Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/3A50EDB0967911ED8B7A0EF8F1222468.roa
File: 3A50EDB0967911ED8B7A0EF8F1222468.roa (raw, json)
Hash identifier: hauNVe4IpeW8H16tbty4rrqxaLEF/56DDc1w0G3YQAI=
Subject key identifier: 5F:E8:E6:9F:BA:EF:80:58:63:1D:76:AB:2E:3E:6C:10:94:22:F2:A0
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 3F
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/3A50EDB0967911ED8B7A0EF8F1222468.roa
Signing time: Tue 17 Jan 2023 15:11:33 +0000
ROA not before: Tue 17 Jan 2023 15:11:29 +0000
ROA not after: Tue 16 Jan 2024 15:11:29 +0000
asID: 35913
IP address blocks: 66.251.144.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jan 17 15:11:29 2023 GMT
Not After : Jan 16 15:11:29 2024 GMT
Subject: CN=63c6baa5-8422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:16:7a:2c:1b:94:bd:af:a6:a8:c6:f7:e3:00:
71:9b:d8:9d:70:d7:9a:87:86:8f:fd:e0:de:1b:2d:
aa:80:df:99:fc:34:a3:f9:2e:ed:ce:78:38:d7:aa:
3d:0b:1a:1e:2c:79:56:b9:56:88:a2:7e:0d:f0:f4:
ac:9f:86:1e:98:be:a3:b6:89:f8:2f:49:8c:65:41:
1f:70:b3:93:ea:43:a9:8b:f9:1e:f3:97:14:d4:7a:
dd:9d:c3:1b:19:e2:a7:be:89:61:39:62:50:7d:62:
2c:04:24:26:63:57:b8:b4:e8:d5:f1:f4:60:77:a1:
10:6c:71:e3:38:ae:41:c0:2d:c6:89:2e:74:5f:fb:
89:22:12:fe:39:14:c7:38:01:06:e5:70:e5:b7:22:
34:f0:33:7f:aa:be:c3:a4:70:71:a7:ee:06:d7:b0:
bf:be:6d:07:0d:c8:cc:43:67:52:68:9a:b4:30:80:
d9:33:32:72:6b:f0:49:50:9b:fc:7d:c0:80:27:ce:
1d:0a:f8:b3:bc:f9:4e:d1:b3:19:10:f4:18:1f:8c:
aa:7f:c0:4a:58:19:f3:01:10:e4:40:90:47:a8:33:
96:5b:5c:94:23:b4:93:d2:75:86:3c:e5:78:9e:e1:
8f:d1:01:b6:2f:95:d8:48:a5:d3:73:3c:49:87:6f:
52:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E8:E6:9F:BA:EF:80:58:63:1D:76:AB:2E:3E:6C:10:94:22:F2:A0
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/3A50EDB0967911ED8B7A0EF8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.144.0/23
Signature Algorithm: sha256WithRSAEncryption
e1:8e:fc:6e:a1:d3:f5:1e:7b:17:4e:9a:89:16:70:12:35:5a:
e5:d3:3b:3f:76:e2:2c:bf:9f:25:2d:5e:6b:86:87:4a:e4:15:
db:4e:1d:1d:c8:e8:5c:8b:53:51:f0:61:cb:dc:ca:01:2d:e1:
91:e7:42:0c:0c:4d:bc:ba:5c:56:6a:34:32:07:09:64:99:4b:
da:92:9d:0b:75:b4:e4:1f:59:2b:db:e1:60:47:b7:29:66:12:
ed:74:63:29:35:3f:30:49:63:af:a5:00:64:13:fb:53:3b:71:
e7:8c:83:a6:8c:85:44:13:14:95:9a:f7:2f:ee:2e:45:6e:3e:
7c:c9:bb:39:23:b2:c9:8a:95:50:0c:3f:10:94:7d:95:f4:6d:
70:b9:f7:0f:06:30:16:e8:c6:ef:a6:2f:7b:72:57:71:a5:e2:
0d:92:2d:97:d9:c5:4d:db:71:26:00:e0:6d:d0:b0:73:f0:9b:
91:3e:94:8e:3c:a8:aa:07:e2:b2:3b:a0:55:22:d3:e6:7a:f4:
85:6e:16:60:eb:f2:fd:15:50:28:72:bf:c5:21:d7:1e:10:16:
c1:05:62:43:28:f5:21:9d:ae:b3:ab:96:fd:ae:ee:86:87:fb:
90:2d:f7:6f:67:dc:95:ce:2f:79:31:86:7e:52:fd:1a:7c:97:
2d:64:df:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org