Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/4584495E7A0C11ED89C8BD8DF1222468.roa
File: 4584495E7A0C11ED89C8BD8DF1222468.roa (raw, json)
Hash identifier: zywBaSaPHkMizPtiD4kUGm0QrmHBZmf1Oe142XjCF54=
Subject key identifier: BB:6D:B9:13:5B:7C:41:E8:1F:8E:D0:2C:4B:BE:0B:D7:0B:01:04:F5
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0A
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/4584495E7A0C11ED89C8BD8DF1222468.roa
Signing time: Mon 12 Dec 2022 11:01:04 +0000
ROA not before: Mon 12 Dec 2022 11:01:00 +0000
ROA not after: Mon 11 Dec 2023 11:01:00 +0000
asID: 34549
IP address blocks: 66.251.168.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Dec 12 11:01:00 2022 GMT
Not After : Dec 11 11:01:00 2023 GMT
Subject: CN=639709f0-a59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:d9:e2:21:78:d3:71:b4:3f:db:8d:6f:c9:
0c:ba:74:84:9c:b0:d3:6c:65:e8:41:ff:0d:49:52:
80:c5:46:91:4a:db:06:a7:74:75:f5:9d:72:e3:01:
ef:6e:6d:0f:f6:2d:73:05:a9:f1:8b:d7:a7:66:37:
ba:cf:6d:94:94:12:dc:51:c1:30:7b:06:dc:70:04:
f4:64:6b:5e:9a:0a:90:b4:5d:90:15:90:07:c4:ef:
bc:72:b0:23:5c:5d:df:f9:6a:55:9e:20:d3:5b:00:
c5:66:50:94:f8:fc:51:c6:3f:33:d0:99:4b:54:21:
a7:ff:99:1d:c5:82:93:57:0a:50:b0:32:4e:4d:92:
ac:86:85:7f:5c:6a:88:98:52:7a:5c:83:e9:6d:5c:
cd:a4:df:e1:5f:ff:b1:c0:3a:ab:4c:81:51:18:bd:
7c:a2:06:07:c6:d9:45:95:f2:03:ed:04:5a:69:f7:
96:44:c4:10:ab:99:60:0e:fa:5b:d5:34:72:e4:4f:
67:49:61:2e:07:79:bf:c6:d6:e9:06:5b:44:81:8b:
9f:65:71:96:79:3c:50:f9:a1:54:89:56:f5:e2:19:
40:5e:55:cb:1c:40:e9:5e:1b:58:1f:80:24:5d:00:
bf:58:24:73:e7:3c:33:9d:21:35:0f:ea:a1:90:28:
fa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6D:B9:13:5B:7C:41:E8:1F:8E:D0:2C:4B:BE:0B:D7:0B:01:04:F5
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/4584495E7A0C11ED89C8BD8DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.168.0/22
Signature Algorithm: sha256WithRSAEncryption
25:e9:22:ce:fd:d4:91:b1:d6:1d:5d:9a:f7:60:af:80:31:4e:
b7:2d:44:c7:85:62:94:07:1f:98:3d:86:9b:8d:8b:d4:6f:c4:
f3:e4:b2:fd:80:98:20:80:1a:0e:1d:09:b5:e6:60:23:8c:c7:
46:92:05:1d:ca:20:a1:4e:20:b5:e6:7d:fc:5a:68:a5:c6:7b:
35:0a:36:f7:9f:5d:43:b9:f4:04:03:8f:e0:23:b4:2c:23:ee:
cd:1e:a5:ff:bd:4f:69:75:6f:9c:8e:b9:1c:0d:b4:be:eb:af:
5b:7c:2f:5c:e0:e3:9c:3c:8c:c5:aa:e2:1a:53:fd:1b:4b:06:
4c:41:4d:a3:ac:5d:b7:3b:a2:15:79:91:8a:2d:8b:49:ed:3e:
5c:21:38:6c:da:da:f9:9c:c9:64:97:1d:82:3a:90:08:2b:5d:
1b:d6:18:fe:ca:91:05:f6:45:33:1c:e4:ac:c9:d1:16:2c:19:
c2:97:3c:44:12:f0:89:95:6f:32:6b:b2:82:46:60:26:e0:da:
0e:c7:47:2f:94:c6:73:39:87:00:83:1f:23:fe:5e:28:04:48:
fb:04:8c:32:a8:8d:56:a6:bd:84:c2:e6:fe:20:43:d8:e2:02:
e2:ae:35:7b:8a:fa:b3:db:8e:3b:47:fa:43:0e:16:09:78:5c:
fc:27:57:b9
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBCjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY1
OUY5Q0FSMTEwLwYDVQQFEygwOUZCMzEzNkVDRDVFM0Q3Q0YwMEIzMkMxMjFGMTJF
OEFGRDBBNjAxMB4XDTIyMTIxMjExMDEwMFoXDTIzMTIxMTExMDEwMFowGDEWMBQG
A1UEAwwNNjM5NzA5ZjAtYTU5ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMpa2eIheNNxtD/bjW/JDLp0hJyw02xl6EH/DUlSgMVGkUrbBqd0dfWdcuMB
725tD/YtcwWp8YvXp2Y3us9tlJQS3FHBMHsG3HAE9GRrXpoKkLRdkBWQB8TvvHKw
I1xd3/lqVZ4g01sAxWZQlPj8UcY/M9CZS1Qhp/+ZHcWCk1cKULAyTk2SrIaFf1xq
iJhSelyD6W1czaTf4V//scA6q0yBURi9fKIGB8bZRZXyA+0EWmn3lkTEEKuZYA76
W9U0cuRPZ0lhLgd5v8bW6QZbRIGLn2Vxlnk8UPmhVIlW9eIZQF5VyxxA6V4bWB+A
JF0Av1gkc+c8M50hNQ/qoZAo+nMCAwEAAaOCAqIwggKeMB0GA1UdDgQWBBS7bbkT
W3xB6B+O0CxLvgvXCwEE9TAfBgNVHSMEGDAWgBQJ+zE27NXj188AsywSHxLor9Cm
ATAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTlGOUMvMUQyMjk5NkU3QTA5MTFFREJENDIyMTg1RjEyMjI0NjgvQ2ZzeE51
elY0OWZQQUxNc0VoOFM2S19RcGdFLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
Q2ZzeE51elY0OWZQQUxNc0VoOFM2S19RcGdFLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NTlGOUMvMUQyMjk5NkU3QTA5MTFFREJENDIyMTg1RjEyMjI0
NjgvNDU4NDQ5NUU3QTBDMTFFRDg5QzhCRDhERjEyMjI0Njgucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAkL7qDANBgkqhkiG9w0BAQsFAAOC
AQEAJekizv3UkbHWHV2a92CvgDFOty1Ex4VilAcfmD2Gm42L1G/E8+Sy/YCYIIAa
Dh0JteZgI4zHRpIFHcogoU4gteZ9/FpopcZ7NQo2959dQ7n0BAOP4CO0LCPuzR6l
/71PaXVvnI65HA20vuuvW3wvXODjnDyMxariGlP9G0sGTEFNo6xdtzuiFXmRii2L
Se0+XCE4bNra+ZzJZJcdgjqQCCtdG9YY/sqRBfZFMxzkrMnRFiwZwpc8RBLwiZVv
MmuygkZgJuDaDsdHL5TGczmHAIMfI/5eKARI+wSMMqiNVqa9hMLm/iBD2OIC4q41
e4r6s9uOO0f6Qw4WCXhc/CdXuQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org