Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/6455B18EA55E11EC94380B875A40D577.roa
File: 6455B18EA55E11EC94380B875A40D577.roa (raw, json)
Hash identifier: ypTG5sGlgoYGioY7p+Nz9sMxHpgPslkrDVEHQortUHk=
Subject key identifier: A2:AF:ED:33:5C:13:1A:8F:A3:9E:64:AF:17:68:18:1E:B4:AC:9D:F3
Certificate issuer: /CN=F3666101AF/serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
Certificate serial: 10
Authority key identifier: 35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/6455B18EA55E11EC94380B875A40D577.roa
Signing time: Wed 16 Mar 2022 19:22:17 +0000
ROA not before: Wed 16 Mar 2022 19:22:12 +0000
ROA not after: Sat 16 Mar 2024 19:22:12 +0000
asID: 29286
IP address blocks: 102.67.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3666101AF/serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
Validity
Not Before: Mar 16 19:22:12 2022 GMT
Not After : Mar 16 19:22:12 2024 GMT
Subject: CN=623238e9-cd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:47:b4:97:ec:9f:8e:06:13:08:47:bc:19:66:
3f:69:06:ec:39:ce:7d:99:d8:85:ab:b7:e2:6d:55:
cb:29:5a:e2:b6:7f:e5:bb:c7:c4:48:9e:47:7b:71:
6d:4b:72:56:b4:47:68:b8:f6:ab:83:a7:23:d7:32:
e7:eb:fc:74:c5:99:79:1e:65:3b:04:8c:39:a0:fc:
61:f9:af:14:ed:a1:f5:1c:f4:b4:89:cb:58:db:e2:
b7:74:b6:b5:3c:8d:9c:a3:a5:18:ef:12:53:f0:2e:
f9:2f:6d:f0:ad:63:0f:c0:86:92:98:78:8d:ff:b8:
aa:a6:ab:b0:b9:54:d3:20:16:ee:7f:73:ed:94:7e:
85:f1:19:37:f9:6f:0a:cd:fb:5c:ea:a9:14:2e:73:
f0:d0:58:8c:70:be:9f:e9:f1:12:8d:a5:c0:fc:7f:
13:2a:fa:3c:b6:f8:09:88:e1:b5:7e:ae:76:0b:86:
7f:a1:67:81:cb:08:12:18:18:9e:e2:8a:fa:72:9a:
26:22:a1:03:ed:03:72:12:d9:11:98:69:68:ac:51:
0d:90:ef:8a:5a:8c:c9:3f:93:09:bd:b4:c6:5b:fd:
2f:d7:ba:ce:9e:dd:e8:43:5a:21:ae:6c:df:32:f8:
80:95:43:1d:e1:7b:07:cf:ea:07:82:df:1f:5d:26:
0f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AF:ED:33:5C:13:1A:8F:A3:9E:64:AF:17:68:18:1E:B4:AC:9D:F3
X509v3 Authority Key Identifier:
keyid:35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/6455B18EA55E11EC94380B875A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.67.168.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:15:f9:f3:5c:70:88:c8:e0:37:e0:a6:69:6a:e2:a1:36:26:
c7:2f:56:77:d2:42:8f:c3:1a:db:8d:bf:34:33:f1:27:84:a0:
a5:1c:ee:97:8e:1b:77:ee:e8:c5:79:1a:7d:15:f6:ef:98:ab:
cb:a1:30:c7:14:da:60:90:5b:b3:f4:9b:86:3b:dd:71:62:b3:
63:47:c1:be:1d:c0:4c:c4:ed:4a:1a:33:3d:42:c8:c3:fe:ff:
b3:56:2b:22:1e:40:e3:22:5d:f1:a1:9e:8c:d7:83:23:e4:4a:
a5:ab:5e:f3:4a:01:b5:a9:fd:67:e3:f2:43:7f:d8:f7:f3:4b:
95:a4:a9:36:e6:36:7d:5e:20:a7:90:64:eb:78:4b:1c:48:0d:
87:a9:0e:89:7f:78:b9:25:51:99:bf:2d:37:82:04:6a:a2:bc:
83:05:7f:cd:eb:b9:3d:9c:96:dd:4b:c6:c6:3e:ce:92:82:ad:
a0:f5:17:4d:10:74:5c:25:7d:4e:de:f6:ab:58:f0:25:9c:8d:
c1:30:20:6d:79:91:b7:7e:a4:c3:ae:3f:1f:cb:6f:a8:ff:0a:
ea:3c:22:25:85:a3:37:6c:1f:4a:63:b8:67:39:46:bf:1b:46:
c8:2c:b8:54:28:6d:9a:46:52:45:3b:a6:3f:5b:32:b4:ef:ee:
42:24:94:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org