Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/8007758EE7E811EDA1A5DC1B4AD9E6FC.roa
File: 8007758EE7E811EDA1A5DC1B4AD9E6FC.roa (raw, json)
Hash identifier: sYZukzh4BknpGG4xb6RPucG0lrbX95/Gj0+RLpY7gm4=
Subject key identifier: 60:4A:DE:2D:A5:C9:F0:78:31:39:C0:22:2D:3A:89:C1:AC:D1:12:BD
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: B6
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/8007758EE7E811EDA1A5DC1B4AD9E6FC.roa
Signing time: Mon 01 May 2023 06:22:09 +0000
ROA not before: Mon 01 May 2023 06:22:05 +0000
ROA not after: Tue 30 Apr 2024 06:22:05 +0000
asID: 35913
IP address blocks: 66.251.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: May 1 06:22:05 2023 GMT
Not After : Apr 30 06:22:05 2024 GMT
Subject: CN=644f5a90-f283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:ec:23:2b:8e:f7:b2:91:0e:31:6f:e2:65:
02:12:1f:18:42:19:b0:42:08:70:66:fb:93:0d:b9:
12:4d:90:18:a6:dc:5d:4d:13:f4:24:cd:83:9e:64:
f1:66:aa:36:73:4a:e6:b6:cf:e8:e1:7d:3e:b8:d3:
16:3f:7a:79:60:57:0d:da:ee:99:dd:da:c5:a3:d5:
7e:e1:03:12:2f:86:af:05:8a:77:a6:87:cb:4b:b4:
8e:b4:3f:73:73:11:5c:e0:f9:79:1c:e7:5b:03:73:
fa:1e:5e:d9:fb:70:28:dd:71:42:5a:ac:40:ac:af:
b5:f5:30:17:0a:f0:a9:af:62:06:75:d9:5b:9a:89:
d9:14:fa:72:33:96:5d:db:41:1c:24:b6:e0:96:29:
47:a5:f8:90:eb:90:06:8e:34:2e:4a:54:23:7f:61:
e3:02:52:b9:7b:d3:89:1c:53:1a:32:6f:83:29:6d:
40:78:16:eb:25:46:01:c2:b5:86:bb:44:4c:8e:a5:
59:95:48:46:ac:ab:03:6f:76:b2:97:94:d4:92:a4:
04:4b:11:2b:99:b4:97:0e:69:01:f1:0e:25:ec:50:
1a:2a:1c:97:6e:3a:32:b3:63:41:66:83:c3:bc:32:
3b:9a:f8:84:a1:cb:bb:35:33:7c:b5:3b:d8:0f:dc:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4A:DE:2D:A5:C9:F0:78:31:39:C0:22:2D:3A:89:C1:AC:D1:12:BD
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/8007758EE7E811EDA1A5DC1B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.150.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:1f:4a:72:45:9c:07:82:5d:e4:b9:b5:92:57:7b:aa:dd:74:
af:5c:44:e5:23:59:11:46:13:d5:4e:c1:ea:83:49:52:73:b8:
14:40:dd:bd:33:95:3e:bb:f5:dd:27:db:17:20:57:ee:e9:be:
dd:a7:67:72:08:2e:e0:9f:53:17:06:22:ad:d1:91:35:a4:d3:
78:26:1f:53:bb:87:61:18:a9:49:25:21:17:d6:56:7a:dd:bb:
6a:23:ce:3c:76:28:38:d5:b8:44:b3:34:01:fd:aa:a1:65:a8:
84:23:cb:bd:c3:7b:1c:f4:db:47:f8:ab:1b:c0:89:a9:26:35:
ce:64:f8:2a:18:c5:0d:58:95:d4:ab:9f:eb:b4:79:1b:04:51:
4b:bb:42:b2:39:02:69:0f:e5:3d:23:42:a7:c5:de:cf:ed:04:
ed:56:a7:cd:78:3f:0b:b0:fb:30:7f:3b:d1:14:d2:82:7c:32:
b5:5d:80:80:39:f5:1c:55:e3:cc:92:df:ec:cc:5a:60:5a:4f:
d3:cc:99:96:b7:e5:01:7a:d3:2a:5b:1f:f0:55:bc:b0:d6:79:
ff:27:28:72:ea:e5:79:3f:6f:c4:c9:6d:93:77:4f:00:68:4f:
94:30:59:56:1b:92:8e:2b:de:8d:c0:f0:13:34:8e:a3:70:43:
88:10:f4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org