
37:b7:31:bf:3d:54:13:92:be:c7:68:22:db:c4:f8:
e8:9b:80:b1:8f:0e:8a:71:4c:81:02:9c:4d:ff:f9:
14:3a:42:84:61:e9:59:50:c9:cf:d5:2b:eb:ff:f4:
7e:59:c7:d0:4a:96:e9:bd:dd:8a:d4:e6:8b:2d:d3:
ff:e2:c7:ca:23:6f:48:fb:08:d6:72:14:6e:5a:c1:
55:b0:88:87:6d:e1:de:6b:c3:3a:a9:8d:6c:f7:c5:
44:94:ad:ba:8e:ff:ac:71:f9:a4:65:56:67:ab:ad:
fe:dd:af:2f:97:c4:dd:6c:8c:6b:eb:c7:7f:a2:d5:
04:d6:a4:02:75:f5:c9:ed:b6:97:34:e0:66:7d:d8:
15:cc:94:24:af:22:c3:55:55:95:f1:f4:01:40:8a:
f9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4C:AA:66:92:5F:60:47:52:CF:80:DD:E6:9D:F7:C4:63:84:1A:7E
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/0A369E92932A11EDBC8545CBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.128.0/22
Signature Algorithm: sha256WithRSAEncryption
15:fe:55:35:98:74:2a:46:4d:ac:f4:4c:48:1c:15:72:74:83:
96:4e:7e:54:ad:04:0c:13:7c:ce:b1:ce:f4:d3:3e:0d:76:69:
21:25:dd:b3:4e:9b:8a:6d:b3:2a:cb:d9:ff:f6:e6:17:dd:45:
a9:36:72:c0:a3:93:a1:92:ee:ef:94:77:d5:bd:57:7c:b7:f8:
45:1b:62:4e:d3:4c:8d:59:2e:3e:ca:dc:73:6b:cc:f3:50:8d:
89:e9:96:37:66:4d:00:b6:7f:e3:51:c3:14:3a:92:40:18:2c:
44:92:20:07:c8:82:4a:ba:85:b6:0f:42:21:0d:1b:90:83:e0:
d9:29:77:21:1d:61:24:77:60:cf:51:38:4e:12:b8:8a:cb:40:
76:d2:91:54:9a:50:05:f0:e6:15:62:f1:0e:6a:68:9a:fd:1e:
f1:0c:42:4d:95:4f:5e:96:65:58:97:45:b2:f9:53:dc:79:aa:
69:ff:9d:0e:a3:42:63:4b:dd:2b:22:d0:d6:ef:5a:fc:3f:f3:
6e:53:1b:60:01:ac:df:61:e3:4f:05:86:13:2b:28:a5:4e:c2:
2b:d8:74:57:44:1d:3a:79:08:06:fc:46:00:a5:fb:07:b8:a4:
5c:61:27:fa:ef:b7:5d:87:ea:b9:f3:97:79:e8:5c:f0:05:99:
02:a7:db:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org