Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/31F1839E7A0B11EDB920C98AF1222468.roa
File: 31F1839E7A0B11EDB920C98AF1222468.roa (raw, json)
Hash identifier: kj+zGd33DS2CTSeVnZxjAb6jAf40ND9Vx2CFt7KZBxk=
Subject key identifier: 25:57:0B:7C:4A:07:C5:65:8B:CB:6F:29:55:8D:60:15:CE:0F:45:81
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 08
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/31F1839E7A0B11EDB920C98AF1222468.roa
Signing time: Mon 12 Dec 2022 10:53:22 +0000
ROA not before: Mon 12 Dec 2022 10:53:18 +0000
ROA not after: Mon 11 Dec 2023 10:53:18 +0000
asID: 1239
IP address blocks: 66.251.158.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Dec 12 10:53:18 2022 GMT
Not After : Dec 11 10:53:18 2023 GMT
Subject: CN=63970822-0cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:ad:c0:a6:a8:16:c8:61:d6:e3:3d:43:7e:
a0:80:72:7e:99:f6:01:d5:3b:e0:dc:33:47:43:86:
f5:47:c4:28:85:fc:4e:26:87:a6:2b:5d:52:d7:85:
9c:c0:d7:3f:f2:2c:ce:3f:b9:fb:a3:1a:8e:e8:0a:
34:02:9e:8d:00:4f:cd:6b:79:44:a3:8d:a9:00:59:
53:6b:b2:68:a8:c4:04:68:e7:cb:78:4e:69:d4:4a:
bd:a9:d6:92:c1:a7:94:75:56:39:1b:cf:a3:9e:77:
3a:33:71:9e:ca:c9:0e:ed:49:aa:c2:7e:98:8d:01:
23:19:a6:10:4a:9b:e4:5a:3c:86:a6:46:46:de:39:
8c:5e:31:1d:92:f8:71:c4:4b:5e:f0:3e:e4:bf:6e:
b5:a3:43:bd:cf:5b:cc:ce:26:ad:53:54:08:dd:cd:
1f:0b:60:0f:a3:1e:69:6b:94:5a:65:75:95:1f:61:
7b:e3:1e:f1:69:38:08:64:19:37:a5:6a:72:68:9e:
2f:e6:36:60:06:cf:64:19:09:da:ee:21:fb:b9:db:
2f:a6:fc:cf:89:21:89:08:b2:b9:e2:c8:bd:fa:8b:
9d:6c:ef:fe:cb:bf:c8:7c:da:30:88:07:87:b9:d8:
92:11:73:14:c7:9b:6d:ae:f2:e1:af:61:de:7a:6e:
3e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:57:0B:7C:4A:07:C5:65:8B:CB:6F:29:55:8D:60:15:CE:0F:45:81
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/31F1839E7A0B11EDB920C98AF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.158.0/23
Signature Algorithm: sha256WithRSAEncryption
70:6c:f1:fe:91:13:18:2a:c9:68:67:ff:be:4a:6b:e9:e2:49:
b0:f0:07:61:4c:22:51:16:95:3e:0a:69:7b:51:e8:48:93:41:
aa:0a:cc:84:4b:1b:00:09:7b:4a:de:f0:e3:9a:8f:d7:b8:4b:
59:01:bb:ff:3f:44:34:c1:89:9d:b0:7a:af:dd:8e:83:4d:e6:
03:c2:9e:9c:91:3a:dc:b4:46:70:d3:49:bc:a5:b2:d3:fb:79:
bb:e6:9e:37:a8:e7:13:ef:08:69:c8:3d:e5:89:12:d1:d0:bc:
5d:e7:80:0f:19:54:c4:ad:7b:ce:2e:4a:f8:85:72:d9:45:34:
01:33:4a:37:6c:8e:b4:ca:ec:0b:e9:36:9b:6e:85:24:6d:9e:
18:12:03:c7:37:f7:71:ce:f0:90:de:fc:72:41:24:82:24:6d:
5e:07:32:6d:b5:43:cb:af:6b:f8:c1:af:92:c1:32:66:25:cd:
01:08:d3:8a:82:d7:18:35:ea:0a:c9:8f:1d:1b:01:3e:d8:4a:
c6:e8:62:3a:55:54:66:dd:b7:83:f9:8a:1e:e7:96:94:bb:db:
57:0c:2c:4f:64:34:24:85:f1:4c:04:9e:5e:a3:2b:ef:61:d6:
05:39:a5:cf:cb:c2:89:43:49:49:b8:a9:b3:91:a4:7e:bf:6c:
97:d6:26:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 12 02:53:56 2023 by rpki-client on console-fra.rpki-client.org