Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/8F8C627406B311EDA14D82ECF1222468.roa
File: 8F8C627406B311EDA14D82ECF1222468.roa (raw, json)
Hash identifier: kZrSZQet1KvgcwsxWqlurcyb8eztc4YSkHXpOvEzA6Q=
Subject key identifier: 4E:AF:E8:E1:08:9B:12:35:82:4A:BE:D0:39:1B:65:94:39:7B:E7:BC
Certificate issuer: /CN=F361153AAF/serialNumber=17D5DB614BCBD76DAA9FF1A9315915C47F897BF3
Certificate serial: 04
Authority key identifier: 17:D5:DB:61:4B:CB:D7:6D:AA:9F:F1:A9:31:59:15:C4:7F:89:7B:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/8F8C627406B311EDA14D82ECF1222468.roa
Signing time: Mon 18 Jul 2022 16:06:20 +0000
ROA not before: Mon 18 Jul 2022 16:06:16 +0000
ROA not after: Sun 31 Dec 2023 16:06:16 +0000
asID: 328857
IP address blocks: 102.220.246.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361153AAF/serialNumber=17D5DB614BCBD76DAA9FF1A9315915C47F897BF3
Validity
Not Before: Jul 18 16:06:16 2022 GMT
Not After : Dec 31 16:06:16 2023 GMT
Subject: CN=62d584fb-71f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dc:cd:9f:3d:ac:24:bf:27:8f:f4:61:5c:0e:
76:e4:26:68:05:1c:24:6a:0c:b9:24:23:cf:93:1d:
85:3c:87:2a:e5:ec:33:97:42:6f:33:df:2c:ba:66:
c8:fb:72:17:a5:eb:af:89:8c:2f:18:b0:54:9e:68:
c6:4c:fe:30:43:c6:7e:db:27:0d:ab:5e:dc:ce:3a:
ad:14:e7:ae:cb:55:dd:62:cf:51:fd:1e:f4:1b:b5:
0d:69:9d:13:ec:c1:6b:0d:38:f5:85:15:1a:58:c4:
69:bc:33:39:24:18:f5:8e:0b:72:f6:f5:96:04:b2:
27:a7:6f:03:b1:7d:91:b5:5d:13:96:a5:26:b6:80:
47:bf:b5:ff:79:4b:98:df:a9:7e:d3:16:c7:b2:ec:
ae:34:71:66:35:42:3e:50:6d:8c:87:2a:a1:15:85:
69:32:7c:12:49:dc:7b:f3:0f:52:10:30:32:72:9d:
30:a0:d8:11:e6:fe:ef:e1:37:71:58:56:80:61:dd:
3c:f3:44:40:af:78:74:ea:f4:fc:96:10:0b:ed:7a:
69:1e:88:c2:a4:94:e5:55:c1:59:4d:10:4a:13:05:
65:25:2f:de:f1:46:ba:dc:44:f6:ad:07:21:88:3b:
84:a7:a0:6c:0f:d3:ca:9c:a2:a6:2e:46:77:42:46:
f4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AF:E8:E1:08:9B:12:35:82:4A:BE:D0:39:1B:65:94:39:7B:E7:BC
X509v3 Authority Key Identifier:
keyid:17:D5:DB:61:4B:CB:D7:6D:AA:9F:F1:A9:31:59:15:C4:7F:89:7B:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/8F8C627406B311EDA14D82ECF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.220.246.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:24:19:8f:40:4e:25:74:62:59:09:22:5d:5a:d2:e0:07:6d:
e0:c3:32:34:86:e9:c5:f9:5d:5a:78:43:8b:23:85:23:9b:15:
13:99:14:da:e8:9e:5f:25:b8:a3:23:16:73:87:64:84:d4:31:
5d:ec:5a:3e:8e:09:f1:b3:f6:42:51:43:41:59:11:ec:7c:b6:
6b:af:af:c8:71:c6:66:11:c4:52:4c:f3:61:ff:38:18:db:32:
1a:6b:f1:88:ef:77:78:05:3c:b9:56:f9:ff:fc:fa:75:42:bb:
70:ba:7c:6f:28:7c:1c:3c:91:8e:7a:ed:0a:ae:75:c7:fe:a3:
69:2e:be:69:f2:e9:7e:4c:32:70:a0:37:69:50:12:f8:41:8c:
01:49:5c:47:18:94:be:61:68:80:d2:15:7d:6c:96:d0:0d:10:
cc:65:59:42:9a:2a:a4:40:bb:ea:0e:4f:eb:90:0e:66:45:ee:
10:fe:30:70:fa:58:a7:9e:7d:ab:e3:dc:e0:43:93:3b:b6:2e:
d2:fe:2b:1f:8d:fe:39:94:39:45:54:9d:a2:99:4e:69:48:9a:
57:fb:d5:cf:e4:bc:d4:ff:fb:e6:78:d8:e0:4c:1b:55:9a:18:
48:6b:5c:59:56:59:d2:9a:d5:50:98:8c:12:07:23:c1:af:77:
1d:bb:5c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:06 2024 by rpki-client on console-ams.rpki-client.org