Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/0B6DE4824F9611EDA241718BF1222468.roa
File: 0B6DE4824F9611EDA241718BF1222468.roa (raw, json)
Hash identifier: oD/tM4G4sgTmNASX7S1MuLGWiB5ZLIt3VDALcVkN0rc=
Subject key identifier: D9:79:39:62:5F:51:07:D3:35:3C:D8:EC:83:A2:C2:8D:08:5F:EC:2C
Certificate issuer: /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial: 0E
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/0B6DE4824F9611EDA241718BF1222468.roa
Signing time: Wed 19 Oct 2022 10:08:57 +0000
ROA not before: Wed 19 Oct 2022 10:08:54 +0000
ROA not after: Fri 31 Mar 2023 10:08:54 +0000
asID: 329159
IP address blocks: 102.214.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Validity
Not Before: Oct 19 10:08:54 2022 GMT
Not After : Mar 31 10:08:54 2023 GMT
Subject: CN=634fccb9-39d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:83:8e:c2:5b:44:cf:34:82:73:2c:a8:63:4e:
8b:27:47:c5:43:99:64:43:60:49:88:ed:db:9b:43:
f2:6d:0a:c7:41:56:39:ec:12:cc:d5:21:b8:4a:c4:
4e:9e:7c:3f:38:f4:5d:29:77:cb:a2:ee:e7:4a:bd:
f3:64:85:12:48:27:4e:3c:b9:19:4d:35:c2:74:ed:
89:36:97:ff:20:ee:af:81:3a:3c:86:86:70:3d:a4:
58:79:a3:59:f6:65:fc:56:a2:e1:98:bb:9d:f0:c8:
30:d2:d5:47:fd:70:d2:3a:4f:00:5b:df:0d:c6:60:
9b:08:d5:fa:c4:8a:45:c8:e1:54:a7:3b:ac:86:98:
6a:43:5c:6c:9f:36:a4:2e:29:90:c4:81:44:43:0e:
33:79:bd:c8:a5:b5:91:ee:60:c3:5d:29:49:69:7f:
f7:d7:b5:f1:ae:7e:22:95:98:3b:9b:91:aa:0c:7b:
b4:04:1f:32:04:3d:0b:be:36:c3:ea:ae:fb:5a:b0:
b8:47:9d:28:7c:77:5a:4f:62:e7:6a:58:60:2a:be:
20:0c:ed:a0:4c:89:9f:cf:18:23:df:7a:f4:15:88:
3f:d5:26:69:f6:33:bd:10:e3:6d:7c:4b:5f:b6:e3:
68:18:45:e9:6b:15:03:6f:ff:1b:0a:47:f1:73:d7:
ed:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:79:39:62:5F:51:07:D3:35:3C:D8:EC:83:A2:C2:8D:08:5F:EC:2C
X509v3 Authority Key Identifier:
keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/0B6DE4824F9611EDA241718BF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.201.0/24
Signature Algorithm: sha256WithRSAEncryption
39:73:62:45:45:30:55:e6:2d:3e:62:95:8a:ac:92:de:84:f2:
15:20:b5:5f:20:40:6e:92:b5:a0:36:0e:a9:29:ef:aa:9e:67:
e8:eb:a7:06:9b:b5:86:2d:89:52:cf:c7:3a:75:67:e6:6c:1d:
4b:18:d6:94:13:7c:7e:76:10:e6:83:11:74:e0:88:62:42:fe:
49:9e:41:58:81:3c:45:25:ff:1a:f9:3b:5e:9d:bb:cf:4a:b2:
90:80:02:98:60:e5:bc:fe:5e:03:f2:6c:b2:3f:66:f3:48:c7:
c2:11:1d:45:96:3e:af:34:b9:9b:0f:b9:b5:80:b1:af:a3:3d:
a0:fc:4d:32:10:3a:eb:f7:9c:f0:32:8e:b8:5e:10:c8:dc:e7:
d2:cf:5e:23:99:2f:51:e5:0c:94:01:ab:ff:54:17:e9:b8:21:
b4:d0:18:5d:8a:43:3f:7f:90:b2:b4:a9:de:fb:00:12:46:5c:
f3:6a:b8:37:1d:b7:32:0c:7b:7c:f9:ff:11:9c:bd:5c:7b:a0:
7f:cb:1e:92:d6:b9:0e:c3:80:85:14:26:87:45:8e:98:e1:93:
c5:77:af:25:89:19:a8:83:e1:da:f8:b4:2e:85:ab:af:75:ef:
58:90:ae:5c:d2:1b:55:d7:9f:ba:0a:e7:33:ec:38:10:b7:dd:
25:1b:2a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:56 2023 by rpki-client on console-ams.rpki-client.org