Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/6B4A5846932911EDAA8B56C9F1222468.roa
File: 6B4A5846932911EDAA8B56C9F1222468.roa (raw, json)
Hash identifier: RYRMgs5h+SGud4PDe6lzXYdK99hvO975K/soT2mnxNY=
Subject key identifier: 67:F2:48:60:3B:A5:5B:AB:5A:8C:F0:CD:B9:39:25:98:14:57:7D:C5
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 31
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/6B4A5846932911EDAA8B56C9F1222468.roa
Signing time: Fri 13 Jan 2023 10:02:42 +0000
ROA not before: Fri 13 Jan 2023 10:02:38 +0000
ROA not after: Fri 12 Jan 2024 10:02:38 +0000
asID: 35913
IP address blocks: 66.251.190.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Jan 13 10:02:38 2023 GMT
Not After : Jan 12 10:02:38 2024 GMT
Subject: CN=63c12c42-410e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:ac:fc:56:fb:d1:83:97:03:c3:be:2c:1d:
60:8c:46:c5:b7:36:7e:fc:3e:87:f6:b5:6e:6d:a8:
8d:e7:83:6e:c0:63:9a:33:32:93:6d:78:ba:97:66:
8e:a6:3c:6f:0b:2e:f3:15:fa:40:28:c7:2a:51:be:
2b:32:38:66:cc:a1:1e:35:d8:af:c3:92:29:41:39:
79:ee:c2:e5:2c:8a:8d:dd:4c:89:ac:60:33:7c:32:
32:89:c9:55:83:64:81:cd:37:3e:fa:49:b7:43:22:
2f:df:7b:f4:e6:6a:20:ad:7f:fa:f2:25:c2:4d:4d:
d7:c6:2c:86:df:14:b5:06:55:d2:28:82:4e:95:5c:
b6:76:bb:96:6d:9b:74:78:7e:e6:19:97:b6:91:3a:
00:be:40:c8:36:0b:89:32:8f:9f:aa:3b:7c:d5:c2:
90:77:d3:e8:ae:c7:c4:ca:8b:ac:9b:1f:e6:95:eb:
7f:9a:e0:f7:a7:52:9a:1d:6a:cb:9b:a8:0e:88:1d:
67:0c:c6:89:c7:bb:c1:2a:a9:a3:0f:03:99:06:22:
89:0c:32:4c:a8:40:45:cc:14:8b:2b:e5:d2:57:4b:
52:be:cb:8a:ca:25:9d:ca:ad:c1:3e:b0:76:0b:f6:
cf:99:92:51:72:a5:4a:d6:86:ed:cd:3c:43:87:7c:
73:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F2:48:60:3B:A5:5B:AB:5A:8C:F0:CD:B9:39:25:98:14:57:7D:C5
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/6B4A5846932911EDAA8B56C9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.190.0/23
Signature Algorithm: sha256WithRSAEncryption
41:08:b5:10:04:4d:9f:1d:6f:a1:6c:4e:bd:d7:1f:e8:87:51:
57:5c:80:ee:cc:b2:aa:57:75:66:cc:e2:10:ee:34:92:f1:84:
3a:e5:bd:69:02:65:e1:f2:4e:b6:14:45:af:a4:99:f4:b5:e0:
80:ad:66:70:ea:0d:a2:f5:d7:57:05:9f:58:6a:6e:ce:1e:18:
1f:f4:4e:5c:9c:a0:bf:3e:56:ca:67:79:11:db:21:bc:38:a8:
4a:7d:15:c1:3d:ee:36:9a:65:54:c1:9c:71:31:5b:0f:b3:ab:
c8:76:24:32:f9:23:55:37:da:48:3e:73:a7:d1:c0:5d:83:8b:
62:1d:2d:1b:da:6e:6d:51:59:27:5f:e0:d9:36:59:ab:7a:0f:
b7:0e:56:11:fa:c1:9a:89:32:29:01:f8:1f:cd:08:e9:59:b1:
5a:78:8b:47:92:86:8a:e2:f8:3f:3e:5d:4a:e2:d5:d6:f8:56:
cc:2d:d3:03:02:1d:0d:3d:fb:ac:fe:7e:d5:11:6e:28:bf:e1:
d1:8d:0b:da:82:ba:f2:4b:8d:e1:fb:10:62:c7:54:ca:f0:17:
c0:8d:5b:80:68:35:ae:1a:79:c9:ff:cb:2a:3b:8f:95:28:c1:
1b:b5:15:5f:b1:d8:78:f5:93:c8:95:ba:01:79:f6:ca:04:40:
14:d6:f8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org