Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/5D4B1A584F6A11EDA32D378FF1222468.roa
File: 5D4B1A584F6A11EDA32D378FF1222468.roa (raw, json)
Hash identifier: v+JqkvjnKHG9uLBbCfuGtzWiNbg7aOPEvL9sb+snrwM=
Subject key identifier: A7:4E:7C:5A:72:7C:87:C3:98:0E:B2:39:4B:3B:D1:A2:6A:49:63:25
Certificate issuer: /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial: 0B
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/5D4B1A584F6A11EDA32D378FF1222468.roa
Signing time: Wed 19 Oct 2022 04:56:17 +0000
ROA not before: Wed 19 Oct 2022 04:56:12 +0000
ROA not after: Fri 31 Mar 2023 04:56:12 +0000
asID: 329159
IP address blocks: 102.214.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Validity
Not Before: Oct 19 04:56:12 2022 GMT
Not After : Mar 31 04:56:12 2023 GMT
Subject: CN=634f8371-ca90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c1:36:d1:0e:3c:62:d1:8e:08:37:e2:cc:f9:
d1:64:5f:21:4e:db:1e:2c:af:10:d9:2a:7e:65:8c:
b2:f6:91:6b:55:82:2e:2f:7a:16:38:ef:70:d3:eb:
96:90:95:41:4e:41:34:bc:b9:ba:bb:1e:ef:9c:57:
4c:34:ea:75:23:44:68:19:01:02:6f:9e:cc:81:00:
c1:2b:d8:96:94:e0:93:e4:4a:14:47:02:18:4b:21:
93:9a:5b:51:48:a6:d4:2f:4f:f5:aa:7c:69:a7:42:
a9:5e:a0:06:67:6d:fb:ab:88:24:a5:b4:62:0d:1e:
99:26:c6:07:46:0d:81:ae:73:14:00:39:a6:be:3b:
b5:66:6e:94:48:88:3e:a4:90:3f:14:63:ed:13:b0:
eb:b5:4e:1f:f3:a3:34:2f:94:75:13:ca:0a:95:75:
54:1e:03:04:aa:c1:c0:5c:17:6d:53:ee:99:da:31:
76:9c:2d:3f:b1:91:58:b5:31:73:b0:23:37:92:dd:
58:8f:c8:f6:06:10:3a:75:13:a0:00:c3:93:9a:67:
93:7a:fe:e7:92:be:a2:73:40:1c:9e:ca:b8:87:45:
5a:83:e1:7c:1e:4e:29:38:96:6c:ae:b9:b1:df:8d:
1a:a2:2d:1d:77:86:bf:51:75:3b:35:c0:16:a0:db:
62:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4E:7C:5A:72:7C:87:C3:98:0E:B2:39:4B:3B:D1:A2:6A:49:63:25
X509v3 Authority Key Identifier:
keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/5D4B1A584F6A11EDA32D378FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.214.200.0/22
Signature Algorithm: sha256WithRSAEncryption
48:84:11:61:ba:d5:1d:16:aa:b7:fc:f6:82:e0:ec:78:74:e5:
4c:22:19:6b:13:c8:78:88:83:f9:33:43:ae:6c:cb:a6:33:40:
b5:e3:9b:5d:51:59:f7:f1:ab:bf:db:1d:1b:13:0c:a5:03:2f:
61:ab:95:db:a7:16:fa:59:be:67:5d:f2:23:04:ac:fd:9b:71:
d9:f3:83:fa:1d:d0:de:75:c2:1f:a5:c1:59:ae:67:23:91:29:
e6:28:8e:4d:ac:21:f4:0b:5e:79:17:10:20:07:7d:f1:99:86:
9c:6c:dd:7b:52:8b:af:76:ae:1d:a7:dc:bd:a6:b5:0d:f2:67:
0b:00:89:97:62:a1:d2:37:16:b9:76:c7:dc:4f:1d:3c:db:74:
4a:af:7c:c7:29:51:62:02:e4:0b:57:f8:f0:6a:d7:64:e9:48:
6c:17:1f:f9:20:35:7b:e2:94:97:23:ec:80:b8:e7:61:d6:b1:
dc:6e:22:62:e5:57:f7:b5:52:74:46:4d:5f:f0:43:34:d1:8f:
51:74:ae:bd:9d:92:9c:24:25:08:c6:54:71:84:11:e4:7b:b4:
9b:27:91:fd:af:ed:e3:e4:f7:27:49:78:26:02:31:cb:64:6f:
2a:4e:9f:18:0e:8c:8d:a8:d6:e4:21:67:ee:24:08:0c:85:6c:
7c:44:03:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:59 2023 by rpki-client on console-fra.rpki-client.org