Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/795151849BA311ECBBAB44795A40D577.roa
File: 795151849BA311ECBBAB44795A40D577.roa (raw, json)
Hash identifier: 4TmwP9Rifq4h4l5mIPcQ2yyvs98mYX7W29wUsyn8K8c=
Subject key identifier: B2:C6:31:C4:92:CE:BC:C6:11:1A:F1:E0:05:59:CC:89:1B:48:AA:6F
Certificate issuer: /CN=F3666101AF/serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
Certificate serial: 02
Authority key identifier: 35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/795151849BA311ECBBAB44795A40D577.roa
Signing time: Fri 04 Mar 2022 10:11:36 +0000
ROA not before: Fri 04 Mar 2022 10:11:32 +0000
ROA not after: Mon 04 Mar 2024 10:11:32 +0000
asID: 29286
IP address blocks: 102.67.168.0/24 maxlen: 24
102.67.169.0/24 maxlen: 24
102.67.170.0/24 maxlen: 24
102.67.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3666101AF/serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
Validity
Not Before: Mar 4 10:11:32 2022 GMT
Not After : Mar 4 10:11:32 2024 GMT
Subject: CN=6221e5d8-f1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9d:a4:cc:aa:eb:b7:f5:b3:5d:50:30:9f:34:
25:6b:15:6b:06:65:2e:c8:d2:e6:9d:1b:39:ae:bc:
81:f1:6f:15:ab:a4:83:fe:24:60:ed:ba:99:09:30:
71:a1:dc:a2:bf:cb:72:49:b4:52:c2:74:d8:da:6e:
46:ad:27:3c:7c:78:67:eb:a9:1a:16:5f:9d:10:dd:
69:de:0d:2f:8b:e7:ea:bc:7b:6f:c1:be:4f:f4:cd:
b5:d3:8a:84:89:24:1d:fd:aa:6d:29:32:f1:37:0c:
c7:bf:57:99:f6:fc:fc:3d:56:17:b0:dd:9d:40:26:
6b:3a:80:9f:e0:02:42:cb:dd:9e:b1:89:2f:bc:ff:
68:17:94:b4:99:4c:0a:a6:d9:74:9f:55:6f:01:56:
c0:7b:58:71:65:7a:9e:36:7c:70:de:60:d2:8f:f6:
63:e4:b2:97:4f:0a:0f:1c:64:51:b1:a9:a5:73:d9:
8b:90:94:d5:c1:da:db:dc:5d:b7:5f:96:89:b8:06:
9c:be:14:08:17:36:8e:c1:04:3a:f3:b0:11:26:35:
72:ff:49:1c:2b:3d:4f:fc:41:48:63:c2:44:48:42:
d1:d1:7d:9f:33:02:46:b9:75:3e:63:c3:1b:77:31:
7f:bb:90:fe:03:af:a2:7c:83:be:ce:c4:37:71:85:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C6:31:C4:92:CE:BC:C6:11:1A:F1:E0:05:59:CC:89:1B:48:AA:6F
X509v3 Authority Key Identifier:
keyid:35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/795151849BA311ECBBAB44795A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.67.168.0/22
Signature Algorithm: sha256WithRSAEncryption
92:c5:7e:17:ee:dc:2a:ef:f5:45:6c:6a:94:7e:ae:d8:a3:2a:
fb:45:70:6d:c6:d3:a1:dd:9b:db:a2:97:c3:a4:a8:32:e5:14:
3d:0f:41:86:d5:35:98:81:84:7e:72:91:28:b5:eb:3b:1b:83:
9d:d1:b9:97:b2:46:d9:53:00:f1:e5:32:12:1d:de:4c:29:b3:
0d:f9:ce:d0:d6:d1:ab:3f:00:96:4d:50:e9:b5:73:b6:3d:c1:
21:7f:b2:96:9e:65:69:15:e6:ce:d2:e1:2b:6a:bb:38:8b:ef:
89:10:c7:4a:b4:ed:a4:e5:13:d6:db:2e:22:5d:e7:da:ae:91:
fb:bc:31:1e:80:32:01:eb:ea:77:e7:d2:4d:bb:08:0d:e3:77:
ac:dc:8d:d2:74:6b:e5:21:39:85:ef:72:27:5b:c4:0a:a2:d7:
dc:22:a8:35:f0:bd:93:8a:3d:57:c0:f4:1f:4d:91:b2:13:81:
65:cd:55:05:8b:8b:64:a2:08:6d:08:90:5e:71:52:34:a8:48:
0d:f5:48:51:f6:af:23:26:30:46:9b:8b:01:64:38:10:b1:dd:
1e:c1:82:41:35:4d:ad:c3:8f:fc:86:54:81:37:8d:f8:11:fd:
bb:94:7a:19:24:8c:ab:1e:ba:be:43:3e:e1:b6:3e:54:a1:a9:
da:1f:e1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org