Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/C20D462A9D0311EB8BA13781F8AEA228.roa
File: C20D462A9D0311EB8BA13781F8AEA228.roa (raw, json)
Hash identifier: WMPI6QSlY7gRfMXO43ZqLxEIg43VQ5lmoY2ISBzCcNE=
Subject key identifier: 11:76:D6:ED:B2:FD:66:50:35:A2:A1:47:49:AA:DA:31:B5:95:4D:5B
Certificate issuer: /CN=F36702EEAF/serialNumber=B0F8FFA5BBCECD313DF98EA44A4F3EA5CFD7C47C
Certificate serial: 18
Authority key identifier: B0:F8:FF:A5:BB:CE:CD:31:3D:F9:8E:A4:4A:4F:3E:A5:CF:D7:C4:7C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/C20D462A9D0311EB8BA13781F8AEA228.roa
Signing time: Wed 14 Apr 2021 09:28:23 +0000
ROA not before: Wed 14 Apr 2021 09:28:12 +0000
ROA not after: Thu 28 Apr 2022 09:28:12 +0000
asID: 140595
IP address blocks: 102.164.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36702EEAF/serialNumber=B0F8FFA5BBCECD313DF98EA44A4F3EA5CFD7C47C
Validity
Not Before: Apr 14 09:28:12 2021 GMT
Not After : Apr 28 09:28:12 2022 GMT
Subject: CN=6076b5b7-568d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:6c:8b:e1:f4:8a:60:06:ac:f6:c1:a9:ea:
79:02:62:90:c6:ed:d8:6a:bd:13:c3:89:5f:a2:26:
03:20:a2:9f:8f:2e:d5:0f:2c:06:a3:74:82:9a:40:
81:11:0e:a4:95:eb:0c:f8:36:be:17:9d:c9:2a:d5:
fd:40:8c:34:de:34:db:f4:db:8f:34:e4:14:31:f5:
db:42:49:44:7b:61:a5:b7:24:4d:02:e9:9a:94:b6:
9b:20:48:60:49:72:89:1a:83:15:b0:68:04:72:8a:
f6:bc:71:f6:4b:5e:4a:bf:8d:48:cb:26:8b:9e:4b:
69:2d:76:6f:05:2c:aa:99:2f:8a:1b:ab:7c:bd:6b:
2e:17:9f:f4:e3:a5:32:bd:57:bd:a3:cc:11:73:38:
5a:e1:9d:bf:05:b4:ee:e7:dd:44:6b:7c:37:7b:c5:
6d:2f:4e:ba:c8:9f:77:86:d6:b4:2f:57:8b:7a:05:
3d:17:f9:15:d1:e4:4f:13:f0:31:18:a1:3d:ed:52:
b2:24:9f:5c:e0:5a:57:78:ba:55:4e:25:b7:19:8d:
3b:46:e4:b7:29:e7:eb:1b:e5:8b:72:d8:3f:74:63:
eb:c7:dc:a5:16:cc:49:14:f1:9f:e1:7f:88:57:17:
96:10:58:5a:8d:dd:61:5d:dd:5a:29:d0:02:f1:9a:
85:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:76:D6:ED:B2:FD:66:50:35:A2:A1:47:49:AA:DA:31:B5:95:4D:5B
X509v3 Authority Key Identifier:
keyid:B0:F8:FF:A5:BB:CE:CD:31:3D:F9:8E:A4:4A:4F:3E:A5:CF:D7:C4:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/C20D462A9D0311EB8BA13781F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.164.56.0/22
Signature Algorithm: sha256WithRSAEncryption
58:b7:6e:77:f7:8e:f8:f4:2f:12:d8:54:cb:6b:4d:fd:13:b4:
71:87:0e:48:b4:b9:a3:e0:95:4b:f0:20:62:ff:02:c6:7d:ba:
23:73:1d:ce:48:3d:db:fa:5d:59:d3:b0:5e:7f:02:06:cf:5e:
9e:be:c8:1a:f9:2e:d4:61:65:90:4e:6e:d5:de:2b:3a:1c:1c:
e9:c3:aa:8b:a9:bc:7a:64:54:78:a4:15:a2:a6:8e:31:ed:89:
43:9f:b9:37:95:83:b0:89:a7:83:df:69:2e:ee:a3:87:93:10:
06:27:df:42:d9:5f:45:4c:e5:a1:01:12:b9:d4:d8:34:53:88:
fc:54:3d:01:5c:60:ee:f1:c3:2a:fe:48:55:13:fa:06:04:de:
2f:52:74:f5:ec:87:c8:ea:79:52:ad:0e:28:f9:ec:d9:3b:72:
28:74:3c:27:43:40:d5:fa:65:ca:d3:76:21:2e:6d:7b:d8:8c:
93:3f:da:41:d8:92:d6:a7:a4:4a:3d:65:7e:55:75:3e:40:79:
24:89:4f:07:a9:d8:de:b1:26:8d:2e:ae:c6:0f:85:ff:70:06:
57:63:94:4a:d0:30:9a:c3:c0:b8:e7:ae:7e:87:b8:f7:10:bf:
d0:c3:1e:61:3e:72:b8:c2:25:84:d5:e8:57:03:ec:74:dd:b6:
8c:13:59:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-ams.rpki-client.org