Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/C9E176C4900D11EDBBB09194F1222468.roa
File: C9E176C4900D11EDBBB09194F1222468.roa (raw, json)
Hash identifier: soM2yZXuo6ZaC0GMS43kYiGSZ+TAsc62gpUyAjHX2nA=
Subject key identifier: F1:87:34:3C:61:64:96:13:7B:FC:47:36:EA:7B:ED:57:46:C8:61:72
Certificate issuer: /CN=F3614ABBAF/serialNumber=7801603BB2F37046E0FAFDD7A74FCB06E3C40818
Certificate serial: 0A
Authority key identifier: 78:01:60:3B:B2:F3:70:46:E0:FA:FD:D7:A7:4F:CB:06:E3:C4:08:18
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/eAFgO7LzcEbg-v3Xp0_LBuPECBg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/C9E176C4900D11EDBBB09194F1222468.roa
Signing time: Mon 09 Jan 2023 11:07:21 +0000
ROA not before: Mon 09 Jan 2023 11:07:18 +0000
ROA not after: Tue 09 Jan 2024 11:07:18 +0000
asID: 328341
IP address blocks: 102.164.0.0/19 maxlen: 19
2c0f:ec70::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614ABBAF/serialNumber=7801603BB2F37046E0FAFDD7A74FCB06E3C40818
Validity
Not Before: Jan 9 11:07:18 2023 GMT
Not After : Jan 9 11:07:18 2024 GMT
Subject: CN=63bbf569-869f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:2d:31:82:2e:0e:e5:ac:f2:33:4e:1e:f8:
8a:59:07:be:61:4e:03:8f:49:f0:49:8f:30:04:a4:
56:d5:40:c4:3c:63:ee:24:2a:2b:8d:75:30:4b:76:
cc:01:77:b0:e7:62:f4:19:f0:68:f8:75:cb:46:eb:
90:13:af:3a:bb:ec:c7:44:f7:9d:ab:25:92:39:66:
34:d5:b5:23:bb:93:6b:9a:59:1f:6e:4a:38:2d:44:
be:6e:64:15:c6:0b:46:98:bd:0f:25:80:38:1b:40:
9e:7e:d0:a6:03:95:37:89:c6:60:20:62:36:d2:bf:
d7:ac:25:59:9c:86:cd:77:4e:c2:a7:88:ce:d5:26:
5c:30:d7:39:50:c7:da:a9:7b:e1:60:09:12:06:0e:
ba:9a:e4:2c:33:29:dd:5e:2d:17:02:a9:8b:53:7b:
ed:59:c9:2b:d3:f9:0d:ef:f3:cd:9c:81:73:53:ea:
22:ed:9d:2e:c4:75:4a:d7:26:82:42:e8:15:7b:25:
25:c8:81:01:73:3f:a8:d7:4c:29:3f:22:c1:71:5d:
41:5d:8f:e7:57:f8:b9:9c:05:aa:53:a9:9e:15:a8:
31:9d:1d:64:1b:0a:d5:50:ef:15:0b:b4:f0:04:7c:
8b:1f:b7:4b:9f:3d:de:3f:eb:bc:f4:bb:86:c6:49:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:87:34:3C:61:64:96:13:7B:FC:47:36:EA:7B:ED:57:46:C8:61:72
X509v3 Authority Key Identifier:
keyid:78:01:60:3B:B2:F3:70:46:E0:FA:FD:D7:A7:4F:CB:06:E3:C4:08:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eAFgO7LzcEbg-v3Xp0_LBuPECBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/C9E176C4900D11EDBBB09194F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.164.0.0/19
IPv6:
2c0f:ec70::/32
Signature Algorithm: sha256WithRSAEncryption
0c:3e:1e:e0:95:44:c6:3e:62:2e:33:55:77:7b:53:77:53:80:
e7:0c:f3:07:68:33:53:29:1c:0e:29:9d:bb:bc:5d:68:a9:a2:
b5:6e:36:3a:7a:06:92:d2:84:7e:b8:35:90:b4:47:42:7e:d1:
28:32:57:76:37:34:e6:3d:65:c7:3d:2e:1d:c4:11:b4:c9:07:
da:b4:20:c7:c5:46:dd:b3:48:3c:ff:5e:5a:e9:83:00:11:e4:
ac:dc:74:8f:44:d4:57:73:64:6e:a4:c7:ca:16:2e:e2:1b:bb:
5e:70:e3:b2:6d:2c:e6:44:92:9e:74:2d:1d:d0:28:bc:c1:0d:
8a:91:fb:ec:97:bc:af:5e:90:0e:f9:bf:37:9c:16:d4:a6:fd:
c6:19:9b:23:47:a7:b9:03:70:50:10:34:8a:46:ca:04:0f:6e:
fe:fc:2c:f7:cd:df:8f:a5:5f:c8:16:77:b7:da:95:44:d8:7c:
3b:b6:f0:e1:6d:2d:a3:be:13:4d:6d:60:95:8b:a6:5b:7a:0e:
0e:69:1a:e3:b9:a1:2c:bf:c3:96:84:c5:1b:83:bd:5e:5e:c2:
83:cf:1e:3c:9c:9c:9c:81:7f:37:85:3d:35:c1:2a:31:b5:b7:
2e:37:ea:bb:55:0b:e8:a4:0a:4a:51:9e:d5:a8:b5:ca:cc:2a:
be:35:2b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org