Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/9BC0E3927A0A11ED93E02F89F1222468.roa
File: 9BC0E3927A0A11ED93E02F89F1222468.roa (raw, json)
Hash identifier: uAV0vN6hRX3J3jW8o/IXOcswcpU4v97EVD1sWxGR2Fg=
Subject key identifier: 38:ED:29:C2:2A:AE:BC:47:CA:47:13:31:D6:7D:28:62:F9:CE:AB:49
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 02
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/9BC0E3927A0A11ED93E02F89F1222468.roa
Signing time: Mon 12 Dec 2022 10:49:10 +0000
ROA not before: Mon 12 Dec 2022 10:49:06 +0000
ROA not after: Mon 11 Dec 2023 10:49:06 +0000
asID: 1239
IP address blocks: 66.251.146.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Dec 12 10:49:06 2022 GMT
Not After : Dec 11 10:49:06 2023 GMT
Subject: CN=63970726-cd74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:da:39:36:26:90:fa:21:9e:ab:f8:48:8a:
0d:3f:77:c2:6a:1a:a3:8c:7e:4b:b7:10:f2:9e:6e:
6a:a4:31:96:0f:58:94:c9:67:8a:12:9d:1f:ef:f4:
6b:66:8d:dd:55:73:9f:d3:28:ae:60:58:ba:99:d4:
9e:ba:f4:a4:aa:a4:82:a9:a9:3e:70:59:54:86:20:
1b:bc:86:2e:c1:58:14:a5:45:f3:c7:1c:58:29:e2:
a1:26:d1:4a:5c:b4:7e:98:3a:46:6d:cd:6b:2d:03:
3a:1c:a3:34:d7:31:6a:71:c9:f8:2f:4b:a6:f9:31:
5f:6f:ac:a1:69:c0:d2:3b:13:40:6c:9a:9c:d5:3c:
c9:55:a2:34:d3:76:de:47:ac:ea:08:af:1c:2d:a9:
bf:3f:85:25:ee:60:34:64:fc:96:5d:20:b5:df:d4:
f6:01:12:42:3b:f7:4f:e8:d8:85:46:d0:58:cb:00:
e7:b0:4b:14:9b:e2:e8:3d:3b:ef:e5:56:ad:54:ad:
4a:b5:29:9e:d9:70:50:ef:bf:cd:88:05:d9:45:48:
b6:f1:98:00:1b:31:b6:4a:3f:92:34:fc:c5:c0:43:
9f:e6:42:a1:62:14:5b:b1:76:a3:d0:75:28:cf:f8:
b8:b7:cb:11:5e:3d:b4:b8:a9:70:85:dd:61:ec:07:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:ED:29:C2:2A:AE:BC:47:CA:47:13:31:D6:7D:28:62:F9:CE:AB:49
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/9BC0E3927A0A11ED93E02F89F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.146.0/23
Signature Algorithm: sha256WithRSAEncryption
27:33:60:24:e1:06:bc:91:f8:22:bb:81:a1:8d:cd:be:a2:ab:
bc:a9:f9:77:8d:2f:07:eb:e8:1b:03:30:82:41:96:64:f0:51:
e1:5b:3a:7a:b9:a2:d8:50:b7:06:fa:e7:4f:a8:80:ce:dd:3c:
bc:b0:32:13:31:f3:54:8b:81:95:a1:0c:0c:3c:9d:a4:22:d4:
ed:78:de:73:fc:7e:f8:fb:0a:bf:b1:42:31:dd:cb:71:f6:22:
cf:d3:b1:6d:25:f1:90:76:61:ac:5a:f5:bb:1f:31:17:a9:3a:
7e:17:de:bb:33:70:0f:71:65:48:c4:4c:b8:14:ef:af:2c:8c:
ec:36:18:3e:ce:27:8f:59:80:d5:d9:ac:82:67:50:7b:c5:63:
cc:60:1e:a3:68:8f:1c:5e:23:d7:9b:79:9f:cd:8c:31:81:d5:
a2:37:be:f4:81:b7:61:b9:40:51:d1:0e:40:4a:a7:f7:e9:5a:
0e:20:a9:b8:d5:cc:cb:bd:f9:e1:e1:6e:92:0d:53:1e:18:d2:
b7:2a:12:e3:6f:cd:a2:f0:cf:1c:f3:59:76:fd:f8:5e:4f:12:
07:31:1c:62:24:74:10:85:b2:25:93:1f:30:fa:33:b3:a3:9d:
69:4f:d5:06:d7:be:9c:da:a1:53:57:d9:79:74:ff:cc:f5:8f:
4b:f0:37:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org