Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/D14E885C7A0A11EDB00BCB89F1222468.roa
File: D14E885C7A0A11EDB00BCB89F1222468.roa (raw, json)
Hash identifier: WO9p+dm52+7EKV71SA9PnRT2CaJCsk/5E0Cf0lXaOik=
Subject key identifier: 58:A1:10:77:CE:43:F6:23:CC:26:08:46:06:F5:BD:9A:49:23:F9:EB
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 04
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/D14E885C7A0A11EDB00BCB89F1222468.roa
Signing time: Mon 12 Dec 2022 10:50:40 +0000
ROA not before: Mon 12 Dec 2022 10:50:36 +0000
ROA not after: Mon 11 Dec 2023 10:50:36 +0000
asID: 1239
IP address blocks: 66.251.152.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Dec 12 10:50:36 2022 GMT
Not After : Dec 11 10:50:36 2023 GMT
Subject: CN=63970780-a344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:29:e0:48:90:ac:56:01:29:b2:f1:a6:c7:90:
e1:0c:2d:53:a5:fa:88:e0:f7:bd:f0:2b:ba:f0:2a:
71:0f:65:9f:3f:03:3b:45:89:d7:6b:5b:45:02:64:
f6:d6:21:1e:eb:4d:0f:2e:1f:d4:c6:36:7d:79:f3:
61:c4:f8:0f:d5:b7:10:24:7d:ae:77:8f:86:0c:37:
03:ba:59:d7:28:ae:bb:1e:ec:d5:61:db:8c:ad:d4:
d4:a7:b7:cf:9f:6d:f1:21:6c:f0:4e:a6:27:e0:c4:
78:99:30:0a:63:f5:e8:e5:3b:d1:24:18:7e:f4:3a:
48:43:2d:52:8a:5e:bb:fc:9f:d4:62:f4:cb:a3:7e:
d5:03:65:7f:35:d0:66:68:9e:d4:d1:f7:70:45:50:
8a:ec:8a:cc:76:22:ab:f9:48:75:e0:a4:a1:5f:bd:
a6:d3:d3:38:b9:ed:d8:fc:88:df:f5:8f:dd:c6:9a:
f5:b4:37:af:89:1b:f8:dc:30:4c:36:a7:bc:ee:81:
cf:7c:f4:e3:50:17:cc:e0:e2:cb:8b:c3:e9:ff:0e:
94:18:f1:a0:52:17:dd:10:57:cb:e7:95:61:40:96:
87:1e:82:dd:c6:b1:ca:2b:db:d5:33:6e:05:c9:b1:
f0:e5:d2:91:ab:0f:18:8e:ae:43:d1:e0:11:cd:d2:
72:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A1:10:77:CE:43:F6:23:CC:26:08:46:06:F5:BD:9A:49:23:F9:EB
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/D14E885C7A0A11EDB00BCB89F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.251.152.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:7e:8d:a5:ab:ad:ee:97:d9:35:d3:09:11:af:6f:e6:24:b1:
f6:72:49:33:d0:04:39:3f:ce:4c:77:ed:9d:54:f4:89:f3:09:
0c:eb:3c:d8:1e:99:a8:cb:19:9d:17:fd:35:7b:e8:9b:2c:81:
aa:81:f7:2d:47:c7:62:b4:01:7b:c3:05:10:2d:c8:8a:6e:32:
8b:71:33:57:39:3a:69:22:11:d3:0a:cb:48:41:8f:03:f6:9d:
92:a3:6c:11:e5:a2:1d:a8:e8:be:76:4f:8e:93:55:83:98:b6:
dc:f2:f5:83:cb:fa:b9:54:48:27:d0:59:4d:c9:4a:2d:99:16:
0f:fd:4a:ec:89:51:2d:f7:3b:f8:cb:25:a7:1a:bf:6f:25:f2:
19:13:cc:d4:84:af:c5:06:f1:d9:bb:ef:e6:7a:d5:07:d2:ac:
f6:ed:1e:78:18:94:af:1e:fc:75:b3:18:61:ef:15:69:07:af:
c0:8d:f0:9e:60:56:f6:96:d0:f8:1e:a4:37:da:7b:0f:0d:5f:
0b:40:02:be:c5:a8:53:92:18:3e:40:01:1e:59:2f:3c:9b:7b:
ea:5b:17:04:6d:8f:07:50:26:6d:7c:22:ec:e8:9f:d9:f4:30:
9c:a7:bf:1d:ae:9a:8d:8f:be:85:0a:2d:47:00:20:69:0d:be:
d3:11:7a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org