Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/79B88D70517A11EEB89BFB834AD9E6FC.roa
File: 79B88D70517A11EEB89BFB834AD9E6FC.roa (raw, json)
Hash identifier: dKx6IFAepg2Yf5el9zOKE9Y097JhpgjgSMuZoh/JwEU=
Subject key identifier: BE:A8:4A:5C:79:6F:51:4A:81:62:8D:29:20:5C:9F:E3:EE:F2:29:17
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0173
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/79B88D70517A11EEB89BFB834AD9E6FC.roa
Signing time: Tue 12 Sep 2023 14:41:36 +0000
ROA not before: Tue 12 Sep 2023 14:41:33 +0000
ROA not after: Wed 11 Sep 2024 14:41:33 +0000
asID: 53356
IP address blocks: 66.251.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371 (0x173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Sep 12 14:41:33 2023 GMT
Not After : Sep 11 14:41:33 2024 GMT
Subject: CN=650078a0-5689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:cf:ea:2f:74:e6:e7:35:5c:79:d4:b7:a4:
17:c0:39:8c:9e:23:f5:9c:9e:64:85:31:51:83:e7:
65:83:b8:fa:2b:cb:18:0e:e6:13:1a:48:25:80:39:
34:44:cb:37:e1:c7:5e:8c:90:25:b7:ff:ac:f8:56:
b0:5c:d2:4c:22:f1:47:77:88:6f:83:4e:a0:7d:fe:
93:3e:2e:21:ca:03:5c:9c:9d:98:2f:fa:c7:db:71:
5d:11:15:d3:b8:4d:99:f1:78:92:12:9c:7a:4b:c8:
56:89:00:f5:ef:3c:98:1d:66:d5:1a:e9:15:3d:0c:
03:50:a2:07:8c:52:cf:b0:72:8f:1f:f3:4f:c9:15:
42:dd:94:92:a8:7c:95:59:4e:b9:65:c1:34:56:79:
a5:ac:49:08:ad:3e:7b:12:05:4c:29:a6:b9:b4:d5:
80:48:a3:9b:22:59:b0:66:c2:1b:92:a3:1c:c0:c6:
1d:11:1c:ad:1b:0b:15:a2:64:3a:be:a8:88:5f:f0:
10:aa:87:8b:7a:79:1d:cf:21:f5:33:26:4e:5a:42:
df:86:57:95:cf:9d:8a:9c:f5:33:28:a2:d3:c5:1a:
75:e9:21:2a:31:f3:00:fa:dc:e9:62:57:e2:bd:09:
36:c4:ef:73:59:84:bf:9f:d6:2e:a2:b1:e6:f5:1b:
25:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A8:4A:5C:79:6F:51:4A:81:62:8D:29:20:5C:9F:E3:EE:F2:29:17
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/79B88D70517A11EEB89BFB834AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.190.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:9a:db:d2:48:84:65:0c:54:aa:45:5d:ec:ef:12:28:75:48:
d2:b3:df:bd:11:a0:a0:dc:21:dc:3c:f3:7a:ba:aa:77:69:3b:
4c:65:5d:df:a2:53:71:b5:3a:76:19:4d:c6:7f:bf:63:29:22:
3c:d7:12:8b:79:0f:a6:b8:a4:61:3a:f2:51:07:00:62:c9:8f:
fa:5c:b4:fb:62:34:97:5c:41:d1:92:14:22:03:93:ee:ff:8b:
a2:c5:56:95:4e:fb:b0:f7:74:9e:83:de:75:c5:50:1b:1c:a5:
5e:1d:21:8a:8f:c1:6a:21:73:a8:16:48:d1:8c:7d:55:c4:2d:
2c:66:f5:02:ac:63:77:fc:f7:a5:0d:25:f0:bf:62:68:fc:46:
de:82:f7:82:d1:e2:27:76:fd:49:5d:0e:23:f4:c4:48:bc:5f:
30:98:a2:d0:d1:2a:1d:bc:fd:75:89:2e:62:17:92:28:97:ab:
77:bd:21:e4:53:5d:6a:c5:58:5f:41:3a:a3:a1:c5:72:3d:40:
aa:bc:cd:ae:72:70:d8:67:ab:7c:44:7a:7c:84:bc:92:ba:29:
63:f8:51:0c:84:c9:60:8f:4b:6e:d6:86:0c:2d:c2:5e:bc:16:
d6:55:34:3b:c1:e2:f9:ee:f5:05:f0:63:7b:53:c2:3a:bc:43:
6e:99:35:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 04:50:55 2024 by rpki-client on console-fra.rpki-client.org