Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/3D3AA636DA6F11E789C17517F8AEA228.roa
File: 3D3AA636DA6F11E789C17517F8AEA228.roa (raw, json)
Hash identifier: Lqe5DewsyatyBltDlitkD827u8tJM+IvRtSXPZOwF08=
Subject key identifier: A8:EB:40:86:A1:C1:F6:1D:40:59:D9:E2:C9:90:26:88:CE:8F:B9:E2
Certificate issuer: /CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Certificate serial: 0405
Authority key identifier: 8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/3D3AA636DA6F11E789C17517F8AEA228.roa
Signing time: Wed 06 Dec 2017 10:21:37 +0000
ROA not before: Wed 06 Dec 2017 10:21:29 +0000
ROA not after: Sat 31 Dec 2022 10:21:29 +0000
asID: 37181
IP address blocks: 2001:43f8:110::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1029 (0x405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Validity
Not Before: Dec 6 10:21:29 2017 GMT
Not After : Dec 31 10:21:29 2022 GMT
Subject: CN=5a27c4b0-b6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:7a:27:74:56:22:35:c6:da:15:0b:4a:38:
78:fd:cc:4c:96:0e:c7:30:b8:a3:79:0a:99:55:ca:
cd:75:34:93:8b:1c:6c:0e:c0:73:f7:28:c4:b5:7d:
39:9c:30:46:15:5f:c6:2a:4e:43:c8:12:8c:c0:be:
5e:69:d1:05:64:2e:52:b3:93:62:a6:25:bc:52:4b:
b9:1a:f9:b9:39:65:86:8c:f2:ee:fd:3b:7e:e3:cb:
35:48:bd:68:de:98:86:a3:9c:78:4d:b3:21:d5:3e:
cf:15:b4:4a:eb:37:c3:d9:09:80:a0:ae:c8:9f:eb:
25:5d:c0:e3:42:fa:cc:0f:9f:2c:83:92:3b:d5:84:
54:79:72:ed:c2:73:10:ae:d7:f0:c7:f1:3f:fc:c2:
41:e5:8f:03:ba:3b:a2:d1:fb:10:20:a9:45:0e:a8:
cb:f6:bc:fa:d0:20:99:98:f9:93:29:b3:53:88:ee:
98:6b:e8:34:9d:78:fc:5d:56:6e:2d:ce:b4:7c:52:
94:66:25:24:9a:a3:57:7c:d6:3a:e8:9c:f9:93:19:
94:b5:c6:2d:d3:5d:a4:19:d3:aa:40:dd:5d:fb:88:
f9:f0:07:82:62:13:b7:4b:8e:8b:a1:ec:d7:52:c2:
a4:1a:74:a4:15:d7:79:b2:ce:f3:9c:52:55:0e:d5:
8d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EB:40:86:A1:C1:F6:1D:40:59:D9:E2:C9:90:26:88:CE:8F:B9:E2
X509v3 Authority Key Identifier:
keyid:8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/3D3AA636DA6F11E789C17517F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:110::/48
Signature Algorithm: sha256WithRSAEncryption
4e:87:5c:e6:76:f4:0c:92:9a:7e:5c:b4:3f:80:7d:2e:5c:bc:
43:13:5e:f7:e7:2a:93:b6:b3:23:4c:3d:ac:f5:ee:48:f4:3d:
02:99:77:f3:8b:3e:db:b8:70:1f:a8:47:88:54:cb:ee:73:57:
ac:43:7f:14:89:f9:84:bf:3b:f3:d1:f7:67:13:59:0d:c2:1a:
2c:7c:dd:df:de:6f:ea:ef:f2:16:3f:3e:06:74:87:63:64:a1:
f0:89:81:ce:1a:70:c7:69:62:f3:76:90:38:ca:42:38:94:b1:
f9:bb:89:64:9f:4f:ca:74:47:4b:c6:d0:5d:b2:a8:72:b2:be:
8a:29:d0:ad:6f:40:96:f2:42:4d:38:88:ea:c1:90:88:50:f0:
a4:37:f7:2c:8d:57:36:ed:9f:ac:d4:9d:f1:b0:b1:e1:cc:06:
35:90:26:fa:24:fc:6a:dc:98:b0:8a:7c:fe:a1:8c:dc:4f:04:
7d:12:da:67:c0:cc:f4:4a:6d:53:53:e3:6c:4e:1a:40:0c:07:
8e:a5:5e:bd:e9:5e:c6:c0:4f:c0:dc:db:83:03:42:43:5b:cb:
3b:72:eb:fd:79:d7:cf:13:a6:72:6b:26:01:b0:db:48:fd:2c:
e2:00:d1:bf:fe:19:96:46:55:8f:aa:40:af:d8:f0:6c:b8:95:
8a:82:d2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org