Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/6801439E7FE311EBBE4E9244F8AEA228.roa
File: 6801439E7FE311EBBE4E9244F8AEA228.roa (raw, json)
Hash identifier: ucmO1T2VXLcy3pxc8mIKjJ9fx3iRIvWvRd4VpFx/hSo=
Subject key identifier: C2:E7:A2:90:6D:5D:16:B3:93:23:1B:A6:88:DF:E6:50:E6:37:22:78
Certificate issuer: /CN=F362AF02AR/serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
Certificate serial: 02A0
Authority key identifier: 93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
Authority info access: rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/6801439E7FE311EBBE4E9244F8AEA228.roa
Signing time: Mon 08 Mar 2021 07:53:45 +0000
ROA not before: Mon 08 Mar 2021 07:53:29 +0000
ROA not after: Thu 07 Apr 2022 07:53:29 +0000
asID: 37520
IP address blocks: 146.231.0.0/16 maxlen: 18
192.42.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672 (0x2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362AF02AR/serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
Validity
Not Before: Mar 8 07:53:29 2021 GMT
Not After : Apr 7 07:53:29 2022 GMT
Subject: CN=6045d808-04c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:c8:a0:76:58:a1:58:08:7d:93:67:f4:99:
a1:56:b0:81:df:0e:11:9e:d2:18:76:24:f4:2d:44:
19:52:4e:1f:7f:2f:d3:b2:58:ce:32:bb:5b:82:43:
0e:25:b9:e3:3c:11:12:d8:fe:fd:4b:d2:79:d4:fd:
b0:f6:1a:ad:21:5d:1d:8f:1c:4b:a4:b5:89:37:6e:
e8:e4:42:f7:c7:8d:a8:a4:37:aa:58:51:ee:3b:79:
fc:b8:df:d3:19:ef:78:03:dc:27:bb:cc:55:46:71:
1d:b3:ab:13:19:27:f8:3e:01:48:e1:9e:36:f6:d6:
44:65:b8:bc:bc:61:a9:21:98:b2:2f:55:ee:7b:3b:
a4:8d:5b:37:f2:b4:ae:5b:fc:6f:f7:6b:d1:97:b4:
b1:da:90:0e:ed:76:ff:b0:c9:f8:cd:0f:e5:99:b3:
65:d0:e9:ab:6d:90:c1:38:a2:2f:37:73:6a:60:fa:
d1:7c:fa:d9:eb:3a:60:f5:4c:e4:31:6a:99:e5:97:
b8:d6:08:3b:bf:64:ed:80:16:6e:9c:7c:91:dd:cf:
28:58:a8:d6:d6:e1:f6:54:18:fb:23:46:c2:b9:50:
d4:0b:92:4c:5e:57:44:44:2c:d2:31:03:c6:9b:35:
11:ea:e8:7d:35:4c:4e:38:73:83:8e:44:95:6d:47:
40:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E7:A2:90:6D:5D:16:B3:93:23:1B:A6:88:DF:E6:50:E6:37:22:78
X509v3 Authority Key Identifier:
keyid:93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/6801439E7FE311EBBE4E9244F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.231.0.0/16
192.42.99.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:0f:70:3c:b6:d5:86:a2:09:2d:f1:90:f0:c3:6f:5b:e3:9d:
4c:b3:6a:7e:b0:bb:f7:e1:f4:7a:f6:ed:9c:fd:a9:25:a9:87:
f0:c1:14:1b:e7:a4:9d:75:86:fd:5a:0e:58:5e:30:a3:b2:3a:
56:ed:60:29:17:9a:81:46:9a:46:0b:2b:92:fc:28:a8:af:f0:
cb:9f:a6:e9:52:af:de:0c:94:a0:64:a2:83:b5:7f:09:13:75:
13:db:95:2e:20:df:dd:13:9e:91:a3:38:22:c8:6f:5b:bc:67:
54:37:96:0c:e8:0d:23:04:4f:a6:e2:01:ff:d7:56:ca:e0:e5:
e1:1a:5c:7e:d2:1d:6f:68:6d:f1:0b:91:d8:75:4f:3e:9f:ed:
b3:62:27:f8:00:b6:ea:81:de:f5:b6:03:16:97:67:b2:ed:48:
b2:5e:cd:73:41:fa:32:67:fd:66:af:51:67:c5:ad:85:b6:e5:
8c:22:b8:16:b9:d0:e0:d5:fe:42:34:6e:b5:21:85:27:1d:cb:
8d:68:6a:e1:7c:f0:8c:b3:ad:73:41:b3:20:70:46:22:38:18:
3d:ec:33:c7:a4:9b:d2:30:19:68:95:ea:fa:71:72:23:54:46:
f6:60:fa:77:0a:87:d2:d7:a7:63:54:22:b3:e2:4e:97:fd:e4:
bb:1d:cf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:55 2023 by rpki-client on console-ams.rpki-client.org