Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366742F/B09C4EFE3E6211EB82352F27F8AEA228/2EE1E4A0E5F511ECB465DAE0F1222468.roa
File: 2EE1E4A0E5F511ECB465DAE0F1222468.roa (raw, json)
Hash identifier: 9Dj6eyKAfNdQG9Sy4TPQHYreE06u4FxLs8yxUb+AQcQ=
Subject key identifier: C9:27:AC:8A:D3:45:6E:83:96:59:0E:EF:9C:31:7A:E9:91:B7:AC:09
Certificate issuer: /CN=F366742FAF/serialNumber=452EABFC76D2DFC161F4E23AB30C069B1329094A
Certificate serial: 0236
Authority key identifier: 45:2E:AB:FC:76:D2:DF:C1:61:F4:E2:3A:B3:0C:06:9B:13:29:09:4A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RS6r_HbS38Fh9OI6swwGmxMpCUo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366742F/B09C4EFE3E6211EB82352F27F8AEA228/2EE1E4A0E5F511ECB465DAE0F1222468.roa
Signing time: Tue 07 Jun 2022 00:02:56 +0000
ROA not before: Tue 06 Jun 2023 00:00:52 +0000
ROA not after: Tue 06 Jun 2023 00:00:52 +0000
asID: 34010
IP address blocks: 102.165.183.0/28 maxlen: 29
2001:43f8:1140:1::/64 maxlen: 65
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 566 (0x236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366742FAF/serialNumber=452EABFC76D2DFC161F4E23AB30C069B1329094A
Validity
Not Before: Jun 6 00:00:52 2023 GMT
Not After : Jun 6 00:00:52 2023 GMT
Subject: CN=629e95b0-e227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:8e:87:78:23:1b:41:08:3e:ea:9d:86:09:
57:84:25:a0:9c:d1:7d:97:49:79:d4:5e:7a:26:7b:
7e:81:c9:82:3a:5a:a6:61:7d:12:ce:c9:41:8f:9c:
96:d7:8a:b2:64:f8:e2:c3:03:3f:56:8f:a9:59:79:
77:db:8a:19:24:39:44:71:47:6a:f6:0e:91:bf:49:
6e:a6:8c:91:09:69:36:3e:1a:7f:d7:77:3d:39:ca:
cc:71:f5:3a:c2:63:40:0a:e4:43:95:91:37:0d:e6:
fb:14:40:1b:4b:a1:1e:c5:07:ca:32:68:1f:4f:01:
9d:2a:49:97:ff:cb:7f:58:e0:70:3f:5b:71:eb:0f:
0e:ee:98:88:d9:33:61:a8:65:4c:f1:2b:96:e5:a1:
17:27:81:b4:01:29:3d:fe:ba:ef:43:d8:9c:d4:72:
54:48:a0:3a:18:e2:f1:aa:88:78:30:53:e1:28:d7:
cc:e7:97:e6:00:0f:33:ed:e4:b3:56:19:32:85:aa:
25:60:55:5f:01:8f:d6:3d:05:8d:95:85:1b:ec:be:
03:22:33:21:97:6d:48:f9:44:a9:4d:73:64:b3:91:
75:8c:95:e0:f6:7c:6a:e6:6d:73:86:e1:0f:55:94:
bf:3f:a8:bd:36:e8:0a:0a:c2:be:42:14:a4:72:7d:
11:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:27:AC:8A:D3:45:6E:83:96:59:0E:EF:9C:31:7A:E9:91:B7:AC:09
X509v3 Authority Key Identifier:
keyid:45:2E:AB:FC:76:D2:DF:C1:61:F4:E2:3A:B3:0C:06:9B:13:29:09:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366742F/B09C4EFE3E6211EB82352F27F8AEA228/RS6r_HbS38Fh9OI6swwGmxMpCUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RS6r_HbS38Fh9OI6swwGmxMpCUo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366742F/B09C4EFE3E6211EB82352F27F8AEA228/2EE1E4A0E5F511ECB465DAE0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.183.0/28
IPv6:
2001:43f8:1140:1::/64
Signature Algorithm: sha256WithRSAEncryption
82:d0:a4:1a:de:66:02:cb:c6:1d:0f:38:50:21:42:a8:38:93:
42:ee:1d:16:53:a7:d3:62:51:0d:79:32:bc:2e:5c:a1:23:54:
83:bf:ef:46:92:0a:c6:78:ba:f4:e0:70:cd:43:95:2e:20:43:
a6:2b:60:98:4b:43:bc:1f:dc:c9:06:94:7a:2d:2e:31:60:17:
67:63:00:bf:11:49:88:1d:8d:4d:53:0a:44:e6:57:0b:ed:07:
99:78:58:23:d5:69:59:cc:9f:01:f7:d1:51:78:59:cb:9c:4d:
2f:04:9a:b0:fd:b1:65:79:56:49:70:10:1a:f3:0a:4f:cd:74:
1c:ad:61:c1:08:95:27:1c:af:f5:ab:0b:4e:ee:91:8d:dd:78:
d5:dc:a5:e3:b6:13:c4:c2:18:38:e0:37:81:a5:0e:81:f1:b8:
fd:8d:9c:65:b9:ac:23:1b:ae:61:33:c8:e1:cc:7d:0e:21:79:
3b:76:05:c2:df:3b:b7:81:8a:dd:12:67:22:bd:4e:48:51:53:
eb:07:c3:6b:40:bf:30:fe:2f:ca:31:bb:b1:f2:42:e9:a8:66:
6d:26:30:5f:c9:84:45:83:70:23:fd:95:b9:18:f4:c4:a9:be:
3b:b3:67:40:74:aa:78:61:d8:dc:2f:89:8e:c4:32:5e:0c:00:
8f:15:8e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org